CT Passes Data Breach Notification Legislation
A new Connecticut law mandates that consumers be notified of a data breach within 90 days of discovery and requires at least one year of free identity theft protection for breaches involving Social Security Numbers. Attorney General George Jepsen emphasized that his office will continue to scrutinize breaches and take enforcement action against companies that unreasonably delay notification, even if they comply with the 90-day limit.