Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Connecticut: CTDPA enters into force
The Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA), enters into force on July 1, 2023, following its signing into law by the Connecticut State Governor on May 10, 2022. In particular, the CTDPA regulates privacy and data protection matters in Connecticut by establishing new definitions and conferring several rights on consumers, including access, correction, deletion, portability, and opt-out. Furthermore, the CTDPA will apply to businesses in Connecticut that produce products or services that are targeted to residents of Connecticut and that, during the preceding calendar year, either:
- controlled or processed the personal data of not less than 100,000 consumers, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or
- controlled or processed the personal data of not less than 25,000 consumers and derived more than 25% of their gross revenue from the sale of personal data.
Notably, the Connecticut State Attorney General (AG) has exclusive authority to enforce the provisions of the CTDPA.
You can read the CTDPA here.
OneTrust DataGuidance has released a number of resources to assist with your CDPA compliance:
- Connecticut - Data Protection Overview Guidance Note;
- Connecticut: Act Concerning Personal Data Privacy and Online Monitoring – what you need to know;
- Connecticut: Analysing the CTDPA;
- Connecticut: FAQs - CTDPA; and
- Connecticut Joins US Privacy Landscape With New Law (Webinar).
For further information and resources on Connecticut, see our Connecticut homepage.