POLISCOPE
Back to bills

The civic record

Read. Follow. Verify.
Enacted

Connecticut requires financial data security reporting, studies payroll clearing and consumer fraud, and mandates mortgage flood-risk notices

Original title: AN ACT CONCERNING DATA SECURITY, PAYROLL PROCESSING, CONSUMER FRAUD PROTECTION, MORTGAGE LOANS AND EMPLOYEE CREDIT RATES.

Last action · May 27, 2026: Signed by the GovernorSponsors: Fred Gee and 5 others

Introduced
Committee
Floor Vote
Passed
Law

Track this bill to get notified when it advances a stage. One tap to stop, anytime.

Public stanceCommunity reactions are separate from the official record and reporting.

What This Bill Does

Financial institutions and banking licensees must adopt written data security safeguards and report data breaches to the Department of Banking within three business days. Creditors must provide written flood insurance notices to mortgage applicants before closing, and two state studies are established on payroll processing and consumer fraud protections.

Why it matters

Lenders and financial institutions face new breach-reporting timelines and documentation requirements, while mortgage applicants must receive formal written warnings regarding flood insurance coverage prior to loan closing.

Background
  • House Bill 5208 was introduced during the 2026 legislative session and signed into law by the Governor on May 27, 2026. context

Who It Affects

Groups the bill's text affects, as described in the record. Being affected is not a position for or against it.

Directly affected

Financial institutions and banks

Must adopt written data security safeguard programs and submit initial breach notifications to the Department of Banking within three business days.

Directly affected

Mortgage loan applicants

Receive mandatory written disclosures regarding flood insurance coverage limitations and signing requirements prior to loan closing.

Directly affected

Department of Banking

Receives data security incident notifications, oversees payroll processing studies, and manages regulatory compliance filings.

Key Facts

You don't have to trust us. Each fact below is taken straight from the official document - click any one to see the exact passage, highlighted in the original.

Frequently Asked Questions

When must a financial institution report a data security breach?
Covered institutions must file an initial notification with the Department of Banking not later than three business days after knowing or having reason to know of a .
What information must creditors provide to mortgage applicants regarding flood insurance?
Creditors must notify applicants in writing that standard homeowners insurance does not cover flood damage, that floods can occur outside designated flood zones, and that applicants may consult a licensed insurance producer about flood insurance.
When do the mortgage flood insurance disclosure rules take effect?
The revised mortgage flood notice provisions take effect on July 1, 2026.

What else do you want to know?

News Coverage

No news coverage found yet. Articles are indexed twice daily.

Where This Stands

Current status: Signed into law.

Procedural history

22 actions
  1. May 27, 2026Governor of ConnecticutEnrolled
    Signed by the Governor
  2. May 15, 2026Governor of Connecticut
    Transmitted by Secretary of the State to Governor
  3. May 15, 2026Connecticut General Assembly
    Transmitted to the Secretary of State
  4. May 14, 2026Connecticut General AssemblyEnrolled
    Public Act 26-51
  5. May 5, 2026Connecticut General Assembly
    On Consent Calendar / In Concurrence
  6. May 5, 2026HouseFloor
    Senate Passed as Amended by House Amendment Schedule A
Show 16 earlier actions
  1. May 5, 2026HouseFloor
    Senate Adopted House Amendment Schedule A
  2. Apr 28, 2026Connecticut General Assembly
    File Number 728
  3. Apr 28, 2026Senate
    Senate Calendar Number 479
  4. Apr 28, 2026Senate
    Favorable Report, Tabled for the Calendar, Senate
  5. Apr 27, 2026Senate
    Immediate Transmittal to the Senate
  6. Apr 27, 2026HouseFloor
    House Passed as Amended by House Amendment Schedule A
  7. Apr 27, 2026HouseFloor
    House Adopted House Amendment Schedule A 4520
  8. Mar 19, 2026Connecticut General Assembly
    File Number 90
  9. Mar 19, 2026House
    House Calendar Number 82
  10. Mar 19, 2026House
    Favorable Report, Tabled for the Calendar, House
  11. Mar 19, 2026Connecticut General Assembly
    Reported Out of Legislative Commissioners' Office
  12. Mar 13, 2026Connecticut General Assembly
    Referred to Office of Legislative Research and Office of Fiscal Analysis 03/18/26 5:00 PM
  13. Mar 10, 2026Connecticut General Assembly
    Filed with Legislative Commissioners' Office
  14. Mar 10, 2026Connecticut General Assembly
    Joint Favorable
  15. Feb 19, 2026Connecticut General Assembly
    Public Hearing 02/24
  16. Feb 18, 2026Connecticut General AssemblyCommittee
    Referred to Joint Committee on Banking

Version history

Only one version on file - nothing to compare yet. As later stages (committee substitute, engrossed, enrolled) are captured, the redline appears here.

View official text →

Lobbying Activity

No state lobbying filings in our records match this bill. Federal lobbying reports (LDA) cover Congress, so they are not listed on state bills.

Full breakdown

Who this bill affects and the strongest case for and against it, written only from the bill’s own text.

Sponsors

Discoveries

1 pattern noticed across the record

Patterns POLISCOPE noticed across the record. These are observations to investigate, not conclusions.

policy shift98% confidence

Mandatory Three-Day Breach Reporting

The act establishes a strict three-day notification window for financial institutions experiencing cyber or data security incidents impacting customer information.

Connected Entities

Department of Banking, Eric C. Berthel, Farley Santos and 9 more
OrganizationDepartment of Banking“Receives initial notifications of data security incidents and conducts a study c”Map →
PersonEric C. Berthel“Senator, 32nd District; listed as a cosponsor.”Map →
PersonFarley Santos“Representative, 109th District; listed as a cosponsor.”Map →
PersonHector Arzeno“Representative, 151st District; listed as a cosponsor.”Map →
PersonCommissioner of Emergency Services and Public Protection“Designee or commissioner participates in the consumer fraud working group.”Map →
OrganizationCommission on Women, Children, Seniors, Equity and Opportunity“Executive director or designee serves on the consumer fraud working group.”Map →
PersonKenneth Gucker“Representative, 138th District; listed as a cosponsor.”Map →
OrganizationGeneral Assembly“Receives reports from the Department of Banking and the consumer fraud working g”Map →
PersonFred Gee“Representative, 126th District; listed as a cosponsor.”Map →
PersonCommissioner of Consumer Protection“Designee or commissioner serves on the consumer fraud working group.”Map →
PersonTom Delnicki“Representative, 14th District; listed as a cosponsor.”Map →
PersonBanking Commissioner“Prescribes form and manner for data security incident notifications and particip”Map →

Sources

Analysis Score

0–100
  • Significance75
    How much this matters to a regular citizen
  • Controversy15
    Intensity of disagreement among stakeholders
  • Entertainment5
    Compellingness for a non-policy-wonk reader
  • Buzz35
    Current news / social attention level

Publisher tools

Share or embed this record

POLISCOPE publisher tools

Share or embed this record