Connecticut

Date Active

Laws

Connecticut Data Privacy Act (CTDPA): Applies to persons that conduct business in Connecticut or produce products or services targeted to Connecticut residents and that during the preceding calendar year

• controlled or processed the personal data of at least 100,000 Connecticut residents (excluding personal data controlled or processed solely for the purpose of completing a payment transaction); OR
  • controlled or processed personal data of at least 25,000 Connecticut residents and derived more than 25% of gross revenue from the sale of personal data 
• Connecticut Health Data Privacy Act (SB 3): Applies to consumer health data controllers, which alone or jointly with others determine the purpose and means of processing consumer health data 
• Consumer health data: any personal data that a controller uses to identify a Connecticut resident's physical or mental health condition or diagnosis

Connecticut Data Privacy Act (CTDPA)
Date Active: 7/1/2023

Connecticut Health Privacy Act (SB 3)
Date Active: 10/1/2023