CTDPA is Connecticut Data Protection Act was signed into law on 28 April 2022. It is a data privacy law similar to US CCPA.
A violation of the CTDPA constitutes an unfair trade practice under the Connecticut Unfair Trade Practices Act, which provides for penalties up to $5,000 per wilful violation.
The consumer’s consent has to be obtained to process sensitive data and the consent option must be designed as an opt-in.
Consumers must have the possibility to opt-out of the processing of their personal data for the purposes of targeted advertising, the sale of their personal data (unless an exception applies), or, “profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer.
Compare different US State Privacy Laws
Use a consent management platform like UniConsent to offer consumers full control of data collection, opt-out features, manage the preferences communication.