Connecticut’s legislature amended the Connecticut Data Privacy Act (CTDPA) through Senate Bill 1295, with most changes taking effect July 2026. The revisions broaden the law’s scope by lowering applicability thresholds, expanding sensitive data definitions (such as mental health and neural data), and enhancing consumer rights. Controllers must limit data collection, obtain consent for sensitive processing or sales, and update privacy notices with clearer disclosures and opt‑out links. Organizations should prepare for compliance before the new provisions take effect.
