Connecticut legislation seems to say that someone possessing data about my behavior must somehow safeguard the data from abuse. That's a very broad requirement, as virtually everything I do (including writing this note) reflects my behavior that is unique and identifying to me. http://legal-beagle.typepad.
"pattern of links between individuals and their behavior in the network--how often they email or call each other"
- Technology Review: Blogs: arXiv blog: New Class of Malware Will Steal Behavioral Patterns (view on Google Sidewiki)