Office of The Attorney General Announces New Online Form For Submitting Data Breach Notifications
(Hartford, CT) – Attorney General William Tong today announced a new online form designed to help businesses comply with their obligation to notify the Office of the Attorney General when they experience a data breach impacting Connecticut residents.
Under Connecticut law, businesses are required to provide notice to the Attorney General no later than the time when impacted residents are notified of a data breach. The number of notices received by the Office of the Attorney General has increased significantly over the years—surpassing 1,500 in 2021 alone.
“This new online form will benefit our office and businesses alike—allowing us to quickly identify and address higher-profile breaches while communicating to companies what information we need from them to review and respond to a notice. More importantly, it will help us more easily ensure that breached businesses have appropriately notified and offered protection services to impacted Connecticut residents,” said Attorney General Tong.
The need for a standardized, online submission form was also motivated by recent amendments to Connecticut’s data breach notification statute. Last year, Attorney General Tong sought to strengthen the statute by broadening its definition of “personal information,” which in turn triggers expanded notice requirements, and shortening the time limit for entities to provide notice of a data breach from 90 days to 60 days. “An Act Concerning Data Privacy Breaches” was unanimously approved during the last legislative session and took effect on October 1, 2021. In light of these amendments, the Office expects to receive even more breach notices this year.
To access the form and for more information on reporting data breaches to the Office of the Attorney General, click here.