Fast.  Secure.  Free.  Forever.
Connecticut State Privacy Law
Effective July 1, 2023

Connecticut Data Privacy Act
(CTDPA)

The Connecticut Data Privacy Act (CTDPA) gives Connecticut residents the right to access, delete, and opt out of the sale of their personal data.

CTDPA
Law Abbreviation
$5,000
Max Fine Per Violation
45
Days to Respond
100,000
Coverage Threshold
Your Rights Under CTDPA

What the law gives you

The Connecticut Data Privacy Act (CTDPA) grants residents the following legally enforceable rights over their personal data:

Access
Confirm whether a company is processing your personal data and obtain a copy.
Delete
Delete personal data you provided or that was collected about you.
Correct
Correct inaccurate personal data held by a company.
Portability
Receive your data in a portable format to transfer to another controller.
Opt Out
Opt out of targeted advertising, sale of personal data, or consequential profiling.
Universal Opt-Out
Use GPC or other universal opt-out signals — required by July 1, 2025.
How to Exercise Your Rights

Step by step

01
Submit a rights request to the company’s designated privacy contact.
02
The company must respond within 45 days (extendable to 90 days with notice).
03
Appeal a denial through the company’s appeal process within a reasonable time.
04
If your appeal is denied, file a complaint with the Connecticut AG.
ClickOff makes this automatic. Rather than submitting individual requests to hundreds of data brokers, ClickOff acts as your authorized agent under the CTDPA and all applicable state laws — submitting deletion requests to 200+ brokers simultaneously. Free forever.
Delete your data under CTDPA.
Free forever. Legal receipt generated instantly. 45-day compliance clock starts now.
Related Laws

Other privacy laws that protect you

CTDPA questions
Connecticut privacy law,
explained.
Is the CTDPA similar to Virginia’s law?
Yes. Connecticut’s law closely mirrors Virginia’s VCDPA but adds universal opt-out requirements and has slightly different thresholds for what businesses are covered.
Does the CTDPA cover nonprofits?
Some exemptions apply to nonprofits. For-profit businesses processing data from 100,000+ Connecticut residents annually or 25,000+ residents while deriving 25%+ revenue from data sales are covered.
Can I sue companies under the CTDPA?
No. There is no private right of action. Only the Connecticut AG can bring enforcement actions.
How does ClickOff help me use my CTDPA rights?
ClickOff acts as your authorized agent under the CTDPA and all applicable state laws. Instead of sending individual deletion requests to hundreds of data brokers one by one, ClickOff submits on your behalf to 200+ brokers simultaneously — with a legal receipt generated instantly. Free forever.