The Connecticut Office of the Attorney General (“CT AG”) has released its first report on enforcement of the Connecticut Data Privacy Act (“CTDPA”), revealing its focus on companies’ privacy policies, protections of “sensitive data” (such as genetic, biometric and geolocation data), and teen data. The CT AG also advocates in its report for a number of legislative changes that would “strengthen or clarify privacy protections under the CTDPA.”
The CTDPA required the CT AG to issue a report six months after its July 1, 2023, effective date detailing (1) the number of violation notices issued; (2) the nature of each violation; (3) the number of violations that were cured; and (4) any other relevant information. We provide details of the report below.
