CT HB05210

Financial institutions including banks, credit unions, and licensees under state banking titles must adopt written programs establishing standards for developing, implementing, and maintaining reasonable data security safeguards to protect customer information security, confidentiality, and integrity

Licensees maintaining customer information for Connecticut consumers must comply with all applicable provisions of 16 CFR Part 314 (the FTC Safeguards Rule)

Banks, credit unions, and licensees must file written reports with the Department of Banking within three business days of discovering any data security incident that affects business operations or involves unauthorized access to consumer personal information

Covered institutions must comply with Subtitle A of Title V of the Gramm-Leach-Bliley Financial Modernization Act of 1999 (15 USC 6801 et seq.) and related regulations

Effective date: October 1, 2026