Connecticut consumer data privacy act
Conn. Gen. Stat. §§ 42-515 to 42-525 · Read 2026-08-15
Enacted 2022-05-10 and applicable from 2023-07-01. Scope threshold as written: 100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data. Separate rules for consumer health data and for minors' social media accounts.
Identifier
- Identifier
- Conn. Gen. Stat. §§ 42-515 to 42-525
- Level
- State CT
- Status
- In force
- Adopted
- 2022-05-10
- Applies from
- 2023-07-01
- Supervisory bodies
- Connecticut AG
Named requirements
Applicability and thresholds
Conn. Gen. Stat. §§ 42-515 to 42-525
100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data.
Privacy notice
Conn. Gen. Stat. §§ 42-515 to 42-525
A reasonably accessible notice naming the categories processed, the purposes, the categories shared and how rights are exercised.
Consumer rights
Conn. Gen. Stat. §§ 42-515 to 42-525
Access, deletion, portability, correction and opt-out of targeted advertising, sale and certain profiling, with an appeal route.
Sensitive data
Conn. Gen. Stat. §§ 42-515 to 42-525
Consent, or in some states a strict necessity standard, before sensitive categories are processed.
Data protection assessment
Conn. Gen. Stat. §§ 42-515 to 42-525
A documented assessment for targeted advertising, sale, sensitive data and profiling that carries a heightened risk.
Processor contract
Conn. Gen. Stat. §§ 42-515 to 42-525
A written contract that sets instructions, confidentiality, deletion or return, and audit rights.
Enforcement
Conn. Gen. Stat. §§ 42-515 to 42-525
Enforced by the state authority. Separate rules for consumer health data and for minors' social media accounts.
Official source
EU acts on the same ground
- gdpr
Covers the same ground as the GDPR on notice, rights and processor contracts, with a narrower scope and no general lawful basis requirement.
Change monitoring
The row is re-read against the publisher's own publication on a fixed interval. The dates below can be checked on the spot and travel with the API response.
| Field | Value |
|---|---|
| Register | Connecticut AG, Conn. Gen. Stat. §§ 42-515 to 42-525 |
| Publisher | Office of the Attorney General of Connecticut |
| Last read | 2026-08-15 |
| Interval | Every 30 days |
| Next re-read | 2026-09-14 |
| Status | Re-read overdue |
Row history
Dated events concerning this exact row, newest first. No event appears here without a date in a primary source.
| Date | Event | Source |
|---|---|---|
| 2026-08-15 | Row read against the official publication | Office of the Attorney General of Connecticut |
| 2023-07-01 | Date of application according to the publisher | Office of the Attorney General of Connecticut |
| 2022-05-10 | Adopted under Conn. Gen. Stat. §§ 42-515 to 42-525 | Office of the Attorney General of Connecticut |
Monitoring states when the row was checked, not how the legal position should be assessed.
Cite this row
The string below travels with a memo, a case file or an agent chain. The same string sits in the citation field of the API response.
Conn. Gen. Stat. §§ 42-515 to 42-525, Connecticut consumer data privacy act. NovaCopilot, https://legal.exploreworldai.com/us/regler/connecticut-ctdpa (hämtad 2026-11-02, bevis sha256:aac06b64e50257cc, bygge legal-2026-11-02).
- sha256:
- aac06b64e50257cc845b3125348a7276a09c6c063678a1617554ada1b3e9d837
- hämtad:
- 2026-11-02
- source_confidence:
- derived
- bygge:
- legal-2026-11-02
- officiell källa:
- https://www.cga.ct.gov/current/pub/chap_743jj.htm
Derived path to the publisher. The address is built from the identifier and lands in the publisher's own register. cga.ct.gov.
The row is a source reference with an official identifier. No legal advice and no compliance decision.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit