Last week, the Connecticut General Assembly unanimously voted to strengthen the state’s data breach notification law. The changes require organizations to report a data breach to the state’s Attorney General’s office within 90 days. Additionally, the law will require that anyone whose Social Security numbers have been accessed during a breach receive one year of identity theft protection.
