United States of America: Implemented Act Concerning Personal Data Privacy and Online Monitoring (SB 6)

On 1 July 2023, the Bill for "An Act concerning personal data privacy and online monitoring" is implemented. The comprehensive data protection bill will apply to persons that conduct business in Connecticut or target Connecticut residents and in the last year either (1) controlled or processed personal data of over 100'000 consumers or (2) controlled or processed personal data of over 25'000 consumers generating more than 25% gross revenue from data sales. The Bill gives consumers the right to access, correct, delete, obtain a copy of personal data, and opt-out from the personal data processing aimed at targeted advertising, personal data sales and profiling. Furthermore, the Bill obliges controllers to provide consumers with a privacy notice and requires consumer consent for the processing of "sensitive data". The Bill does not include a private right of action.