Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party social media tools that collect personal information in Connecticut? What are the requirements?

Use of Third-Party Social Media Tools in Connecticut

Connecticut has strict laws regarding the collection and safeguarding of personal information, including social security numbers [3.1]. Any person who collects Social Security numbers in the course of business must create a privacy protection policy that protects the confidentiality of Social Security numbers, prohibits unlawful disclosure of Social Security numbers, and limits access to Social Security numbers [3.1].

If you plan to use third-party social media tools that collect personal information, you must ensure that the tools comply with Connecticut’s privacy protection policy requirements [3.1]. You should review the privacy policies of the tools you plan to use and ensure that they protect the confidentiality of personal information and limit access to such information.

Additionally, if you collect personal data through third-party social media tools, you must disclose to individuals from whom personal data is requested the legal authority under which you are empowered to collect and maintain the personal data, the individual’s rights pertaining to such records under the Personal Data Act and the agency’s regulations, the known consequences arising from supplying or refusing to supply the requested personal data, and the proposed use to be made of the requested personal data [5.1].

If you plan to disclose personal data to third parties, you must ensure that such disclosure is permitted by law [4.2]. The Commission shall not disclose to the public personal records of a confidential or private nature except as required under state and federal law [4.2].

In Connecticut, personal data is defined as any information which because of name, identifying number, mark or description can be readily associated with a particular person [2.1].

Restrictions on Social Security Numbers

Connecticut law prohibits publicly posting or displaying an individual’s Social Security number, printing an individual’s Social Security number on any card required for the individual to access products or services, requiring an individual to transmit their Social Security number over the Internet unless the connection is secure or the Social Security number is encrypted, or requiring an individual to use their Social Security number to access an Internet website unless a password or unique personal identification number or other authentication device is also required to access the website [3.2].

Conclusion

In summary, you can use third-party social media tools that collect personal information in Connecticut if you ensure that the tools comply with Connecticut’s privacy protection policy requirements, disclose to individuals from whom personal data is requested the legal authority under which you are empowered to collect and maintain the personal data, the individual’s rights pertaining to such records under the Personal Data Act and the agency’s regulations, the known consequences arising from supplying or refusing to supply the requested personal data, and the proposed use to be made of the requested personal data, and ensure that any disclosure of personal data to third parties is permitted by law. Additionally, you must comply with Connecticut’s restrictions on the use of Social Security numbers [3.1][3.2].

Source(s):
Jurisdiction

Connecticut