Connecticut Data Privacy Act Compliance | Solutions | OneTrust
OneTrust Named a Visionary in the 2026 Gartner® Magic Quadrant™ for AI Governance Platforms
Connecticut Data Privacy Act Compliance
Operationalize CTDPA Compliance
Protect and govern Connecticut consumer data and keep up with changes to state and US privacy laws with OneTrust Privacy Automation.
Deploy a Single Platform for Privacy Automation and Personal Data Governance
US data privacy laws are becoming increasingly complex. We’ll help you streamline compliance with Connecticut’s data privacy law, along with other relevant regulations, all from one platform.
Protect consumer rights
Implement consumer rights fulfillment to ensure Connecticut residents see the appropriate opt-out preference signals. Capture, track, and sync consumer consent across systems to avoid the unauthorized sale of personal data, correct inaccuracies, and manage the collection and exchange of personal data.
Centralize and distribute privacy disclosures
Adhere to notification requirements and easily update, centralize, and distribute policies, notices, and disclosures across web and mobile properties from a single platform. Update privacy notices to include data subject rights under CTDPA and direct consumers to a data subject rights intake form.
Streamline data protection assessments
Empower stakeholders to efficiently conduct business and document risk for targeted advertising, profiling, sales of data or in situations where activities present a heightened risk to consumers. Embed templates into existing business systems to auto-collect information for audits.
FAQs
What is the Connecticut Data Privacy Act (CTDPA)?
The Connecticut Data Privacy Act (CTDPA) is a comprehensive privacy law that expands consumer rights and strengthens data protection for Connecticut residents. It requires businesses to safeguard personal data and conduct privacy risk assessments for high-risk processing activities, including targeted advertising. Connecticut became the fifth U.S. state to enact a comprehensive privacy law.
Who does the Connecticut Privacy Act apply to?
Like other state privacy laws, Connecticut’s privacy act covered entities include:
Conduct business in the state or sell products or services to residents of the state and control or process the data of 100,000 customers (excludes personal data controlled/processed solely to complete a transaction)
Or control or process the data of 25,000 or more customers and derive over 25% of their gross revenue from the sale of personal data
In other words, like Utah, Colorado and California laws, even if your business isn’t located in Connecticut, you still may need to comply with the regulation.
What consumer privacy rights does the CTDPA provide?
CTDPA consumer requests include the right to access data, its correction, deletion, and portability. It also mandates opt-outs for targeted advertising, the sale of personal data, and automated decision-making profiling.