Privacy and Cybersecurity Committee

Connecticut’s Data Privacy Act (CDPA) has expanded significantly in recent years, evolving into a comprehensive consumer data privacy law with broad reach and minimal exceptions. Notably, certain categories of data defined as “sensitive” trigger obligations without any applicability threshold. Many Connecticut businesses, including law practices, routinely collect or process data covered by the CDPA, but few are aware of the law’s scope and the compliance requirements it imposes. This program will attempt to demystify the expanded CT Data Privacy Act, explain which data types and business activities are covered, and outline the practical steps organizations must take to comply. Attendees will gain a clear understanding of their obligations, common pitfalls, and how to reduce regulatory and enforcement risk in a rapidly changing privacy landscape.