To Avoid Punitive Damages for a Data Breach in Connecticut, You Need to Try

In Connecticut, if you adopt and maintain and comply with written cybersecurity program that contains administrative, technical and physical safeguards for the protection of personal or restricted information and that conforms to an industry recognized cybersecurity framework then you will not be subject to punitive damages in court against any cause of action founded in tort that alleges that the failure to implement reasonable cybersecurity controls resulted in a data breach.