(a) For the purposes of this section, “person” means any individual, firm, partnership, association, corporation, limited liability company, organization or other entity, but does not include the state or any political subdivision of the state, or any agency thereof.
(b) Except as provided in subsection (c) of this section, no person shall:
(1) Publicly post or publicly display in any manner an individual's Social Security number. For the purposes of this subdivision, “publicly post” or “publicly display” means to intentionally communicate or otherwise make available to the general public;
(2) Print an individual's Social Security number on any card required for the individual to access products or services provided by such person;
(3) Require an individual to transmit such individual's Social Security number over the Internet, unless the connection is secure or the Social Security number is encrypted; or
(4) Require an individual to use such individual's Social Security number to access an Internet web site, unless a password or unique personal identification number or other authentication device is also required to access the Internet web site.
(c) The provisions of subsection (b) of this section shall apply with respect to group and individual health insurance policies providing coverage of the type specified in subdivisions (1), (2), (4), (6), (10) and (12) of section 38a-469 that are delivered, issued for delivery, amended, renewed or continued on and after July 1, 2005.
(d) This section does not prevent the collection, use or release of a Social Security number as required by state or federal law or the use of a Social Security number for internal verification or administrative purposes.
(e) Any person who wilfully violates the provisions of subsection (b) of this section shall be fined not more than one hundred dollars for a first offense and not more than five hundred dollars for a second offense, and shall be fined not more than one thousand dollars or be imprisoned not more than six months, or both, for each subsequent offense.
(f) Any person who wilfully violates the provisions of subsection (b) of this section shall be subject to a civil penalty of five hundred dollars for each such violation, provided such civil penalty shall not exceed five hundred thousand dollars for any single event.
(g) All civil penalties received pursuant to subsection (f) of this section shall be deposited into the privacy protection guaranty and enforcement account established under section 42-472a.
(P.A. 03-156, S. 13; P.A. 09-239, S. 14.)
History: P.A. 09-239 removed “on and after January 1, 2005,” in Subsec. (b), added Subsec. (f) re civil penalty and added Subsec. (g) re deposit of civil penalties into privacy protection guaranty and enforcement account.
Structure Connecticut General Statutes
Title 42 - Business, Selling, Trading and Collection Practices
Chapter 743dd - Protection of Social Security Numbers and Personal Information
Section 42-471a. - Employment applications to be obtained and retained in secure manner. Penalties.
Section 42-472. - Hearings. Court orders. Restraining orders.
Section 42-472a. - Privacy protection guaranty and enforcement account.
Section 42-472c. - Appeal of decision or order of Commissioner of Consumer Protection.