Connecticut Amends Its Data Privacy Act To Increase Data Protections

On July 1, 2026, the amendments to Connecticut’s Data Privacy Act (“CTDPA”), Senate Bill 1295 (“SB 1295”), took effect, expanding the state comprehensive privacy law’s applicability and definition of “sensitive data.” Enacted in June 2025, SB 1295 is just one of many amendments to the CTDPA since the law’s passage in 2022. Companies should be prepared to assess their privacy compliance programs in light of Connecticut’s new requirements, set to go into effect this fall and next year via amendments.

Adding to the increased data protection provisions implemented by SB 1295, Connecticut Governor Ned Lamont also signed Senate Bill 4 (“SB 4”) into law on May 27, 2026, establishing a data broker registration program and amending the CTDPA to prohibit the sale of precise geolocation data. Provisions of SB 4 were subsequently amended by House Bill 5222 and House Bill 5563 on June 2 and June 4, 2026, respectively. Under SB 4, data brokers will need to register under Connecticut’s new program