Connecticut House Bill HB05427

Connecticut 2012 Regular Session

• Introduced: 3/6/12
• Refer: 3/6/12

Caption

An Act Concerning Notice To The Attorney General Of Data Security Breaches Involving The Disclosure Of Personal Information.

Impact

This bill amends existing statutes to strengthen the state's framework for data breach notifications, potentially increasing accountability among businesses handling sensitive personal information. By implementing these requirements, the state aims to fortify consumer protections and ensure that individuals are informed swiftly about breaches that may affect their personal data. The provisions are designed to strike a balance between effective communication to the public and preserving the integrity of ongoing investigations.

Summary

House Bill 5427 is aimed at enhancing data security protocols by mandating immediate notification to the Attorney General in cases of data security breaches that involve personal information. The bill definitions include key terms, establishing what constitutes a 'breach of security' and the responsibilities of businesses that maintain such data. Specifically, the bill requires that notice be provided to both the Attorney General and affected residents quickly after the discovery of a breach, unless law enforcement requests a delay to avoid compromising an investigation.

Contention

There are significant discussions regarding the potential burden this bill may place on businesses, particularly smaller enterprises that may struggle to manage the logistical and financial implications of such immediate notification requirements. Critics argue that without proper support and resources, the bill might disproportionately affect small businesses compared to larger companies that typically have more resources for compliance. Additionally, there could be concerns regarding how 'personal information' is defined and the extent to which other entities must comply with these regulations.