Law / United States / 
Connecticut
Restriction on posting, display, transmission and use of Social Security numbers
In force since .
A sensitive categories rule binding private bodies.
- Obligation class
- Prohibition, Security
As of .
What it requires
- Do not publicly post or publicly display an individual's Social Security number in any manner (section 42-470(b)(1)).
- Do not print an individual's Social Security number on any card the individual must use to access products or services you provide (section 42-470(b)(2)).
- Do not require an individual to transmit a Social Security number over the Internet unless the connection is secure or the number is encrypted, and do not require an individual to use one to access an Internet web site unless a password, unique personal identification number or other authentication device is also required (section 42-470(b)(3) and (4)).
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Criminal exposureYes
Criminal exposure note
Section 42-470(e): a person who wilfully violates subsection (b) is fined not more than $100 for a first offense and not more than $500 for a second offense, and fined not more than $1,000 or imprisoned not more than six months, or both, for each subsequent offense.
Penalty structure
Section 42-470(f): a person who wilfully violates subsection (b) is subject to a civil penalty of $500 for each violation, not to exceed $500,000 for any single event.
- Rule
- Per violation only
- As of
- Currency
- USD
- Fixed cap
- 500,000
- Per violation unit
- Violation
- Per violation amount
- 500
Who enforces it
Enforcement body
Connecticut Commissioner of Consumer Protection, who may investigate and hold hearings on any matter under section 42-470, and the Attorney General, who at the commissioner's request may apply to the Superior Court to restrain a violation (section 42-472).
Settledness
- As of
What this law does
Section 42-470 binds any individual, firm, partnership, association, corporation, limited liability company, organization or other entity, but not the state, its political subdivisions or their agencies. Under section 42-470, no person may publicly post or publicly display an individual's Social Security number in any manner, or print it on any card the individual must use to access products or services the person provides.
Under section 42-470, no person may require an individual to transmit a Social Security number over the Internet unless the connection is secure or the number is encrypted, or to use one to access an Internet web site unless a password, unique personal identification number or other authentication device is also required.
Under section 42-470(c), the prohibitions apply to group and individual health insurance policies of the types named in section 38a-469 that are delivered, issued for delivery, amended, renewed or continued on and after . Section 42-470 does not prevent the collection, use or release of a Social Security number as required by state or federal law, or its use for internal verification or administrative purposes.
Under section 42-470, a person who wilfully violates subsection (b) is fined not more than $100 for a first offense, not more than $500 for a second offense, and not more than $1,000 or imprisoned not more than six months, or both, for each subsequent offense. Under section 42-470, a person who wilfully violates subsection (b) is also subject to a civil penalty of $500 for each violation, not to exceed $500,000 for any single event.
Under section 42-470, the prohibitions applied as first enacted on and after , a limit that Public Act 09-239 removed when it added the civil penalty in subsection (f). Under sections 42-472 and 42-472a, the Commissioner of Consumer Protection may investigate and hold hearings on any matter under section 42-470 and the privacy protection guaranty and enforcement account receives its civil penalties.
When LexLint raises it
When your app profile says your app crawls the web, trains models or deploys a chatbot.