Representative Rick Boucher (D-VA) lost his Congressional race yesterday, leaving a vacancy on the Subcommittee on Communications, Technology and the Internet. Aggressive consumer advocate Attorney General Richard Blumenthal (D-Conn.) won a seat in the Senate.

Continue Reading Key Voice on Privacy Issues Loses Congressional Reelection Bid While Another Joins the Senate

On August 18, 2010, Connecticut’s Insurance Department published new regulations requiring entities subject to its jurisdiction to report any information security incident affecting Connecticut residents within five days of discovery.

Continue Reading Connecticut Insurance Department Issues Five-Day Breach Reporting Requirement

In a lawsuit he described as “[s]adly . . . historic,” Connecticut Attorney General Richard Blumenthal sued Health Net of Connecticut, Inc. for allegedly failing to secure private patient medical records and financial information involving hundreds of thousands of Connecticut enrollees and promptly notify consumers endangered by the security breach.  The case marks the first action by a state attorney general under the Health Information Technology for Economic and Clinical Health (“HITECH”) Act to enforce provisions of the Health Insurance Portability and Accountability Act (“HIPAA”).  The suit also alleges a violation of Connecticut’s breach notification statute.
Continue Reading Connecticut AG Files First HITECH Act Suit

On November 9, 2009, Connecticut’s Attorney General, Richard Blumenthal, announced an investigation of whether Blue Cross and Blue Shield (“BCBS”) violated Connecticut’s data breach notification law by waiting until two months after a data breach had occurred to notify affected Connecticut residents.  The data breach, which Attorney General Blumenthal called “one of the most sizable and significant in Connecticut’s history,” involved the theft of a laptop containing confidential unencrypted data from the car of a BCBS employee in late August.  BCBS notified affected Connecticut residents of the breach in late October.
Continue Reading Connecticut Attorney General Investigation Sheds Light on Meaning of “Unreasonable Delay” in Data Breach Context