iAll business owners in Connecticut need to learn how to report a data breach. A new Connecticut law requires business owners to notify the Office of the Attorney General in the event of a breach of security involving unauthorized access to or acquisition of electronic files, media, databases or computerized data containing personal information. Conn. Gen. Stat. Sec. 36a-701b
Failure to properly report a data breach may constitute a violation of the Connecticut Unfair Trade Practices Act ("CUTPA").
Penalties under CUTPA can include fines, multiple damages and attorneys 'fees. Conn. Gen Stat. Secs. 42-110a-42-110q
The Office of Attorney General has set up the following email and phone contacts to assist Connecticut businesses in reporting data breach:
Email reports to: ag.breach@ct.gov
For questions call: 860-808-5400
Businesses should include the following in any report to the Attorney General:
- Name of person reporting, name of business and contact information.
- A list of the types of personal information that were or are reasonably believed to have been the subject of the breach.
- A general description of the breach, including the date of the breach and the number of Connecticut residents affected.
- Whether the notification was delayed because of a law enforcement investigation (if applicable).
