Last Update: 04/05/2026 at 2:50 PM EST
Connecticut Tightens Privacy Enforcement
Coverage from JNS.org, Kelley Drye & Warren LLP, and others
Articles
8
Latest Article
03/27
Active Days
57
Executive Summary
Connecticut is expanding privacy enforcement on breach notices, opt-out rights, minors, and genetic data after the 23andMe breach and new CTDPA findings.
- Connecticut logged 1,830 breach notices in 2025 and issued 63 warning letters for delayed notice
- The AG said notice obligations begin when suspicious activity is discovered
- Omni Healthcare paid more than 100,000 dollars after a delayed ransomware breach disclosure
- The office is probing platforms over minors data, chatbots, and privacy risks online
- Enforcement also targets privacy notices, cookie banners, dark patterns, and universal opt-out signals
- The AG urged stronger protections for DNA after a multistate probe of 23andMe
- State lawmakers are weighing bills to tighten privacy rules for children and sensitive data
Quick Facts
- What: Expanded privacy enforcement and proposed tighter rules
- Where: Connecticut and affected online platforms and businesses
- Why: To protect residents data rights and sensitive information
- Who: Connecticut Attorney General William Tong and state lawmakers
- When: In 2025 and ahead of July 1 2026
Coverage Timeline: 57 Days
Featured Article
Connecticut Attorney General in 2025 enforces CTDPA focusing on data rights requests, breach notices, and opt-out signals in Connecticut.
Additional Articles
⭐⭐⭐⭐⭐
Connecticut lawmakers discuss dna privacy protections after the 23andMe breach.
Connecticut Attorney General William Tong announces 1800 breach notifications in 2025 and seeks tighter privacy laws in Connecticut.
⭐⭐⭐
Connecticut, Florida, South Carolina and Minnesota advanced enforcement and new privacy rules in 2025, focusing on deletion rights, children's privacy, foreign-adversary risks, and AI retention.
Connecticut Attorney General reports 2025 CTDPA enforcement actions on breach notices, opt-out rights, and chatbots.
CBIA opposed several Connecticut committee bills in 2026 that would expand employer privacy and cybersecurity duties, including data broker controls, geolocation limits, and massive-breach forensic reporting.
US states and attorney generals tighten privacy rules in 2024 across the United States including Massachusetts.
⭐️⭐️
Connecticut Attorney General William Tong released the 2025 Connecticut Data Privacy Act enforcement report, outlining privacy enforcement activity and business compliance expectations in Connecticut.