Connecticut Overhauls Its Data Privacy Act

Short summary

Connecticut's CTDPA amendments (effective July 1, 2026) lower applicability thresholds to 35K consumers and add no-threshold triggers for sensitive data processing or sales, requiring even small businesses to reassess compliance. Key changes include mandatory LLM training disclosures, profiling impact assessments, bans on targeted advertising to minors (13-17), and expanded consumer rights. Organizations must comply by July 1, with profiling assessments required by August 1, 2026.

• •Applicability expanded: lower threshold (35K consumers vs. 100K) and no-threshold triggers for sensitive data or sales
• •New requirements: LLM training disclosures, profiling impact assessments, ban on targeting minors (13-17)
• •Compliance deadlines: July 1, 2026 for substantive changes; August 1, 2026 for profiling assessments

Generated with AI, which can make mistakes.