Update On Enforcement Actions: Connecticut Data Privacy Act

In May of 2022, Connecticut joined a growing list of U.S. states passing privacy regulations when it signed the Connecticut Data Privacy Act (CTDPA) into law. The CTDPA officially went into effect in July 2023.

On February 1, 2024, Connecticut's Office of the Attorney General (OAG) shared its report¹ to the General Assembly's Law Committee covering preliminary enforcement actions taken under the CTDPA. In the six months since the CTDPA went into effect, the OAG issued over a dozen "cure notices" to companies regarding alleged violations of the CTDPA and several broader information requests.

As reflected in the report and by its enforcement activity, the OAG appears to share similar concerns as the California AG concerning the collection and use of sensitive data (such as biometrics and children's/teens' data) and digital advertising practices.