February 1, The Connecticut Attorney General (AG) report in The Connecticut Data Privacy Act (CTDPA) contains information about the law and state enforcement practices. CTDPA is a comprehensive consumer data privacy law enacted in May 2022 and effective July 1, 2023. The CTDPA provides Connecticut consumers with a set of rights regarding their personal information and the privacy standards of businesses that handle such data. Connecticut residents can: (i) see what data companies have on them; (ii) request that any inaccurate information be corrected; (iii) request deletion of your data; (iv) choose not to use your personal information for product sales, targeted advertising, or profiling; The report noted that within the first six months after the CTDPA went into effect, the AG committed dozens of violations of numerous information requests. It added that companies generally responded positively to notifications and quickly updated their privacy policies and consumer rights mechanisms. According to the report, some companies initially fell below the CTDPA threshold but later made changes to meet the standard, while others went beyond the areas identified in the notice by increasing their disclosures. It is said that there was also
The report also Starting January 1, 2025, businesses will be required to accept a universal opt-out signal that reflects a consumer’s choice to opt out of targeted advertising and the sale of their personal data. This mandatory provision was emphasized during the Connecticut legislative process and enacted into law to reduce the burden on consumers. Finally, the report discusses possible expansions and clarifications of his CTDPA for consideration by Congress.
