On May 10, 2022, Connecticut, following Utah,
California, Virginia, and Colorado, became the fifth state to adopt
a comprehensive consumer data privacy law.
On May 10, 2022, Connecticut Governor Ned Lamot signed "An
Act Concerning Personal Data Privacy and Online Monitoring,"
also known as the Connecticut Data Privacy Act ("CTDPA"),
making Connecticut the fifth state to enact a comprehensive data
privacy law. The CTDPA will take effect on July 1, 2023.
The CTDPA will apply to entities that: (i) conduct business or
target consumers in Connecticut; (ii) generate $25 million or more
in annual revenue; and (iii) either process or control: (a) the
personal data of at least 100,000 Connecticut consumers, or (b) the
personal data of at least 25,000 Connecticut consumers and derive
at least 25% of their gross revenue from selling personal data. The
CTDPA does not apply to individuals acting in a commercial or
employment context.
