Connecticut

Law: Not looked at yet

The act's official or short title as the statute or the state's official page gives it, with its code citation if stated.

No source we could use stated this. A blank never means no.

Takes effect: July 1, 2023

The first date the law's main consumer-privacy duties apply to businesses, as stated by the statute or state. Ignore later phase-ins for specific provisions.

P.A. 22-15 effective July 1, 2023

Source: https://www.cga.ct.gov/current/pub/chap_743jj.htm. Read 2026-11-01. Read once.

Who it applies to: Not looked at yet

The law's applicability threshold in short form, as the statute states it, such as revenue or number of consumers processed.

No source we could use stated this. A blank never means no.

Consumers threshold: 35000 consumers

The lowest number of state consumers whose personal data triggers the law on its own, without a revenue test. Null if the law has no such number.

[one hundred thousand] thirty-five thousand consumers

Source: https://www.cga.ct.gov/2025/act/pa/pdf/2025PA-00113-R00SB-01295-PA.pdf. Read 2026-11-01. Read once.

Cure period: 60 days

Days the statute gives a business to fix a violation before enforcement. Null if the law gives no right to cure.

fails to cure such violation within sixty days of receipt of the notice of violation

Source: https://www.cga.ct.gov/current/pub/chap_743jj.htm. Read 2026-11-01. Read once.

Cure period ends: December 31, 2024

The date the right to cure sunsets, as stated in the statute. Null if there is no cure period or it does not expire.

During the period beginning on July 1, 2023, and ending on December 31, 2024, the Attorney General shall

Source: https://www.cga.ct.gov/current/pub/chap_743jj.htm. Read 2026-11-01. Read once.

Enforced by: Attorney General

The official or agency the statute names as enforcer.

The Attorney General shall have exclusive authority to enforce violations of sections 42-515 to 42-524

Source: https://www.cga.ct.gov/current/pub/chap_743jj.htm. Read 2026-11-01. Read once.

Maximum penalty: 5000 USD per violation

The highest civil penalty per violation stated in the statute, including higher tiers such as intentional violations. Use the statute's base figure, not inflation-adjusted amounts, unless the statute itself states the adjusted figure.

a civil penalty of not more than five thousand dollars for each violation

Source: https://www.cga.ct.gov/current/pub/chap_735a.htm. Read 2026-11-01. Read once.

Private right of action: No

True if consumers can sue directly under the law for any violation. False if the statute says it creates no private right of action or leaves enforcement solely to the state.

shall be construed as providing the basis for, or be subject to, a private right of action for violations of said sections or any other law

Source: https://www.cga.ct.gov/current/pub/chap_743jj.htm. Read 2026-11-01. Read once.

Opt-out signal required: Yes

True if the statute requires businesses to honor a universal opt-out signal or preference signal, such as Global Privacy Control, now or by a stated date.

the controller shall comply with such consumer's opt-out preference signal

Source: https://www.cga.ct.gov/current/pub/chap_743jj.htm. Read 2026-11-01. Read once.