Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Connecticut: CTDPA enters into force

The Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA), enters into force on July 1, 2023, following its signing into law by the Connecticut State Governor on May 10, 2022. In particular, the CTDPA regulates privacy and data protection matters in Connecticut by establishing new definitions and conferring several rights on consumers, including access, correction, deletion, portability, and opt-out. Furthermore, the CTDPA will apply to businesses in Connecticut that produce products or services that are targeted to residents of Connecticut and that, during the preceding calendar year, either:

  • controlled or processed the personal data of not less than 100,000 consumers, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or
  • controlled or processed the personal data of not less than 25,000 consumers and derived more than 25% of their gross revenue from the sale of personal data.

Notably, the Connecticut State Attorney General (AG) has exclusive authority to enforce the provisions of the CTDPA.

You can read the CTDPA here.

OneTrust DataGuidance has released a number of resources to assist with your CDPA compliance:

For further information and resources on Connecticut, see our Connecticut homepage.