Lexology May 12, 2022
Connecticut joined the ranks of U.S. states that have enacted comprehensive privacy legislation when on May 10, Connecticut Governor Ned Lamont signed into law the Connecticut Data Privacy Act (CTDPA), which grants consumers new data privacy rights and creates new obligations for how businesses collect and use their personal data. Although the CTDPA does not create a private right of action, a violation of the law constitutes an “unfair trade practice” and Connecticut’s attorney general is vested with the authority to enforce such violations. The CTDPA will take effect on July 1, 2023. Similar to recently enacted data privacy laws in other states (e.g., California, Virginia, Colorado, Utah), the CTDPA contains requirements that businesses will need to address in their...