It seems that JavaScript is not working in your browser. It could be because it is not supported, or that JavaScript is intentionally disabled. Some of the features on CT.gov will not function properly with out javascript enabled.
Settings Menu
Pursuant to Conn. Gen. Stat. § 36a-701b, any person who owns, licenses or maintains computerized data that includes personal information is required to disclose a security breach to the Office of the Attorney General and to state residents whose personal information is believed to have been compromised. Note that “any person” includes companies.
Report a data breach using the Connecticut Attorney General’s online submission form here.
Below are answers to Frequently Asked Questions on data breach reporting obligations.
Notice to consumers must be made without unreasonable delay and no later than sixty (60) days from discovery of the breach. Additionally, notice to the Office of the Attorney General must be provided no later than when residents are notified. Pursuant to Conn. Gen. Stat. § 36a-701b(g), failure to provide such notice shall constitute a violation of the Connecticut Unfair Trade Practices Act (CUTPA).
Yes—if a Connecticut resident’s Social Security number or Taxpayer Identification Number is believed to have been compromised in the data breach, Connecticut law requires that the resident be offered 24 months of credit monitoring services. See Conn. Gen. Stat. § 36a-701(b)(2)(B).
The Office of the Attorney General now has a simple, fillable online form to submit a breach notification, located here. Completing and submitting this online form is the Office’s preferred method for receiving notice about a data breach. It is designed to address the most common questions we have and reduces our need to contact you for additional information. Before filling out this form, here’s what you need to know:
Please send an email to ag.breach@ct.gov to provide your update and include the reporting entity’s name and your case number in the subject line. If there are any follow-up questions or concerns, a staff member with the Office of the Attorney General’s Privacy and Data Security Section will contact you.
If you have any questions or comments about this form or if you have any questions about providing notice to our office, please send an email to ag.breach@ct.gov. Please include a relevant subject line (e.g. comments on data breach notice form, data breach question, etc.) in your email.
© 2016 CT.gov | Connecticut’s Official State Website
Leave a Reply