(4) Require an individual to use such individual's Social Security number to access an Internet web site, unless a password or unique personal identification number or other authentication device is also required to access the Internet web site.
(d) This section does not prevent the collection, use or release of a Social Security number as required by state or federal law or the use of a Social Security number for internal verification or administrative purposes.
(e) Any person who wilfully violates the provisions of subsection (b) of this section shall be fined not more than one hundred dollars for a first offense and not more than five hundred dollars for a second offense, and shall be fined not more than one thousand dollars or be imprisoned not more than six months, or both, for each subsequent offense.
(f) Any person who wilfully violates the provisions of subsection (b) of this section shall be subject to a civil penalty of five hundred dollars for each such violation, provided such civil penalty shall not exceed five hundred thousand dollars for any single event.
Sec. 42-471. Safeguarding of personal information. Social Security numbers. Privacy protection policy. Civil penalty. (a) Any person in possession of personal information of another person shall safeguard the data, computer files and documents containing the information from misuse by third parties, and shall destroy, erase or make unreadable such data, computer files and documents prior to disposal.
(d) For persons who hold a license, registration or certificate issued by, or a charter subject to the supervision of, a state agency other than the Department of Consumer Protection, this section shall be enforceable only by such other state agency pursuant to such other state agency's existing statutory and regulatory authority.
(e) Any person or entity that violates the provisions of this section shall be subject to a civil penalty of five hundred dollars for each violation, provided such civil penalty shall not exceed five hundred thousand dollars for any single event. It shall not be a violation of this section if such violation was unintentional.
(g) If a financial institution has adopted safeguards that comply with the standards established pursuant to Section 501(b) of the Gramm-Leach-Bliley Act of 1999, 15 USC 6801, then such compliance shall constitute compliance with the provisions of this section.
(b) Any person or entity that violates the provisions of this section shall be subject to a civil penalty of five hundred dollars for each violation, provided such civil penalty shall not exceed five hundred thousand dollars for any single event.
Sec. 42-472. Hearings. Court orders. Restraining orders. (a) Except as otherwise provided in section 42-471, the Commissioner of Consumer Protection may conduct investigations and hold hearings on any matter under the provisions of section 42-470, 42-471, 42-471a or 42-472b or any regulation adopted pursuant to section 42-472d. The commissioner may issue subpoenas, administer oaths, compel testimony and order the production of books, records, papers and documents. If any person refuses to appear, testify or produce any book, record, paper or document when so ordered, upon application of the commissioner, the Superior Court may make such order as may be appropriate to aid in the enforcement of this section.
(2) The Attorney General, at the request of any other state agency charged with enforcement of section 42-471 pursuant to subsection (d) of said section, may apply to the Superior Court for an order temporarily or permanently restraining and enjoining any person from violating any provision of section 42-471.
(b) Payments received pursuant to section 42-470, 42-471, 42-471a or 42-472b or any regulation adopted pursuant to section 42-472d, shall be credited to the privacy protection guaranty and enforcement account. Any money in the privacy protection guaranty and enforcement account may be invested or reinvested and any interest arising from such investments shall be credited to said account.
(c) Whenever an individual obtains a court judgment against any person or entity for a violation of section 42-470, 42-471, 42-471a or 42-472b or any regulation adopted pursuant to section 42-472d, such individual may, upon the final determination of, or expiration of time for appeal in connection with any such judgment, apply to the Commissioner of Consumer Protection for an order directing payment out of said account of the amount unpaid upon the judgment for actual damages and costs taxed by the court against the person or entity, exclusive of punitive damages. The application shall be made on forms provided by the commissioner and shall be accompanied by a certified copy of the court judgment obtained against the person or entity, together with a notarized affidavit, signed and sworn to by the individual, affirming that the individual: (1) Has complied with all the requirements of this subsection; (2) has obtained a judgment stating the amount thereof and the amount owing thereon at the date of application; and (3) except for a judgment obtained by the individual in small claims court, has caused to be issued a writ of execution upon such judgment, and the officer executing the same has made a return showing that no bank accounts or real property of the person or entity liable to be levied upon in satisfaction of the judgment could be found, or that the amount realized on the sale of them or of such of them as were found, under the execution, was insufficient to satisfy the actual damage portion of the judgment, or stating the amount realized and the balance remaining due on the judgment after application thereon of the amount realized. A true and attested copy of such executing officer's return, when required, shall be attached to such application and affidavit.
(d) Upon receipt of such application together with such certified copy of the court judgment, notarized affidavit and true and attested copy of the executing officer's return, when required, the commissioner or the commissioner's designee shall inspect such documents for their veracity and upon a determination that such documents are complete and authentic, and a determination that the individual has not been paid, the commissioner shall order payment out of said account of the amount unpaid upon the judgment for actual damages and costs taxed by the court against the person or entity, exclusive of punitive damages.
(e) Whenever an individual is awarded an order of restitution against any person or entity for loss or damages sustained by reason of a violation of section 42-470, 42-471a or 42-472b or any regulation adopted pursuant to section 42-472d in a proceeding brought by the Attorney General at the request of the commissioner pursuant to section 42-470 or 42-471 or in a proceeding brought by the Attorney General, such individual may, upon the final determination of, or expiration of time for appeal in connection with any such order of restitution, apply to the commissioner for an order directing payment out of said account of the amount unpaid upon the order of restitution. The commissioner may issue such order upon a determination that the individual has not been paid.
(f) Before the commissioner shall issue any order directing payment out of the account to an individual pursuant to this section, the commissioner shall first notify the person or entity of the individual's application for an order directing payment out of the account and of the person or entity's right to a hearing to contest the disbursement in the event that the person or entity has already paid the individual. Such notice shall be given to the person or entity not later than fifteen days after the receipt by the commissioner of the individual's application for an order directing payment out of said account. If the person or entity requests a hearing in writing by certified mail not later than fifteen days after receipt of the notice from the commissioner, the commissioner shall grant such request and shall conduct a hearing in accordance with the provisions of chapter 54. If the commissioner receives no written request by certified mail from the person or entity for a hearing not later than fifteen days after the person's or entity's receipt of such notice, the commissioner shall determine that the individual has not been paid, and the commissioner shall issue an order directing payment out of said account for the amount unpaid upon the judgment for actual damages and costs taxed by the court against the person or entity, exclusive of punitive damages, or for the amount unpaid upon the order of restitution.
(g) The commissioner or the commissioner's designee may proceed against any person or entity for an order of restitution arising from loss or damages sustained by any individual by reason of such person's or entity's violation of any of the provisions of section 42-470, 42-471, 42-471a or 42-472b or any regulation adopted pursuant to section 42-472d. Any such proceeding shall be held in accordance with the provisions of chapter 54. In the course of such proceeding, the commissioner or the commissioner's designee shall decide whether to order restitution arising from such loss or damages, and whether to order payment out of said account. The commissioner or the commissioner's designee may hear complaints of all individuals submitting claims against a single person or entity in one proceeding.
(h) No application for an order directing payment out of said account shall be made later than three years from the final determination of or expiration of time for appeal in connection with any judgment or order of restitution.
(i) Whenever an individual satisfies the commissioner or the commissioner's designee that it is not practicable to comply with the requirements of subdivision (3) of subsection (c) of this section and that the individual has taken all reasonable steps to collect the amount of the judgment or the unsatisfied part thereof and has been unable to collect the same, said commissioner or said designee may, in his or her discretion, dispense with the necessity for complying with such requirement.
c80f0f1006