Connecticut General Statutes
Chapter 743jj - Consumer Data Privacy and Online Monitoring
Section 42-516. - (Note: This section is effective July 1, 2023.) Applicability.

The provisions of sections 42-515 to 42-525, inclusive, apply to persons that conduct business in this state or persons that produce products or services that are targeted to residents of this state and that during the preceding calendar year: (1) Controlled or processed the personal data of not less than one hundred thousand consumers, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or (2) controlled or processed the personal data of not less than twenty-five thousand consumers and derived more than twenty-five per cent of their gross revenue from the sale of personal data.

(P.A. 22-15, S. 2.)
History: P.A. 22-15 effective July 1, 2023.

Structure Connecticut General Statutes

Connecticut General Statutes

Title 42 - Business, Selling, Trading and Collection Practices

Chapter 743jj - Consumer Data Privacy and Online Monitoring

Section 42-515. - (Note: This section is effective July 1, 2023.) Definitions.

Section 42-516. - (Note: This section is effective July 1, 2023.) Applicability.

Section 42-517. - (Note: This section is effective July 1, 2023.) Exemptions.

Section 42-518. - (Note: This section is effective July 1, 2023.) Consumers' rights. Compliance by Controllers. Appeals.

Section 42-519. - (Note: This section is effective July 1, 2023.) Authorized agents and consumer opt-out.

Section 42-520. - (Note: This section is effective July 1, 2023.) Controllers' duties. Sale of personal data to third parties. Notice and disclosure to consumers. Consumer opt-out.

Section 42-521. - (Note: This section is effective July 1, 2023.) Processors' duties. Contracts between controllers and processors.

Section 42-522. - (Note: This section is effective July 1, 2023.) Controllers' data protection assessments. Disclosure to Attorney General.

Section 42-523. - (Note: This section is effective July 1, 2023.) De-identified and pseudonymous data. Controllers' duties. Exceptions. Applicability of consumers' rights. Disclosure and oversight.

Section 42-524. - (Note: This section is effective July 1, 2023.) Construction of controllers' and processors' duties.

Section 42-525. - (Note: This section is effective July 1, 2023.) Enforcement by Attorney General. Notice of violation. Cure period. Report. Penalty.