Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party cloud storage services that collect personal information in Connecticut? What are the requirements?

Based on the context documents provided, there are no specific regulations or requirements in Connecticut that prohibit the use of third-party cloud storage services that collect personal information. However, any entity that collects personal data in Connecticut must comply with the Personal Data Act and its regulations, including the requirements for the maintenance and disclosure of personal data.

Personal Data Collection and Maintenance Requirements

Under Connecticut law, personal data will not be maintained unless it is relevant and necessary to accomplish the lawful purpose of the agency or entity collecting it [3.4]. The entity must also collect and maintain all records with accuracy and completeness [3.4][4.1]. If the entity finds irrelevant or unnecessary public records in its possession, it must dispose of the records in accordance with its records retention schedule and with the approval of the Public Records Administrator [3.4][4.1].

Personal Data Disclosure Requirements

If an entity maintains personal data on an individual, the individual has the right to request information about the category and location of the personal data maintained on them, and the procedures available to review the records [3.2]. The entity must also disclose to any person upon written request all personal data concerning that individual which is maintained by the entity, except where non-disclosure is required or specifically permitted by law [3.2]. The procedures for disclosure shall be in accordance with Connecticut General Statutes Sections 1-15 through 1-21k [3.2].

Conclusion

While there are no specific regulations that prohibit the use of third-party cloud storage services that collect personal information in Connecticut, entities that collect personal data must comply with the Personal Data Act and its regulations. This includes requirements for the maintenance and disclosure of personal data.

Source(s):
Jurisdiction

Connecticut