Connecticut AG Announces First Settlement Under The Connecticut Data Privacy Act

On July 8, Connecticut Attorney General William Tong announced a settlement with TicketNetwork, Inc. for alleged violations of the Connecticut Data Privacy Act (CTDPA). The settlement is the first publicly announced enforcement action under the state's comprehensive privacy statute, which went into effect on July 1, 2023.

This settlement highlights that enforcement is gaining steam in states whose comprehensive privacy statutes became effective in the past couple of years. Connecticut's settlement also serves as a reminder for businesses to review their privacy notices and the functionality of their consumer rights mechanisms.

Connecticut's action against TicketNetwork focuses on the CTDPA's transparency and opt-out requirements. According to the Attorney General's press release, the AG's Office sent a "cure notice" to TicketNetwork in November 2023 asserting that the company's privacy notice was deficient because it "was largely unreadable, missing key data