Bill > SB00117

This bill, effective October 1, 2026, updates existing laws regarding breaches of security involving electronic personal information. It clarifies that any materials provided to the Attorney General following such a breach must be submitted in a format the Attorney General specifies. A key new provision defines a "massive breach of security" as one affecting at least 100,000 state residents due to unauthorized computer use. In the event of a massive breach, the bill mandates that a third-party forensic examination, analysis, and report be conducted to determine how the breach occurred and its root causes. Furthermore, it imposes an additional penalty on any person who fails to submit this required forensic report to the Attorney General, with penalties varying based on whether the person is a small business or not. The bill also clarifies that certain documents and information provided to the Attorney General during investigations, including these forensic reports, are exempt from public disclosure.

Justice

General Law Committee (J)

https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=SB00117&which_year=2026