Substitute Senate Bill No. 1058, known as Public Act No. 23-98, introduces amendments to existing laws concerning charitable organizations, telecommunications, consumer protection, and the powers of the Attorney General and the commissioner in investigations. The bill includes insertions that allow for the withholding of responses to investigative demands from public disclosure for the duration of an investigation and the erasure of electronic documentary material after an investigation or legal proceeding concludes. It also substitutes gender-specific language with gender-neutral terms, such as replacing "he" with "the commissioner" and "his or her" with "the Attorney General's." Additionally, the bill extends identity theft prevention services from 24 months to two years and outlines notification procedures for data breaches, including the conditions for delayed notification.

The bill also revises the definition of "personal information" to include "precise geolocation data" and sets out the acceptable forms of notice in the event of a security breach. It introduces a new requirement for demonstrating the cost of providing notice to the Attorney General and specifies the conditions for substitute notice. The bill deems compliance with one's own security breach procedures or those established by a primary or functional regulator as sufficient, provided timely notification is given to affected Connecticut residents and the Attorney General. Civil penalties collected for non-compliance may be deposited into the privacy protection guaranty and enforcement account, and the bill sets a civil penalty for violations, with a maximum of $500,000 per event. It also amends enforcement provisions for state agencies other than the Department of Consumer Protection and clarifies that unintentional violations are not penalized and that there is no private right of action created by this section.

Statutes affected:
Raised Bill: 42-230, 42-472a, 53-289a, 42-284, 42-286, 42-288, 42-288a, 42-288c
GL Joint Favorable: 42-230, 42-472a, 53-289a, 42-284, 42-286, 42-288, 42-288a, 42-288c
File No. 204: 42-230, 42-472a, 53-289a, 42-284, 42-286, 42-288, 42-288a, 42-288c
JUD Joint Favorable Substitute: 42-472a, 53-289a, 42-284, 42-286, 42-288, 42-288a, 42-288c
File No. 676: 42-472a, 53-289a, 42-284, 42-286, 42-288, 42-288a, 42-288c
APP Joint Favorable: 42-472a, 53-289a, 42-284, 42-286, 42-288, 42-288a, 42-288c
Public Act No. 23-98: 53-289a, 42-284, 42-286, 42-288, 42-288a, 42-288b, 16-333m, 16-47, 7-170, 7-171, 7-172