The Privacy and Data Security Department

The Privacy and Data Security Section handles matters related to the protection of Connecticut residents' personal information and data. The Section enforces state laws governing notification of data breaches, safeguarding of personal information, protection of social security numbers, and data privacy rights afforded to Connecticut residents. The Section is also responsible for enforcement of federal laws under which the Attorney General has enforcement authority, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Children's Online Privacy Protection Act (COPPA), and the Fair Credit Reporting Act (FCRA). In addition, this Section provides the Attorney General with advice and counsel on proposed legislation and other matters regarding privacy and data security, and it engages in extensive outreach to Connecticut residents on their privacy rights and to businesses on their obligations. -

Relevant State Laws
- The Connecticut Data Privacy Act (“CTDPA”), Public Act No. 22-15
- The Connecticut Data Breach Notification Act, Conn. Gen. Stat. § 36a-701b
- The Connecticut Unfair Trade Practices Act (“CUTPA”), Conn. Gen. Stat. §§ 42-110a et seq.
- The “Social Security Number” Law, Conn. Gen. Stat. § 42-470
- The “Safeguards” Law, Conn. Gen. Stat. § 42-471
- The “Safe Harbor” Law, Conn. Gen. Stat. § 42-901
Report a Data Breach

Report a data breach using the Office’s online submission form here.
Data Security Resources
For Businesses
For Consumers
The Connecticut Data Privacy Act
Learn more about the Connecticut Data Privacy Act here.
Contact Information

Privacy and Data Security Section

165 Capitol Avenue

Hartford, CT 06106

Phone: 860.808.5440

Email: ag.breach@ct.gov

The Office of the Attorney General William Tong

The Privacy and Data Security Department