Connecticut Governor M. Jodi Rell last week signed a law aimed at combating identity theft by limiting the collection of Social Security numbers and requiring merchants to secure personally identifiable information.
The law has implications for any firm with customers in Connecticut.
Dubbed Public Act 08-167, An Act Concerning the Confidentiality of Social Security Numbers, the law prohibits most private organizations from requiring people to provide their Social Security numbers as a condition of leasing or buying goods and services.
The bill exempts insurance companies, state or federally licensed financial services institutions, utility companies, health care or pharmaceutical-related services and credit card applications.
Those who do collect Social Security numbers are required to create and publicly display a privacy policy, prohibit unlawful disclosure of Social Security numbers, and limit access to them.
The act will also require that