Connecticut Data Privacy Act

A major 2025 amendment took effect July 1, 2026 and dramatically lowered the bar: it now applies at 35,000+ Connecticut residents, OR if you sell personal data of even a single resident, OR process sensitive data (health, biometric, genetic, precise geolocation, children's/teens' data, immigration status, and more) of even a single resident — the old 25%-of-revenue test is effectively gone. The amendment also added neural data, transgender/nonbinary status, and government ID numbers as new sensitive-data categories, plus a new AI-training-use disclosure duty.