CT SB00472

Credit rating agencies must place security freezes on consumer credit reports within five business days of request and provide a unique personal identification number or password for future authorization requests.

Consumers can temporarily lift security freezes for specific parties or time periods within three business days by providing proper identification and their PIN/password; freezes remain in effect until consumer requests removal.

Credit rating agencies are prohibited from charging any fees for placing security freezes, removing freezes, temporarily lifting freezes, or replacing personal identification numbers.

Persons conducting business in Connecticut must notify affected residents of data breaches involving personal information within 90 days of discovery and provide at least 24 months of free identity theft prevention services.

The Banking Commissioner must adopt regulations requiring credit rating agencies to designate dedicated points of contact to assist consumers with data breach issues.