Image for article type news
Laws & Regulations

Connecticut: Online Privacy Act enters into force

October 6, 2023
Summary

The Connecticut Online Privacy Act, amending the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA), came into effect on October 1, 2023, with staggered effective dates for various sections. It introduces new provisions such as expanded scope of the CTDPA, restrictions on health information disclosure, and definitions like 'consumer health data controller.' The Act prohibits certain practices regarding consumer health data, including unauthorized access, geofencing near health facilities, and selling data without consent. It applies to businesses and product/service providers targeting Connecticut residents. OneTrust DataGuidance offers resources for CTDPA compliance.

CT's Online Privacy Act amends CTDPA, adding new data protection provisions and compliance resources.

On October 1, 2023, provisions of the Connecticut Act Concerning Online Privacy, Data, and Safety Protections (Online Privacy Act) which makes amendments to the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA) entered into force, pursuant to §207 of An Act Concerning the State Budget (the State Budget Act). The State Budget Act also repeals §42-525 of the CTDPA providing that the Connecticut Attorney General shall have exclusive authority to enforce violations of §§42-515 to 42-524 of the CTDPA, and §2 of the Online Privacy Act, from October 1, 2023. Effective dates The Online Privacy Act will take effect as follows: §§6 and 17 entered into effect on July 1, 20