Description
Significant amendments to Connecticut's Data Privacy Act take effect. Applicability threshold lowered from 100,000 to 35,000 consumers. Sensitive data definition expanded to include neural data, disability-related treatment, nonbinary status, financial account information, and government-issued ID data. New prohibition on sale of sensitive data without consent.
Requirements
- Reassess applicability under lowered 35K threshold
- Update sensitive data classifications for new categories
- Implement consent for sensitive data sales
- Conduct new impact assessments for profiling activities
- Update privacy notices to reflect expanded definitions
Applicable To
Organizations processing data of 35K+ Connecticut consumersOrganizations processing sensitive data in Connecticut
Penalty Information
âš Enforced by Connecticut Attorney General. Penalties of up to $5,000 per violation.