Jurisdiction ยท 1 regulationConnecticut privacy and AI laws
1 regulation in Connecticut that affect companies handling data: Connecticut Data Privacy Act (CTDPA). Part of US States.
1 regulation
Add to calendar
- Connecticut Data Privacy Act (CTDPA)
Connecticut
AmendedPrivacyChildrenNext: Oct 1, 2026 PA 26-64 (SB 4) amendments take effect
Upcoming deadlines
October 20261 deadline
PA 26-64 (SB 4) amendments take effect
Prohibits controllers and third parties from selling precise geolocation data and enacts data broker and other consumer protection provisions.
January 20271 deadline
Data broker registration required
Data brokers may not sell or license brokered personal data in Connecticut unless registered with the Department of Consumer Protection ($2,500 initial fee).
October 20281 deadline
Data brokers must process state deletion mechanism requests
Registered data brokers must access the DCP accessible deletion mechanism at least every 45 days and process deletion requests.
Past deadlines
August 20261 deadline
Profiling impact assessments apply
Impact assessment requirements apply to profiling activities created or generated on or after Aug 1, 2026 (Conn. Gen. Stat. 42-522 as amended).
July 20261 deadline
PA 25-113 (SB 1295) amendments take effect
Thresholds drop to 35,000 consumers or any sensitive-data processing or data sale; expanded sensitive data, minors' protections, and LLM-training disclosure in privacy notices.
January 20251 deadline
Universal opt-out preference signals required
Controllers must honor opt-out preference signals for targeted advertising and sale (effective Jan 1, 2025).
December 20241 deadline
Mandatory 60-day cure period expires
After Dec 31, 2024, the AG is no longer required to offer a 60-day cure before enforcement; cure becomes discretionary.
July 20231 deadline
CTDPA takes effect
Core consumer rights and controller obligations apply.