Connecticut Expands Data Privacy Act, Increasing Protections for Consumers
Connecticut has implemented amendments to its Data Privacy Act (CTDPA) through Senate Bill 1295, which took effect on July 1, 2026. These amendments expand the law's applicability and redefine 'sensitive data' to include government-issued identification numbers and financial information. Additionally, Senate Bill 4, signed by Governor Ned Lamont, establishes a data broker registration program and prohibits the sale of precise geolocation data. The amendments aim to enhance consumer data protection and require companies to reassess their privacy compliance programs. The new requirements will be phased in, with some taking effect in October 2026 and others in January 2027.