"Connecticut Becomes Fifth US State to Enact Consumer Privacy Law"

Connecticut Governor Ned Lamont officially signed into law the Public Act titled "An Act Concerning Personal Data Privacy and Online Monitoring" on May 10.  Commonly referred to as the Connecticut Privacy Act (CTPA), the new legislation provides consumers with enhanced privacy rights, including the right of access, rectification, and deletion of data.  CTPA also provides the right of data portability, which empowers consumers to ask for a copy of their personal data and the right to opt out in cases in which their data is to be used for purposes of targeted advertising, sold, or profiled by automated systems that can produce "legal or similarly significant effects concerning the consumer."  Additionally, the CTPA establishes obligations on data controllers and assigns enforcement powers to the Attorney General (AG).  The CTPA's scope applies to entities that conduct business in Connecticut or that target Connecticut residents and those who processed the personal data of at least 100,000 consumers in the preceding calendar year.  The CTPA also targets businesses that in the prior calendar year processed the personal data of at least 25,000 consumers and derived more than 25% of their gross revenue from the sale of personal data.  Businesses falling in one of these categories will have to "provide consumers with a reasonably accessible, clear, and meaningful privacy notice" and to "implement the data minimization principle by restricting the collection of personal data to what is adequate, relevant, and reasonably necessary."

Infosecurity reports: "Connecticut Becomes Fifth US State to Enact Consumer Privacy Law"