New CT Law Protects Consumer Data Privacy: What To Know

CONNECTICUT — The state's attorney general is urging residents to get a firm grip upon their online data.

Attorney General William Tong issued a statement Monday reminding businesses and consumers of their rights under the Connecticut Data Privacy Act, which went into effect Jan. 1.

The new law requires businesses to honor opt-out preferences of sales or targeted advertising set by consumers submitted through browser signals. The scope of the new law is among the most extensive in the nation.

"We’re all familiar now with the ‘ask site not to track’ pop-ups. Starting January 1, you can install a simple browser extension to answer that question once and for all—and sites you visit will be responsible for knowing and following your preference. This is a key step forward for consumer privacy rights, and I urge consumers on January 1 to take advantage of this right to control their data," Tong said.

The Global Privacy Control, once installed, allows consumers the ability to opt out of targeted advertising and the sale of their personal data across all activities online in one place.

If a consumer browser's "opt-out preference signal" conflicts with that their previously given privacy choice or their voluntary participation in that business’s loyalty rewards or discount program, the business must still comply with the OOPS. Note that the business may notify the consumer of the conflicting signals and ask the consumer to confirm their choice with the understanding that it would affect their previously given privacy choice or participation in their loyalty rewards or discount program.

Not all businesses are subject to the CTDPA. The law includes specific revenue thresholds and exempts certain industries regulated by other privacy frameworks—such as health care companies subject to the Health Insurance Portability and Accountability Act of 1966.

More info is available on the state attorney general's website here.