Connecticut Data Privacy Act (“CTDPA”)
OFFICIAL CITATION: Conn. Gen. Stat. §§ 42-515 et seq., Chapter 743jj, Data Privacy and Security.
ORIGINAL LEGISLATION: Public Act 22-15 (SB 6).
EFFECTIVE DATE: July 1, 2023.
STATUS: Enacted and operative; amended by subsequent legislation, including Public Act 25-113 (2025) and Public Act 26-64 (2026).
SUMMARY:
The Connecticut Data Privacy Act (“CTDPA”) establishes consumer privacy rights and compliance requirements for covered organizations that collect, use, process, or disclose personal data.
The law addresses consumer rights, privacy notices, sensitive data, data protection assessments, targeted advertising, personal-data sales, processor relationships, and enforcement by the Connecticut Attorney General.
Subsequent amendments have expanded applicability and introduced additional protections involving consumer health data, minors, profiling, facial recognition, precise geolocation information, and other data-processing activities.
Organizations should review the current statutory provisions and applicable amendments when evaluating their Connecticut privacy obligations.
OFFICIAL LEGAL SOURCES:
-
Connecticut General Statutes, Chapter 743jj — Data Privacy and Security
-
Public Act 25-113 — 2025 Privacy Amendments
-
Public Act 26-64 — 2026 Consumer Privacy and Protection Amendments
Last Reviewed: October 16, 2026
These materials were obtained directly from the State Legislative websites and are posted here for your review and reference only. No Claim to Original State Government Works. This may not be the most recent version. The State may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.