Connecticut’s legislature amended the Connecticut Data Privacy Act (CTDPA) through Senate Bill 1295, with most
changes taking effect July 2026. The revisions broaden the law’s scope by lowering applicability thresholds, expanding
sensitive data definitions (such as mental health and neural data), and enhancing consumer rights. Controllers must
limit data collection, obtain consent for sensitive processing or sales, and update privacy notices with clearer
disclosures and opt-out links. Organizations should prepare for compliance before the new provisions take effect.
Hiring Tips Blog


