Connecticut Senate Bill Raises the Stakes on Data Breach Response - DataBreaches.Net

"Connecticut Senate Bill 117, An Act Concerning Breaches of Security Involving Electronic Personal Information-would create mandatory forensic examination requirements for entities that experience a "massive breach of security," defined as a data breach affecting at least 100,000 Connecticut residents, and imposes substantial penalties for noncompliance."

"SB 117 would require entities that experience a "massive breach of security" to immediately retain a qualified third-party forensic examiner to conduct a forensic examination of the computer or computer system that was the subject of the data breach and to prepare a detailed forensic report disclosing how the breach occurred and its root causes."

"Entities must submit the detailed forensic report to the Connecticut Attorney General within 90 days of discovering the breach and face civil penalties of $100,000 for small businesses and $500,000 for other entities for noncompliance."

Connecticut Senate Bill 117 establishes mandatory forensic examination requirements for entities experiencing massive data breaches, defined as incidents affecting at least 100,000 Connecticut residents. Affected entities must immediately engage qualified third-party forensic examiners to investigate the breach, determine how it occurred, and identify root causes. A detailed forensic report must be submitted to the Connecticut Attorney General within 90 days of breach discovery. Noncompliance carries significant civil penalties: $100,000 for small businesses and $500,000 for other entities. This legislation strengthens data breach accountability and transparency requirements for organizations handling Connecticut residents' personal information.

Read at DataBreaches.Net