Ask Reggi Your Question Now
Can I store personal information about my customers in Connecticut? What are the requirements?
Storing Personal Information in Connecticut
Connecticut has regulations in place regarding the collection and maintenance of personal data. The Personal Data Act, Section 4-190 (9) of the Connecticut General Statutes, defines the categories of personal information that can be collected [1.1][2.1][3.1].
According to the regulations, personal data should only be maintained if it is relevant and necessary to accomplish the lawful purpose of the agency [2.3]. Additionally, the Connecticut State Labor Department is responsible for verifying the identity of any person requesting access to their own personal data [2.2].
If you plan to store personal information about your customers in Connecticut, you must ensure that the information falls under one of the categories defined by the Personal Data Act. You must also ensure that the information is relevant and necessary for your business purposes.
Furthermore, if you maintain personal data, you must collect and maintain all records with accuracy and completeness [2.3]. You must also disclose to individuals, upon request, the name of the agency and the division within the agency which is requesting the data, the legal authority under which the agency is empowered to collect and maintain the personal data, the individual’s rights pertaining to such records under the Personal Data Act and the agency’s regulations, the known consequences arising from supplying or refusing to supply the requested personal data, and the proposed use to be made of the requested personal data [2.4].
In summary, you can store personal information about your customers in Connecticut if it falls under one of the categories defined by the Personal Data Act and is relevant and necessary for your business purposes. You must also ensure that you collect and maintain all records with accuracy and completeness and disclose certain information to individuals upon request.
Source(s):
- [1.1] Personal data—definitions
- [2.1] Personal data definitions
- [3.1] Personal data
- [2.2] Maintenance of personal data—disclosure
- [2.3] Maintenance of personal data—general
- [2.4] Uses to be made of personal data—general disclosure to individuals from whom personal data is requested
Jurisdiction
Connecticut