Index
Consumer ProtectionConnecticut, USA

Connecticut Data Privacy Act (CTDPA)

Summary

The CTDPA gives Connecticut residents broad rights to control their personal data, including the right to opt-out of targeted advertising and the sale of their data.

Rights & Rules

  • 01.
    You have the right to know if a company is collecting your personal data and to get a copy of that data.
  • 02.
    You have the right to demand a company delete your personal data.
  • 03.
    You have the right to easily 'opt-out' of having your data sold to data brokers or used for targeted ads.
  • 04.
    Companies MUST obtain your clear, affirmative consent before collecting 'sensitive' data, such as your race, religious beliefs, sexual orientation, genetic data, or precise GPS location.

Penalties

  • 01.
    Consumers cannot sue companies directly under this law. Enforcement is handled exclusively by the Connecticut Attorney General, who can levy significant fines for unfair trade practices.

Verified Citations

Connecticut Public Act No. 22-15

Source
"A consumer shall have the right to: (1) Confirm whether or not a controller is processing the consumer's personal data... (2) correct inaccuracies... (3) delete personal data provided by, or obtained about, the consumer..."