Connecticut not too long ago enacted two payments, House Bill 5310 (HB 5310) and House Bill 6607 (HB 6607), concerning knowledge privateness breaches and cybersecurity requirements for companies, respectively. Each payments turn into efficient on October 1, 2021.
Amongst different issues, HB 5310 expands the forms of private data triggering required discover of an information breach, together with medical and biometric data, shortened the utmost interval by which notification should be created from 90 to 60 days following discovery of a breach, and requires discover as expediently as attainable whether it is found that private data was, or moderately believed to have been, breached following such 60 day interval.
HB 6607 prevents the Connecticut Superior Courtroom from assessing punitive damages towards a coated entity for an information breach of non-public or restricted data if the coated entity meets specified cybersecurity necessities. The protected harbor additionally applies in cases the place cybersecurity applications meet relevant state or federal legal guidelines and laws.