Connecticut Data Privacy Act (CTDPA)

The Connecticut Data Privacy Act (CTDPA) is a comprehensive data privacy law that provides Connecticut residents with enhanced rights over their personal data. Effective from July 1, 2023, the CTDPA aims to regulate how businesses collect, use, and handle personal data.

The CTDPA applies to:

• Entities that conduct business in Connecticut or target goods or services to Connecticut residents.
• Businesses that control or process the personal data of at least 100,000 Connecticut residents annually or
• Entities that derive significant revenue from the sale of personal data and process data of at least 25,000 Connecticut residents.

CTDPA Guidelines

Connecticut residents have the following rights under the CTDPA:

• Access: The right to access their personal data held by businesses.
• Correction: The right to request corrections to inaccuracies in their personal data.
• Deletion: The right to request the deletion of their personal data.
• Data Portability: The right to obtain a copy of their personal data in a format that can be easily transferred to another entity.
• Opt-Out: The right to opt out of the sale of their personal data, targeted advertising, and profiling.

Businesses that meet CTDPA eligibility requirements must:

• provide a clear and comprehensive privacy notice that outlines their data collection, processing, and sharing practices.
• conduct assessments to evaluate and mitigate risks associated with data processing.
• implement reasonable security measures to protect personal data from unauthorized access, use, or disclosure.
• establish contracts with data processors to ensure they comply with CTDPA requirements.
• seek explicit consent to process sensitive categories of data, such as health information, racial or ethnic origin, and biometric data.
• notify affected individuals of data breaches within 60 days of discovering the breach. The notification should include details about the breach, the data involved, and actions taken to address the breach.

How Finite State Helps You Comply with CTDPA

Finite State can complement your data protection efforts by strengthening your data security capabilities, particularly by: 

• Enforcing Secure Coding Practices: Seamless integrations into existing CI/CD pipelines automatically analyze source code and compiled binaries for common security vulnerabilities and coding errors. This allows engineers to identify vulnerabilities hidden deep within legacy code and third-party libraries and detect and address issues early in the development process.
• Real-Time Threat Detection: Integrations with vulnerability databases provide up-to-date information on the latest threats and exploits, allowing for the proactive identification of potential risks before they can be exploited.
• Automate Vulnerability Identification: Using our advanced binary and source code SCA, vulnerabilities can be identified as they’re introduced across the SDLC to help teams keep applications secure.
• Comprehensive SBOM Solutions: Automatically generate Software Bill of Materials throughout the SDLC and easily compile detailed information on all components in your products, including open-source libraries, third-party dependencies, and custom code to improve transparency and identify potential security risks in your software supply chain.

Strong cybersecurity requires a collective effort. Talk to the team today to discover how Finite State can help you comply with CTDPA.