2025 Connecticut General Statutes
Title 4 - Management of State Agencies
Chapter 50 - Office of Policy and Management: General Provisions; Budget and Appropriations; State Planning
Section 4-67ee. - Public agency disclosure of personal information. Restricted. Exceptions. Attorney General action.

(a) No public agency, as defined in section 1-200, or employee, appointee, officer or official or any other individual acting on behalf of a public agency shall disclose an individual's personal information that is not a matter of public record to any other individual or entity that is not a public agency or employee, appointee, officer or official or any other individual acting on behalf of a public agency, unless such disclosure is:

(1) Authorized in writing by the individual to whom the information pertains, or by the parent or guardian of such individual if the individual is a minor or not legally competent to consent to such disclosure;

(2) Necessary in furtherance of a criminal investigation, unless prohibited by the provisions of section 54-192h;

(3) Otherwise required by state or federal law, including, but not limited to, student and exchange visitor visa sponsorship requirements for public institutions of higher education, or in compliance with a judicial warrant or court order issued by a judge or magistrate of the state or federal judicial branches;

(4) Otherwise permitted by state or federal law governing personal health information, including, but not limited to, the federal Health Insurance Portability and Accountability Act of 1996, P.L. 104-191, as amended from time to time, or regulations adopted thereunder, provided the recipient of such personal information is a covered entity or business associate of a covered entity and such personal information remains subject to all privacy and security requirements of said federal act or regulations;

(5) Otherwise permitted by state law, provided such personal information remains protected by privacy regulations, data use agreements or other rules prohibiting disclosure to unauthorized individuals or entities; or

(6) Customarily publicly disclosed by a public agency for purposes, including, but not limited to, occupational or business license verification, voter registration and research data.

(b) For purposes of this section, personal information means (1) an individual's address, (2) an individual's workplace or hours of work, (3) an individual's school or school hours, or (4) the date, time or place of an individual's hearings, proceedings or appointments with a public agency.

(c) The Attorney General may bring an action against any individual or entity who violates the provisions of this section in the superior court for the judicial district of Hartford for injunction, declaratory judgment or mandamus.

(d) Nothing in this section shall permit the Attorney General to assert any claim against a state agency or a state officer or state employee in such officer's or employee's official capacity, regarding actions or omissions of such state agency, state officer or state employee. If the Attorney General determines that a state officer or state employee is not entitled to indemnification under section 5-141d, the Attorney General may, as it relates to such officer or employee, take any action authorized under this section.

(e) If there is a conflict between any provision of this section and any provision of chapter 14, the provision of chapter 14 shall prevail.

(f) The Attorney General, in consultation with the state's Chief Data Officer, shall provide guidance to public agencies concerning compliance with the provisions of this section.

(Nov. Sp. Sess. P.A. 25-3, S. 14.)

History: Nov. Sp. Sess. P.A. 25-3 effective November 18, 2025.