CT SB01024

Requires health insurers, health care centers, pharmacy benefits managers, third-party administrators, and utilization review companies licensed in the state to encrypt personal information of insureds and enrollees within two years of the law's effective date.

Defines "personal information" as an individual's name combined with at least one of the following: Social Security number, driver's license or state ID number, address, or identifiable health information.

Defines "encrypt" as the transformation of electronic data into a form where meaning cannot be assigned without a confidential process or key.

Requires security technology to be updated as necessary and practicable, with the Insurance Commissioner and Commissioner of Consumer Protection authorized to adopt regulations establishing minimum standards.

Becomes effective upon passage.