Regulationsby GlyphRegulations
Add to calendar
Upcoming deadlines
Data broker registration requiredData brokers may not sell or license brokered personal data in Connecticut unless registered with the Department of Consumer Protection ($2,500 initial fee).
Data brokers must process state deletion mechanism requestsRegistered data brokers must access the DCP accessible deletion mechanism at least every 45 days and process deletion requests.
Past deadlines
PA 26-64 (SB 4) amendments take effectProhibits controllers and third parties from selling precise geolocation data and enacts data broker and other consumer protection provisions.
Profiling impact assessments applyImpact assessment requirements apply to profiling activities created or generated on or after Aug 1, 2026 (Conn. Gen. Stat. 42-522 as amended).
PA 25-113 (SB 1295) amendments take effectThresholds drop to 35,000 consumers or any sensitive-data processing or data sale; expanded sensitive data, minors' protections, and LLM-training disclosure in privacy notices.
Universal opt-out preference signals requiredControllers must honor opt-out preference signals for targeted advertising and sale (effective Jan 1, 2025).
Mandatory 60-day cure period expiresAfter Dec 31, 2024, the AG is no longer required to offer a 60-day cure before enforcement; cure becomes discretionary.
CTDPA takes effectCore consumer rights and controller obligations apply.