DPDPA is now in force in India. Run a free privacy scan on your site. Scan now

🇺🇸 Connecticut, USA

CTDPA compliance with ConsentX

Connecticut Data Privacy Act

In short
Connecticut's data privacy act mirrors the Virginia and Colorado model: opt-out of targeted advertising, sale and profiling, opt-in for sensitive data, and recognition of universal opt-out signals.
Region

Connecticut, USA

Status

In force since 2023

Group

United States

Who it applies to

Controllers processing data of 100,000+ Connecticut consumers, or 25,000+ while deriving 25% of revenue from selling data.

Penalties

Enforced by the Connecticut Attorney General under the state's unfair trade practices act.

Key obligations

  • Recognize universal opt-out signals
  • Opt-out of targeted ads, sale and profiling
  • Opt-in for sensitive data
  • Privacy notice
  • Honor consumer rights

How ConsentX helps

Universal opt-out signal support

Opt-out controls

Sensitive-data opt-in

DSAR and evidence

Get CTDPA ready with ConsentX

Start free, or book a walkthrough with our team.

This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified counsel.

Frequently asked questions

Is Connecticut's law similar to Colorado's?+

Yes. CTDPA follows the same opt-out plus sensitive-data opt-in model and requires universal opt-out recognition.