Connecticut Set To Enact Comprehensive Consumer Privacy Law

Connecticut is poised to become the fifth state to pass comprehensive consumer privacy legislation, after California, Virginia, Colorado, and Utah. Senate Bill 6, the Connecticut Data Privacy Act ("CTDPA"), passed the Connecticut House of Representatives on April 28, 2022, after clearing Senate approval on April 20. Once enacted, most provisions of the CTDPA would take effect on July 1, 2023.

The CTDPA would impose data protection obligations on businesses that process personal data of Connecticut residents. It would also afford Connecticut residents the rights to access, correct, delete, and opt out of sales of personal data. Enforcement would be handled by the Connecticut Attorney General. The law does not contain a private right of action.