Who Must Comply with the Connecticut Personal Data Privacy and Online Monitoring Act (“CTDPA”)?
The CTDPA applies to entities that conduct business in Connecticut, or produce products or services that are targeted to Connecticut residents and during the preceding calendar year, either:
1. Controlled or Processed the personal data of at least 100,000 consumers excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or
2. Controlled or Processed the personal data of at least 25,000 consumers and derived more than 25% of their gross revenue from the sale of personal data.
The CTDPA amendment now covers consumer health data and consumer health data controllers, as well as protections for minors.
For more information, see here: https://www.cga.ct.gov/2024/sup/chap_743jj.htm
AND
https://portal.ct.gov/AG/Sections/Privacy/The-Connecticut-Data-Privacy-Act
These materials were obtained directly from the State Legislative websites and are posted here for your review and reference only. No Claim to Original State Government Works. This may not be the most recent version. The State may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.