New Connecticut Law Incentivizes Adoption of Cybersecurity Standards

In July, Connecticut passed a largely unnoticed new law that followed in the footsteps of Ohio and Utah in limiting damages by creating affirmative defenses for business that experience a data breach after implementing a qualifying cybersecurity program (also referred to as a written information security program).