Connecticut Enacts New Breach Notification Obligations

Effective October 1, 2021, the deadline for breach notification to State residents would decrease from 90 to 60 days, notification of breached login credentials will require data controllers to advise affected residents to change their passwords, and notification may not be provided through affected online accounts; data controllers should proceed in good faith to identify affected individuals and provide them with notice as expediently as possible.