Conn. Gen. Stat. § 13a-267: Personally identifiable information.

(a) No personally identifiable information shall be sold or disclosed by the department or a vendor to any person or entity except where the disclosure is made (1) in connection with the charging, collection and enforcement of the fines imposed pursuant to section 13a-263, (2) pursuant to a judicial order, including a search warrant or subpoena, in a criminal proceeding, or (3) to comply with federal or state laws or regulations.

(b) No personally identifiable information shall be stored or retained by the department or a vendor unless such information is necessary for the collection and enforcement of the fines imposed pursuant to section 13a-263.

(c) The department or a vendor may disclose aggregate information and other data gathered from work zone speed control systems that does not directly or indirectly identify an owner or a motor vehicle for research purposes authorized by the Commissioner of Transportation.

(d) Except as otherwise provided by law or in connection with an administrative summons or judicial order, including a search warrant or subpoena, in a criminal proceeding, the department or a vendor shall destroy personally identifiable information and other data that specifically identifies a motor vehicle and relates to a violation of section 13a-263 not later than one year after any fine is imposed or the resolution of a trial conducted for the alleged commission of such violation.

(e) Personally identifiable information shall not be deemed a public record, for purposes of the Freedom of Information Act, as defined in section 1-200.