Breach notification law in Connecticut
This page reports what the Connecticut breach notification statute provides. It is a reference summary, not legal advice, and it does not describe any particular breach. BreachBook is not a law firm and cannot advise on how a statute applies to an individual case.
| Deadline to notify residents | 60 days. |
|---|---|
| Does an exposed Social Security number trigger notice | Yes. A Social Security number is within the statute’s definition of personal information. |
| Cost of a credit freeze | Free to place, lift, and remove. |
| Identity theft monitoring | At least 24 months of monitoring must be provided in the circumstances the statute specifies. |
| Attorney general notice | Every breach that requires notice to residents must also be reported to the attorney general. |
Statute
Conn. Gen. Stat. § 36a-701b — read the statute
Entry last verified August 2, 2026 against the official source above.
How to read this entry
These fields summarize the obligations a statute places on an organization that discloses a breach. They do not establish that any organization met or failed to meet them, and a breach recorded elsewhere on this site is not evidence either way. Where the statute sets no figure, the row says so rather than showing a blank.
Other jurisdictions
Found an error in this entry? See the corrections policy.