The Connecticut Joint Committee on Judiciary introduced H.B. 5427, legislation to amend the state's data security law to require notification to the Attorney General "immediately following the discovery of the breach of security".

While the demand for immediate notification would be challenging at best, this legislation should have minimal impact on the research profession, since the existing law's definition of covered personal information does not include normal research data.