Connecticut Is Considering a Privacy Bill Similar to the Virginia Consumer Data Protection Act

The Connecticut legislature is currently considering an Act Concerning Consumer Privacy, a privacy bill that is nearly identical to the recently enacted Virginia Consumer Data Protection Act (VCDPA).

Like the VCDPA, the Connecticut bill will provide state consumers with a number of new privacy rights, including: (1) right of access, which includes a right to confirm whether an organization is processing consumer’s personal data as well as the right to access that information; (2) right to correction;  (3) right to deletion; (4)  right to data portability; and (5) right to opt-out of processing for purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

Controllers’ responsibilities will include transparency, data minimization, avoidance of secondary use, data security, prohibition on discrimination, as well as a requirement to obtain consumer’s consent to process sensitive data.  Controllers will be required to respond to consumers’ data subject requests within 45 days and allow for consumers’ appeals when requests are denied.

The bill will obligate controllers to conduct data protection assessments with respect to each of the following processing activities involving personal data: (1) processing of personal data for purposes of targeted advertising; (2) sale of personal data; (3) processing of personal data for purposes of profiling; (4) processing of sensitive data; and (5) any processing activities involving personal data that present a heightened risk of harm to the consumers.

Under the bill, the Connecticut Attorney General will have the exclusive authority to enforce the bill’s provisions by bringing an action in the state’s name, or on behalf of state residents, and seek civil penalties and damages up to $7,500 per violation.

In enacted, the Connecticut Act Concerning Consumer Privacy would come into effect on January 1, 2023.

Download Clarip’s U.S. Data Protection Laws 2020 – 2023 Datasheet for more on current and future United States consumer data protection regulations. Take a tour of Clarip’s patented data privacy technology and learn how Clarip can help your enterprise comply with emerging state level data subject rights regulations. Call Clarip today at 1-888-252-5653 or schedule a Demo Online!