State Laws Map Enforcement Tracker Privacy Glossary Blog Check Your Compliance

HomeChecklistsConnecticut Checklist

Connecticut Privacy Compliance Checklist

Connecticut Data Privacy Act — Step-by-step guide to compliance

Compliance Steps

Effective: July 1, 20230

1
Reassess applicability — SB 1295 lowers the threshold to 35,000 consumers and removes thresholds for sensitive data and data sales (effective July 1, 2026)
2
Evaluate GLBA exemption status — entity-level exemption removed; confirm whether narrower data-level exemption applies
3
Implement universal opt-out signal recognition (GPC and similar mechanisms)
4
Update privacy notices to include all CTDPA-required disclosures, including whether personal data is collected, used, or sold for training large language models
5
Build consumer request intake and response processes within the 45-day response window, including new profiling contest mechanism
6
Obtain opt-in consent before processing all sensitive data categories, including newly added neural data and transgender/nonbinary status
7
Prohibit sale of sensitive personal data without explicit consumer opt-in
8
Conduct and document data protection assessments for high-risk processing
9
Perform impact assessments for profiling that produces legal or similarly significant effects — document purpose, risks, input/output data, performance metrics, and safeguards
10
Audit system design features for compliance with minor protection provisions — ensure no targeted advertising or data sale for minors, apply strict necessity test for geolocation

Key Enforcement Details

Enforced By

Connecticut Attorney General

Penalty / Violation

$5,000

Cure Period

None

Private Right of Action

No

Disclaimer: PrivacyLawMap provides general information about US state privacy laws for educational purposes only. This is NOT legal advice. Privacy laws are complex and frequently amended. Consult with a qualified privacy attorney for advice specific to your business. PrivacyLawMap makes no warranties about the accuracy or completeness of this information.

Recommended Compliance Tools

Trusted tools to help you comply with state privacy laws.

Free cookie consent solution with privacy policy generator. Perfect for small businesses.

Try Termly Free

Enterprise-grade privacy management platform. Automate compliance across all states.

Get OneTrust Demo

Easy-to-use consent management with built-in GPC support and data mapping.

Start with Osano

We may earn a commission when you use these links. This helps keep PrivacyLawMap free.

Does this law apply to you?

Use our free calculator to check if Connecticut Data Privacy Act applies to your business.

Check Applicability

Official Resources

Connecticut Attorney General Consumer Privacy
CTDPA Full Text
SB 1295 (2025 Amendments) Full Text

Navigate US state privacy laws with confidence. Free tools for businesses of all sizes.

Tools

Privacy Calculator
GPC Checker
Data Broker Quiz
Compare States
Deadline Timeline

Resources

State Laws Map
Enforcement Tracker
Privacy Glossary
Compliance Checklists
Blog

Popular States

California (CCPA/CPRA)
Texas (TDPSA)
Virginia (VCDPA)
Colorado (CPA)
Connecticut (CTDPA)

Company

About
Privacy Policy

Disclaimer: PrivacyLawMap provides general information about US state privacy laws for educational purposes only. This is NOT legal advice. Privacy laws are complex and frequently amended. Consult with a qualified privacy attorney for advice specific to your business. PrivacyLawMap makes no warranties about the accuracy or completeness of this information.

© 2026 PrivacyLawMap. All rights reserved.