September 19, 2014
September 18, 2014
September 17, 2014
How to Report a Data Breach in Connecticut
All business owners in Connecticut need to learn how to report a data breach. A new Connecticut law requires business owners to notify the Office of the Attorney General in the event of a breach of security involving unauthorized access to or acquisition of electronic files, media, databases or computerized data containing personal information. Conn. Gen. Stat. Sec. 36a-701b
Failure to properly report a data breach may constitute a violation of the Connecticut Unfair Trade Practices Act ("CUTPA").
Penalties under CUTPA can include fines, multiple damages and attorneys 'fees. Conn. Gen Stat. Secs. 42-110a-42-110q
The Office of Attorney General has set up the following email and phone contacts to assist Connecticut businesses in reporting data breach:
Email reports to: firstname.lastname@example.org
For questions call: 860-808-5400
Businesses should include the following in any report to the Attorney General:
- Name of person reporting, name of business and contact information.
- A list of the types of personal information that were or are reasonably believed to have been the subject of the breach.
- A general description of the breach, including the date of the breach and the number of Connecticut residents affected.
- Whether the notification was delayed because of a law enforcement investigation (if applicable).
<span class="advertise"> Advertisement </span>
- Preparing to Deal with Digital’s Looming Dark Side
- Federal Appellate Court Limits the Computer Fraud and Abuse Act's Scope
- Google, the House of Lords and the timing of the EU Data Protection Regulation
- Trademark and Domain Name Scams: Scammers Still Be Scamming
- Snapchat Settles Federal Trade Commission (FTC) Charges
- U.S. Supreme Court Creates Uniform Test for Standing in False Advertising Cases