CGS § 14-307f. Disclosure, storage, retention and destruction of personally identifiable information. Disclosure of other information and data gathered from automated traffic enforcement safety devices.

(a) No personally identifiable information shall be disclosed by the municipality or a vendor to any person or entity, including any law enforcement unit, except where the disclosure is made in connection with the charging, collection and enforcement of the fines imposed pursuant to an ordinance adopted under section 14-307c.

(b) No personally identifiable information shall be stored or retained by the municipality or a vendor unless such information is necessary for the charging, collection and enforcement of the fines imposed pursuant to an ordinance adopted under section 14-307c.

(c) The municipality or a vendor shall destroy personally identifiable information and other data that specifically identifies a motor vehicle and relates to a violation of an ordinance adopted under section 14-307c not later than thirty days after any fine is collected or the resolution of a hearing conducted for the alleged commission of such violation, whichever is later, except a municipality or vendor may retain a portion of personally identifiable information for the limited purpose of determining whether a person committed a second or subsequent violation of such ordinance. The municipality or vendor shall destroy any retained portion of personally identifiable information not later than one year after the date of such person's most recent violation.

(d) Any information and other data gathered from automated traffic enforcement safety devices shall be subject to disclosure under the Freedom of Information Act, as defined in section 1-200, except no personally identifiable information may be disclosed.