Connecticut Data Privacy Act

Connecticut Data Privacy Act, in force 1 Jul 2023 — follows the Virginia template, amended twice: PA 23-56 (children's amendments, 1 Oct 2024) and PA 24-148 (1 Jul 2026 — expanded consumer health data, narrowed cure period, additional minor restrictions). CT AG Aug 2024 enforcement report (10 cure notices, 4 settlements) signalled cure unavailable to repeat violators. 2025: Ticket Network $85K settlement. UOOM honour required.

Composition

14 controls currently indexed; participates in 8 cross-framework synthesis clusters.

Participates in synthesis

Each cluster listed below combines this framework's controls with operationally equivalent controls from other frameworks, resolving the overlap into a single audit-defensible specification.

• Automated Decision-Making Technology — pre-use notice, opt-out, access rights
• Children's privacy across US states — heightened protections
• Cross-jurisdiction consumer / Data Principal rights — operational fabric
• GDPR data subject rights — Articles 12-22 operational implementation
• PII principal rights — comprehensive ISO 27701-anchored programme
• Processor / service provider contract requirements across jurisdictions
• Sensitive personal information — heightened protection across jurisdictions
• Universal Opt-Out Mechanism (UOOM) / Global Privacy Control honour across US states