Connecticut Data Privacy Act (Act Concerning Personal Data Privacy and Online Monitoring)

Connecticut's comprehensive consumer privacy law gives residents rights to access, correct, delete and port their data and to opt out of targeted advertising, sale and consequential profiling, and requires consent for sensitive data, privacy notices, recognition of opt-out preference signals, and data protection assessments. P.A. 25-113 (effective July 1, 2026) sharply broadened coverage (35,000-consumer threshold, any processor of sensitive data, any seller of data), added neural and financial-account data as sensitive data, added profiling rights and impact assessments, extended the teen targeted-advertising and sale ban to under-18s, and required disclosure of LLM training. P.A. 26-64 (effective October 1, 2026) bans the sale of precise geolocation data, restricts facial recognition used for security, and expands deletion rights over people-search profiles built from public information.