Connecticut’s 2025 enforcement report on the Connecticut Data Privacy Act (CTDPA) highlights increasing regulatory expectations for businesses handling personal data. The report identifies common consumer complaints, including failures to honor data rights requests, data breach notification issues, and reliance on “publicly available” data by people-search websites. It also emphasizes enforcement priorities such as accurate privacy notices, avoidance of dark patterns in cookie banners, honoring universal opt-out signals, and stronger protections for sensitive data and children’s privacy.
