Connecticut Healthcare Compliance Requirements
State-specific breach notification rules, medical records retention periods, PDMP requirements, and mandatory reporting obligations for medical practices operating in Connecticut.
Breach Notification Rules
Notification deadline
60 calendar days
Notification must be made no later than 60 days after discovery of the breach. AG must be notified simultaneously.
AG notification threshold
All breaches
Notify: AG
Harm analysis required
Penalty range
Up to $5,000 per violation under CUTPA
Medical Records Retention
| Record type | Retention period | Measured from |
|---|---|---|
| General medical | 7 years | Last treatment |
| Pediatric | 7 years | Patient turns 18 |
PDMP Requirements — Connecticut PMP
Check required
All controlled substances
Check frequency
Every prescription
Delegation allowed
Penalty range
License suspension or revocation; fines up to $1,000 per violation; possible criminal penalties
Exemptions
Hospice patients, cancer treatment, ≤72 hour supply in ER, inpatient hospital or long-term care facility administration
Mandatory Reporting Obligations
Mandated reporters
Physicians, surgeons, nurses, dentists, dental hygienists, psychologists, school employees, social workers, and all healthcare professionals
Report to
Department of Children and Families (DCF) Careline
Timeline
Immediately / as soon as possible
Penalty for failure
Class A misdemeanor, up to 1 year jail and/or $2,000 fine
Immunity provision
Good faith reporters immune from civil and criminal liability under CGS 17a-101e
Mandated reporters
Physicians, nurses, dentists, psychologists, and all licensed healthcare professionals
Report to
Department of Social Services, Elderly Protective Services
Timeline
Immediately / as soon as possible
Penalty for failure
Up to $2,500 fine
Immunity provision
Good faith reporters immune from civil and criminal liability
Mandated reporters
Healthcare providers when treating injuries reasonably believed to result from abuse
Report to
Local law enforcement
Timeline
Immediately / as soon as possible
Immunity provision
Good faith reporters immune from civil liability
Mandated reporters
Physicians, laboratories, healthcare facilities, and infection control practitioners
Report to
Connecticut Department of Public Health
Timeline
Within 24 hours
Penalty for failure
Up to $1,000 fine per violation
Immunity provision
Good faith reporters immune from civil liability
Mandated reporters
All healthcare providers treating gunshot wounds or stab wounds
Report to
Local law enforcement
Timeline
Immediately / as soon as possible
Penalty for failure
Class A misdemeanor
Immunity provision
Good faith reporters immune from civil and criminal liability
Stay compliant in Connecticut
GuardWell tracks Connecticut-specific breach deadlines, PDMP requirements, retention periods, and mandatory reporting obligations automatically.