CT HB07102

Requires any person possessing personal information to safeguard data from misuse and destroy or make unreadable all data before disposal, effective October 1, 2017.

Mandates businesses collecting Social Security numbers to create and publish a privacy protection policy that protects confidentiality, prohibits unlawful disclosure, and limits access to Social Security numbers.

Expands the definition of "personal information" to include military identification information such as selective service numbers, military identification numbers, discharge documents, and military identification cards.

Establishes civil penalties of $500 per violation, capped at $500,000 per single event, for violations of data safeguarding requirements (excluding unintentional violations).

Exempts state agencies and political subdivisions from these requirements and allows financial institutions compliant with Gramm-Leach-Bliley Act standards to satisfy the safeguarding provisions.