AI & Privacy/Connecticut
Connecticut — AI & privacy rules.
State-specific records for Connecticut, plus separately labeled federal rules that may apply to covered organizations nationwide.
Selected state rules and applicable federal records from T1. This is not an exhaustive state-law inventory. Federal records do not establish the contents of state law. The absence of a state-specific record is not a finding that no state law applies.
Connecticut state rules
Source-linked| Ref | Rule | Status | Operative / deadline |
|---|---|---|---|
| CT PA 22-15 | Connecticut Data Privacy Act, base lawConnecticut · Unverified — Persons conducting business in Connecticut or targeting residents meeting the statutory consumer-processing or…Some details remain Unverified; see the field qualifications. | Enacted | Unverified — 2023-07-01 (The historical operative date is reported, but its exact primary commencement clause was not independently confirmed in this review.)in force |
| PublicAct23-56 §2 | Consumer health data consent, confidentiality and geofencingConnecticut · Persons doing business in Connecticut or targeting products/services to residents when processing covered consumer health… | Enacted | 2023-07-01in force |
| CT PA 25-113 | Connecticut PA 25-113 privacy amendments — verification holdConnecticut · Unverified — Current CT AG guidance identifies expanded coverage: 35,000+ consumers excluding payment-only processing, or…Some details remain Unverified; see the field qualifications. | Enacted | Unverifiedmonitor |
| CT PA 26-64 | Connecticut PA 26-64 privacy amendments — verification holdConnecticut · Unverified — CT AG guidance includes precise-geolocation sales restrictions and facial-recognition conditions. Official…Some details remain Unverified; see the field qualifications. | Enacted | Unverifiedmonitor |
4 sourced state-specific recordsVerification method →
Federal baseline — nationwide scope
Source-linked| Ref | Rule | Status | Operative / deadline |
|---|---|---|---|
| 28 CFR 202; 90 FR 1636 | DOJ Data Security Program — countries-of-concern data transactionsFederal · nationwide scope · U.S. persons engaging in defined covered data transactions involving bulk U.S. sensitive personal data or U.S.… | Enacted | 2025-04-08in force |
| HHS 42 CFR PART 2 | Federal 42 CFR Part 2 confidentiality amendmentsFederal · nationwide scope · Federally assisted substance-use-disorder programs and recipients subject to Part 2. Consent/redisclosure, notices, breach… | Enacted | 2026-02-16in force |
| FTC COPPA | Federal COPPA rule amendmentsFederal · nationwide scope · Operators of child-directed online services, or operators with actual knowledge of collecting personal information from… | Enacted | 2026-04-22in force |
| 16 CFR 682; 69 FR 68690 | FTC Disposal Rule — consumer-report information and recordsFederal · nationwide scope · Persons within FTC jurisdiction that maintain or otherwise possess consumer information derived from consumer reports for a… | Enacted | 2005-06-01in force |
| 16 CFR 313; 65 FR 33646 | FTC GLBA Privacy Rule — original final ruleFederal · nationwide scope · Unverified — Historical original rule for financial institutions under FTC privacy-rule jurisdiction. Present jurisdiction…Some details remain Unverified; see the field qualifications. | Enacted | 2001-07-01in force |
| 16 CFR 318; 89 FR 47028 | FTC Health Breach Notification Rule — 2024 amendmentsFederal · nationwide scope · Foreign and domestic vendors of personal health records, PHR-related entities and third-party service providers maintaining… | Enacted | 2024-07-29in force |
| 16 CFR 314; 86 FR 70272 | FTC Safeguards Rule — 2021 security-program amendmentsFederal · nationwide scope · Financial institutions within FTC Safeguards Rule jurisdiction that handle covered customer information, including… | Enacted | 2023-06-09in force |
| 45 CFR 164 subpart C; 68 FR 8334 | HIPAA Security Rule — original final security standardsFederal · nationwide scope · For this original-rule record: HIPAA-covered health plans, health care clearinghouses and health care providers that conduct… | Enacted | 2005-04-21in force |
| 17 CFR 248.30; 89 FR 47688 | SEC Regulation S-P — incident response and customer-notification amendmentsFederal · nationwide scope · Covered brokers and dealers, investment companies, SEC-registered investment advisers and transfer agents registered with… | Enacted | 2025-12-03in force |
Coverage depends on each rule's applicability test.Scope and limits →
Based on 13 tracked records, verified Nov 13, 2026.
For multi-state teamsCompare the tracked obligations in a file you can keep.
View the matrix