Law note · Connecticut
Connecticut Data Privacy Act, Attorney General enforcement
The Connecticut Attorney General has exclusive authority to enforce CTDPA as an unfair trade practice under section 42-110b. A cure period was mandatory (60 days) from July 1, 2023 through December 31, 2024; from January 1, 2025 it became discretionary, weighed against factors including violation count, controller size, likelihood of public injury, and data sensitivity. The chapter creates no private right of action.
What it asks of an app
- Expect CTDPA violations to be enforced exclusively by the Connecticut Attorney General as an unfair trade practice, never by a private plaintiff.
- Do not assume a cure opportunity as of right. The mandatory 60-day cure period ended December 31, 2024; since January 1, 2025 the Attorney General decides whether to offer a cure at all.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach
Primary source: official Connecticut statute text, Chapter 743jj, Connecticut General Statutes