SECURITY ADDENDUM (ENTERPRISE SAAS)
Connecticut Jurisdictional Version
KEY PROVISIONS
Data Breach Notification (Conn. Gen. Stat. Section 36a-701b)
- Notify without unreasonable delay, not later than 60 days
- If >500 residents, notify Attorney General
- Notify credit reporting agencies if >5,000 affected
Connecticut Data Privacy Act (Conn. Gen. Stat. Section 42-515 et seq.)
- Consumer rights: access, correction, deletion, portability, opt-out
- Data protection assessments required
- Contracts must restrict subprocessor use
Personal Information Definition
Name plus: SSN, driver's license, financial account, medical info, health insurance, biometric data, taxpayer ID.
Trade Secrets
Conn. Gen. Stat. Section 35-50 et seq.
E-Signatures
Conn. Gen. Stat. Section 1-266 et seq.
Late Payment
12% statutory (Conn. Gen. Stat. Section 37-3a)
Forum
Hartford County (exclusive). Jury waiver permitted.
EXECUTION
☐ Master Agreement referenced ☐ Connecticut-licensed counsel review