Connecticut is gearing up to be the next state with a comprehensive privacy law. On April 28, 2022, the Connecticut General Assembly passed SB 6, “An Act Concerning Personal Data Privacy and Online Monitoring,” which is currently with the governor awaiting signature. Of the state laws that have passed, SB 6 is most similar to the Colorado Privacy Act (“CPA”), Virginia Consumer Data Protection Act (“CDPA”), and Utah Consumer Privacy Act (“UCPA”). For example, under SB 6, the terms “controller,” “processor,” and “personal data” have similar definitions as under the CPA, CDPA, and UCPA.
Effective Date
If enacted, SB 6 will go into effect on July 1, 2023, with exceptions for certain provisions.
Applicability
SB 6 applies to:
-
individuals and entities doing business in Connecticut, or that produce products or services that are targeted to Connecticut residents;
AND
-
that in the preceding year, controlled or processed the personal data of at least:
-
100,000 Connecticut residents (excluding for the purpose of completing a payment transaction); or
-
25,000 Connecticut residents, if the individual or entity derived more than 25% of their annual gross revenue from selling personal data.
SB 6 does not apply to:
-
certain entities, including state and local government entities, nonprofits, higher education institutions, financial institutions subject to the Gramm-Leach-Bliley Act, or qualifying covered entities and business associates subject to the Health Insurance...
Read Full Story:
https://www.natlawreview.com/article/connecticut-general-assembly-passes-comp...