Connecticut Data Privacy Act (CTDPA), general applicability and controller/processor duties

Conn. Gen. Stat. §§ 42-515, 42-524

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 July 2023.

A comprehensive regime rule binding private bodies.

As of 27 August 2026.

What it requires

Confirm you conduct business in Connecticut, or produce a product or service targeted at Connecticut residents, and process or sell personal data before relying on CTDPA's scope in compliance planning.
Reassess your applicability threshold against the 2026 amendments (S.B. 1295) rather than the original 2023 thresholds; secondary reporting describes a lower consumer-count trigger effective July 1, 2026.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

CTDPA governs private-sector processing of Connecticut residents' personal data. Enacted as Public Act 22-15 (S.B. 6, 2022), effective July 1, 2023. Controller and processor duties are allocated at sections 42-515 to 42-524. S.B. 1295, enacted as Public Act 25-113 (signed June 25, 2025), substantially amended the Act, with amendments effective July 1, 2026, including a lower applicability threshold and an expanded profiling opt-out.

The base chapter as published at cga.ct.gov's 'current' text has not yet folded this Public Act in, directing readers to a separate 2026 Supplement instead; the July 1, 2026 effective date and the amendment's substance are confirmed against the enrolled Public Act 25-113 text itself.

When LexLint raises it

automated_outreach
crawls_web
deploys_chatbot
processes_biometrics
processes_voice
trains_models

Read the law

official Connecticut statute text, Chapter 743jj, Connecticut General Statutes

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app