Digital Policy Alert logo

United States of America: Adopted Act Concerning Personal Data Privacy and Online Monitoring (SB 6)

Policy overview

Description

Adopted Act Concerning Personal Data Privacy and Online Monitoring (SB 6)

On 28 April 2022, the Bill for "An Act concerning personal data privacy and online monitoring" was adopted by the Connecticut General Assembly and passed to the Governor for signing. The comprehensive data protection Bill would apply to persons that…

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2022-02-09
under deliberation

On 9 February 2022, the Privacy Bill was introduced to the Connecticut State Assembly, aiming to "i…

2022-02-23
under deliberation

On 23 February 2022, the Bill for "An Act concerning personal data privacy and online monitoring" w…

2022-04-20
under deliberation

On 20 April 2022, the Bill for "An Act concerning personal data privacy and online monitoring" was …

2022-04-28
adopted

On 28 April 2022, the Bill for "An Act concerning personal data privacy and online monitoring" was …

2022-05-10
adopted

On 10 May 2022, the Bill for "An Act concerning personal data privacy and online monitoring" was si…

2023-07-01
in force

On 1 July 2023, the Bill for "An Act concerning personal data privacy and online monitoring" is imp…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All
2
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): storage (any form)
Regulatory tool
User right to access personal data
User right to rectification of personal data
User right to deletion of personal data
Portability or interoperability requirement
User or public reporting requirement
Sanctions
Regulated subjects
1 2
personal data (all forms): data processing
Regulatory tool
User right to access personal data
User right to rectification of personal data
User right to deletion of personal data
Portability or interoperability requirement
User or public reporting requirement
Duty of care requirement
Sanctions
Regulated subjects
1 2
advertisement (any targeting): data processing
Regulatory tool
User consent: Permit user opt-out
User or public reporting requirement
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
personal data (all forms): sale
Regulatory tool
User consent: Permit user opt-out
User or public reporting requirement
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
algorithm: automated decision system: data processing
Regulatory tool
User consent: Permit user opt-out
User or public reporting requirement
Sanctions
Regulated subjects
1 2
personal data (all forms): data collection
Regulatory tool
User or public reporting requirement
Sanctions
Regulated subjects
1 2
personal data: ethnicity: data processing
Regulatory tool
User consent: Opt-in requirement
User or public reporting requirement
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
personal data: religious beliefs: data processing
Regulatory tool
User consent: Opt-in requirement
User or public reporting requirement
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
personal data: health: data processing
Regulatory tool
User consent: Opt-in requirement
User or public reporting requirement
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
personal data: sexual orientation: data processing
Regulatory tool
User consent: Opt-in requirement
User or public reporting requirement
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
personal data: biometric: data processing
Regulatory tool
User consent: Opt-in requirement
User or public reporting requirement
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
personal data: information pertaining to minors: data processing
Regulatory tool
User consent: Opt-in requirement
User or public reporting requirement
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
consumer data: location: data processing
Regulatory tool
User consent: Opt-in requirement
User or public reporting requirement
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
personal data: information pertaining to minors: sale
Regulatory tool
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2
personal data (all forms): transfer (any destination)
Regulatory tool
User right to information about third-parties, with which data has been shared
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1 2

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): storage (any form)

personal data (all forms): data processing

advertisement (any targeting): data processing

personal data (all forms): sale

algorithm: automated decision system: data processing

personal data (all forms): data collection

personal data: ethnicity: data processing

personal data: religious beliefs: data processing

personal data: health: data processing

personal data: sexual orientation: data processing

personal data: biometric: data processing

personal data: information pertaining to minors: data processing

consumer data: location: data processing

personal data: information pertaining to minors: sale

personal data (all forms): transfer (any destination)