On 9 November 2023, the Connecticut Office of the Attorney General issued a notice TicketNetwork under the Connecticut Data Privacy Act (CTDPA), highlighting deficiencies in the company’s privacy notice. The CTDPA applies to businesses that control or process personal data of Connecticut residents, particularly those exceeding USD 25 million in annual revenue or handling data of over 100,000 consumers. The notice pointed out that TicketNetwork’s privacy policy was largely unreadable, lacked essential information about consumer data rights, and included rights mechanisms that were either misconfigured or not functioning. The notice provided the company with a 60-day cure period, until 8 January 2024, to address these issues without facing penalties.
Original source