General Law Committee
JOINT FAVORABLE REPORT
Bill No.: HB-5310
Title: AN ACT CONCERNING DATA PRIVACY BREACHES.
Vote Date: 2/16/2021
Vote Action: Joint Favorable Substitute
PH Date: 1/28/2021
File No.: 9
Disclaimer: The following JOINT FAVORABLE Report is prepared for the benefit of the
members of the General Assembly, solely for purposes of information, summarization and
explanation and does not represent the intent of the General Assembly or either chamber
thereof for any purpose.
SPONSORS OF BILL:
General Law Committee
REASONS FOR BILL:
This bill extends the reach of the law of data breach notification that is already in place. The
notification requirements apply not just to businesses within the state of Connecticut, but to
anyone with computerized data that holds anyone's personal information.
JFS Language:
Makes technical changes at the request of the Attorney General
RESPONSE FROM ADMINISTRATION/AGENCY:
William Tong, Attorney General State of Connecticut supports the bill. The bill strengthens
consumer by broadening the definition of personal information, shorten the notification time
period and provides confidentiality material through Civil Investigative Demands.
Personal information now includes passport numbers, ITIN numbers, medical information and
online account information as well as others.
Notification time has been reduced to 60 days to notify residents as soon as possible.
NATURE AND SOURCES OF SUPPORTS:
Insurance Association of Connecticut supports the bill. This bill addresses all the
concerns considered in last years bill and improves on that bill.
Connecticut Hospital Association supports the bill. The bill improves awareness and
promotes transparency. More specificity and clarity is added to existing breach notification
laws. We have included other language to avoid unintended interference with low-risk
business operations.
State Privacy & Security Coalition supports the bill with the amendments presented by the
Attorney General.
New England Cable & Telecommunications Associations, Inc. supports the bill. As a five-
state regional trade association we appreciate the committee taking up the critical issue and
making common sense adjustments to the existing statue.
Healthcare At Home supports the bill. The bill acknowledges existing requirements under
HIPAA and HITECH and provides provisions of identity theft.
CBIA supports the bill. The bill expands the data breach notification statue to better protect
consumers' data. The bill directs businesses how to handle unauthorized access of
electronic files, media, databases or computerized date that contains personal information.
NATURE AND SOURCES OF OPPOSITION:
None submitted
Reported by: Pamela Bianca Date: 2/28/2021
Page 2 of 2 HB-5310