Connecticut Data Removal Guide (2026)
Connecticut's Data Privacy Act has been in effect since July 2023, giving residents deletion rights against covered controllers with a 45-day response window and universal opt-out mechanism recognition.
Research status: this is a dated state-law snapshot; verify the current official sources before relying on a right, deadline, penalty, or complaint route.
This page is educational orientation, not legal advice. Scope, exemptions, deadlines, penalties, regulator powers and broker routes can change. Verify the current statute and state regulator guidance before relying on a right or deadline.
At a glance
- Comprehensive state privacy law
- Recorded: CTDPA
- Broker response deadline
- 45 days in this research snapshot for qualifying requests; extensions and exemptions may apply
- Enforcement
- Connecticut Attorney General
Connecticut Data Privacy Act (CTDPA)
CTDPA covers qualifying controllers and grants access, deletion, correction, portability, third-party-sale-list, and opt-out rights, subject to its current scope and exceptions. Since July 1, 2026, the general threshold is 35,000 consumers excluding data processed solely for payment transactions, and the law also reaches qualifying sensitive-data processing and offers of personal data for sale; consumer-health-data controllers are covered without the general thresholds. Connecticut requires covered businesses to honor qualifying universal opt-out preference signals, such as GPC. Public Acts 26-64 and 26-100 add separate data-broker, profiling, precise-geolocation, facial-recognition, and related protections effective October 1, 2026. Enforcement is exclusively by the AG. The 60-day cure period sunset on January 1, 2025.
Read the full CTDPAexplainer →Scope, thresholds, exceptions, cure rules, and enforcement details where documented.
What rights do Connecticut residents have?
- →Right to deletion, access, correction, portability
- →Right to opt-out via GPC universal opt-out
- →AG exclusive enforcement
Where does your data leak from in Connecticut?
The FTC explains that people-search sites may combine public records, public social profiles, and information from other brokers. The examples below are a research snapshot, not an exhaustive or person-specific source map for Connecticut:
- Connecticut Judicial Branch public case search
- Hartford and Fairfield County land records
- Connecticut DMV records
Generate requests in under 60 seconds
Explore 1,034 US/global data brokers
What if a broker ignores your request?
If a qualifying request does not receive a response within the applicable window, review the current extension and exemption rules, then consider the Connecticut Attorney General complaint route. The authority's jurisdiction and available remedies vary.
File a complaint with Connecticut Attorney General ↗FAQ: Connecticut data removal
Is the CTDPA cure period still active?+
The general cure period expired on January 1, 2025. That does not create a universal investigation or penalty schedule; check the current CTDPA, regulations, and Connecticut AG process for the facts at issue.
Do I need to be a Connecticut resident to use CTDPA?+
Yes. CTDPA covers Connecticut consumers. Non-residents rely on their home state laws or on federal/broker voluntary policies.