Connecticut Becomes Fifth State To Pass Comprehensive State Privacy Law

The seemingly relentless passage of state privacy legislation continues as Connecticut enacts its own comprehensive consumer privacy regulation. On May 10, 2022, Governor Ned Lamont signed into law An Act Concerning Personal Data Privacy and Online Monitoring (CTDPA). The new law will go into effect on July 1, 2023, the same date as the effective date of the new Colorado privacy law.

Threshold Requirements

The CTDPA applies to persons that conduct business in the state or produce products or services targeted to state residents and, during the prior calendar year, controlled or processed the personal data of:

• 100,000 consumers, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or