Skip to the main content.
New! Continuous MVR monitoring
Driving record monitoring

Ongoing monitoring of driving records can help employers avoid risk and improve driver safety. Learn about the benefits of adding Verified Credentials' newest solution to your screening strategy.

Read the blog ›

Featured resource

Industry-Trends-Report-01

Learn the latest trends in employment background checks. This report uses real-life usage data to uncover how employers are screening across industries.

Download the full report ›

Verified Credentials is a leading background screening company. Since 1984, we’ve helped validate and secure relationships through the use of our comprehensive screening solutions. We offer a wide variety of background checks, verifications, and innovative screening tools.

Get to know us ›

Accredited background screening solutions

Logo-PBSA-Accreditation-120x98

Our accreditation confirms that our policies, processes, and employee training meet rigorous industry compliance standards.

Learn about our solutions ›

2 min read

2024 Report on the Connecticut Data Privacy Act

The Connecticut Data Privacy Act (CTDPA), which took effect in July 2023, is one of the nation’s pioneering consumer privacy laws. The CTDPA establishes responsibilities and privacy protection standards for organizations collecting and processing consumer data.

 

In compliance with the CTDPA, Connecticut Attorney General Tong released the first annual report on February 1, 2024.

 

The History of the Connecticut Data Privacy Act

The CTDPA requires certain businesses to limit the collection of personal data, practice transparency in how the data is used and secured and obtain consumer consent before collecting sensitive information. A few examples of sensitive data outlined are biometric data, location, and certain health information. In general, the law applies to people or businesses in Connecticut that control or process the personal data of:

  • 100,000 or more consumers; or
  • At least 25,000 consumers, from which they derive more than 25% of their gross revenue from selling personal data.

Some businesses, such as state agencies, nonprofit organizations, higher education institutes, businesses subject to HIPPA, specific national security associations, and financial institutions, may be exempt from CTDPA in certain circumstances. The full text of the law can be found here.

 

Attorney General Tong’s Report on the CTDPA

In addition to establishing responsibilities for organizations and employers, the CTDPA requires annual reports of violations from the Office of the Attorney General by February 1st of each year. The annual report must include:

  • The number of notices of violation issued by the Attorney General
  • The nature of each violation identified
  • The number of violations that have been cured
  • Any other matters deemed relevant by the Attorney General

Since the CTDPA took effect, the Office of the Attorney General has issued over a dozen notices of violations. These notices highlighted deficiencies in compliance, including:

  • Lacking Disclosures: Some companies failed to provide consumer rights notices under the CTDPA.
  • Inadequate Disclosures: Some companies provided disclosures with insufficient information about Connecticut residents’ rights under the law or provided inadequate information about Connecticut residents’ appeal rights related to their data rights.
  • Confusing Disclosures: Some privacy policies created an impression that consumers may be charged for all appeal requests, rather than only for manifestly unfounded, excessive, or repetitive requests.
  • Lacking Rights Mechanisms: Some companies failed to include a clear and conspicuous link to a webpage where consumers can opt out of targeted advertising or data sales.
  • Burdensome Rights Mechanisms: Some privacy rights mechanisms failed to consider how consumers typically interact with the company.
  • Broken/Inactive Rights Mechanisms: Non-working links or dead-end mechanisms preventing consumers from exercising their rights effectively.

Attorney General Tong’s report can be found here for more details.

 

Implications for Employers

The Connecticut Data Privacy Act is a small piece of a much bigger conversation that has swept the nation revolving around regulating bulk personal data. There is growing awareness of the importance of guarding and setting guidelines for personal data at both a state and federal level. For instance, a recent executive order to protect sensitive bulk data, Executive Order 14117, was released on February 28, 2024.

 

Employers hiring in Connecticut and handling consumer data of Connecticut residents may want to consult legal counsel to ensure that all guidelines under the CTDPA are being met. Verified Credentials will continue to monitor and report on the evolving conversation around data privacy laws.

Employment Fairness Act for Returning Citizens in Prince George’s County, MD

The Prince George's Employment Fairness Act for Returning Citizens is a new law in Prince George's County, Maryland, designed to provide fair...

Read More

Colorado’s Clean Slate Act Goes into Effect

As of July 1, 2024, Colorado’s Clean Slate Act, or Senate Bill 22-099, is officially in effect.This comes in the wake of several other states that...

Read More

Texas Attorney General Forms Privacy Task Force

The Texas Attorney General’s office has recently announcedthe formation of a dedicated task force within its Consumer Protection Division. This task...

Read More

Two More States Enact Data Privacy Laws: What Employers Need to Know

Consumer and data privacy laws have been popping up everywhere lately. Soon, nearly half the nation will have active consumer privacy data laws. It...

Read More

Additional States Enact Data Privacy Protections

More states are continuing to enact individual data privacy protections. Some of the recent protections signed into law are scheduled to go into...

Read More

U.S. House of Representatives Passes FCRA-Amending Bill: The Comprehensive CREDIT Act of 2020

On January 29, 2020, the United States House of Representatives passed the “Comprehensive Credit Reporting Enhancement, Disclosure, Innovation, and...

Read More