Social Security Number Protection
CT SSN Protection
Data security
Bars businesses from publicly posting Social Security numbers, printing them on access cards, or requiring people to send them over unsecured internet connections or use them alone to log in to websites.
- Where
- Connecticut
- Citation
- Conn. Gen. Stat. 42-470
- Status
- In force
- Enforced by
- Criminal prosecution; civil penalties (deposited into the privacy protection guaranty and enforcement account)
- People can sue
- No
- Penalties
- Wilful violations: fines of up to $100 (first), $500 (second), and up to $1,000 and/or six months' imprisonment (subsequent); plus a civil penalty of $500 per violation, capped at $500,000 per single event (42-470(e)-(f)).
- Applies to
- Any individual or private entity; the state and its political subdivisions are excluded (42-470(a))
Practices it requires
- Do not publicly post or display an individual's Social Security number.Conn. Gen. Stat. 42-470(b)(1)
- Do not print SSNs on cards needed to access products or services.Conn. Gen. Stat. 42-470(b)(2)
Security duties
- Do not require SSNs to be transmitted over the internet unless the connection is secure or the number encrypted, and do not require an SSN to access a website without a password or other authentication.Conn. Gen. Stat. 42-470(b)(3)-(4)
Sources
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: Original effective date of P.A. 03-156, s. 13 not confirmed.
Research reference, not legal advice.