Connecticut Governor Ned Lamont signed the Personal Data Privacy and Online Monitoring Act (CPDPA) into law on May 10, 2022, making Connecticut the most recent state to pass its own privacy law in the absence of comprehensive federal privacy legislation. Connecticut follows in the steps of Nevada, California, Virginia, Colorado and Utah in enacting its own comprehensive privacy legislation, with more pending in various state legislatures.
The Connecticut law goes into effect on July 1, 2023, giving companies just over a year to determine whether it applies, and if so to take steps to comply. Luckily, many organizations have already put compliance programs in place for the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), so adding some nuances from other state laws, including Connecticut, will not be as daunting as the first go-round with California’s law.
The CPDPA is designed to establish a framework for controlling and processing personal data. It:
sets responsibilities and privacy protection standards for data controllers;
gives consumers the right to access, correct, delete, and obtain a copy of personal data and to opt out of the processing or personal data for certain purposes (e.g., targeted advertising);
requires controllers to conduct data protection assessments;
authorizes the state attorney general to bring an action to enforce the bill’s requirements; and
deems violations to be Connecticut Unfair Trade Practices Act...
A former security officer at Reno’s Peppermill Casino claims its facial recognition technology routinely misidentified customers, sometimes producing as many as 12 false matches with 100% confidenc...