Connecticut AG forms department for privacy, data security

Connecticut Attorney General George Jepsen recently announced the creation of a new department within the Connecticut Office of the Attorney General ”“ the Privacy and Data Security Department ”“ that will work exclusively on investigations and litigation related to privacy and data security.

In 2011, Jepsen appointed a privacy task force to educate the public about data protection and to focus the office’s response to Internet privacy concerns and data breaches that affect consumers.

Assistant Attorney General Matthew Fitzsimmons, who has served as chairman of the privacy task force since its creation, has been named to head the new department.

The department will continue and expand upon the task force’s work, according to a press release issued by the attorney general”™s office.

“When I took office in January 2011, it became immediately clear that data privacy and security were growing concerns in our state and across the country,” Jepsen said in the press release. “I appointed the privacy task force ”“ the only task force I have formed in the Office of the Attorney General ”“ to address these matters head on. In the four years since, nothing has lessened the importance of our privacy work.

“During that time, my office has taken a lead role in investigating massive consumer data breaches involving Anthem, Target, Home Depot and others as well as significant issues impacting consumer privacy, including the Google Street View Wi-Fi data collection case,” Jepsen said.

Jepsen said the privacy work would be of equal importance and emphasis to that done by other departments within the office.

The department will continue to address matters with a cross-disciplinary team of experts in health, finance and other disciplines from other departments. The department will be supported by a technical consultant under contract with the attorney general”™s office.

“Creation of this department is being accomplished within available appropriations,” Jepsen said. “While eventually we may seek to expand the department, all of us in government must work to do more with less. Despite resource constraints, I am fully confident in our staff and in the leadership of attorney Fitzsimmons ”“ a national leader in data security and privacy ”“ to continue and build on the excellent work they’ve done in this important area.”

Like the task force before it, the attorney general’s office reported the new department will be responsible for all investigations involving consumer privacy and data security. It will also help to educate the public and business community about their responsibilities, which include protecting personally identifiable and sensitive data and promptly notifying affected individuals and the attorney general’s office when breaches occur.