Connecticut has passed amendments to the Connecticut Data Privacy Act that take effect July 1, 2026, subject to the governor’s signature. These changes lower business thresholds (now covering controllers processing 35,000 consumers’ data), refine data‑minimization rules, broaden the definition of sensitive data to include neural and financial information, extend protections to those under 18, and impose new disclosure, social media, and data broker registration mandates.
