Leaves for a neutral website at once. It doesn't erase your browser history.

The Defend Foundation

Privacy Center

State · United States

Connecticut

The Privacy Center provides general information and links to official government resources. It is not legal advice, and The Defend Foundation is not a government agency. Privacy laws, eligibility requirements, and agency procedures may change. Always check the relevant official government source for current information. The Privacy Center does not determine which laws apply to you, contact agencies, or submit requests on your behalf.

Your digital rights and protections in Connecticut

What each protection means, who it covers, and the official place to go. Links open official websites in a new tab. You'll leave Defend, and Defend doesn't send anything on your behalf.

Privacy & personal data

  • Your Connecticut consumer data rights

    In effect

    The Connecticut Data Privacy Act gives Connecticut residents rights over the personal data that covered businesses collect about them. It has been in effect since July 1, 2023.

    Who or what it protects
    Connecticut residents acting as individuals or households, not in a job context. It covers businesses in Connecticut or targeting its residents that process the personal data of at least 35,000 consumers, process any sensitive data, or sell personal data. Businesses that handle consumer health data are covered whatever their size. Government bodies, most nonprofits, colleges and universities, banks and other financial institutions, insurers and organizations covered by HIPAA are exempt, as is some data covered by other laws.
    What you can do
    You can see the personal data a business has about you, including what it has inferred about you and whether it uses your data for profiling. You can correct it, delete it, including data from other sources and public information compiled into a profile about you, and get a copy you can take elsewhere. You can get a list of the third parties a business sold your data to. You can opt out of the sale of your data, targeted advertising and profiling with legal or similarly significant effects. Since January 1, 2025, covered businesses must honor opt-out preference signals, such as the Global Privacy Control in a browser or extension. Use the method in the company's privacy notice. It must respond within 45 days, which it can extend by 45 days. If it denies your request, you can appeal; it has 60 days to answer, and if it denies the appeal it must tell you how to contact the Attorney General.
    Limits and eligibility
    There is no private right to sue under this law. The Attorney General enforces it. A business can deny a request for reasons the law sets out, such as preventing fraud or complying with other laws. One request a year is free.
    Who oversees it
    Connecticut Attorney General
    The law
    Connecticut Data Privacy Act

    Checked against the official sources on October 6, 2026. Links last checked November 1, 2026.

Some protections come from national law. See federal protections

Other ways we can help