Don’t do SECURITY. Do business SECURELY.

Connecticut privacy law amendments take effect

Amendments to the Connecticut Data Privacy Act, including a ban on selling precise geolocation data, take effect on 1 October 2026.

Amendments to the Connecticut Data Privacy Act made by Senate Bill 4, signed in May 2026, take effect today.

Key changes

  • A ban on the sale of precise geolocation data.
  • Extended deletion rights, including for some publicly available information and inferences drawn from it.
  • New provisions on facial recognition.
  • A new data broker registration requirement, applying from 1 January 2027.

UK organisations that offer goods or services to consumers in Connecticut should check whether they fall within scope and review their data inventories, consumer rights procedures, and any sale or sharing of location data.

Source: WilmerHale summary

This update is general information, not legal advice. If you would like help assessing the impact on your information security or privacy programme, contact us.

Get our weekly insights by emailA free weekly threat and vulnerability round-up with our threat log spreadsheet, plus legal, regulatory, standards, and AI updates.
Subscribe free

More insights