Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party customer service tools that collect personal information in Connecticut? What are the requirements?

Use of Third-Party Customer Service Tools in Connecticut

Connecticut has regulations in place to protect personal data, including the Personal Data Act [2.1] and regulations on the maintenance and disclosure of personal data [3.2][3.4]. If you are using third-party customer service tools that collect personal information in Connecticut, you must ensure that you are complying with these regulations.

Requirements for Using Third-Party Customer Service Tools

When using third-party customer service tools that collect personal information in Connecticut, you must ensure that:

  • The personal data collected is relevant and necessary to accomplish the lawful purpose of your business [3.4].
  • You have a personal service agreement with the third-party contractor [4.1].
  • You verify the identity of any person requesting access to their own personal data [3.2].
  • You disclose to individuals from whom personal data is requested the name of the agency and division requesting the data, the legal authority under which the agency is empowered to collect and maintain the personal data, the individual’s rights pertaining to such records under the Personal Data Act and the agency’s regulations, the known consequences arising from supplying or refusing to supply the requested personal data, and the proposed use to be made of the requested personal data [3.3].
  • You maintain all records with accurateness and completeness [3.4].
  • You allow individuals to contest the content of their personal data records and add a statement to their personal data record setting forth what they believe to be an accurate, complete, and relevant version of the personal data in question [3.5].

Conclusion

To use third-party customer service tools that collect personal information in Connecticut, you must comply with the Personal Data Act and regulations on the maintenance and disclosure of personal data. Ensure that you have a personal service agreement with the third-party contractor, verify the identity of any person requesting access to their own personal data, disclose the necessary information to individuals from whom personal data is requested, maintain accurate and complete records, and allow individuals to contest the content of their personal data records.

Source(s):
Jurisdiction

Connecticut