Connecticut Governor Signs Bill to Expand CT Data Privacy Act

Source Domain: natlawreview.com

On May 27, 2026, Connecticut Governor Ned Lamont signed Senate Bill 4, now Public Act No. 26-64 (the “Act”),[1] significantly expanding the Connecticut Data Privacy Act (CTDPA).

The Act creates a California Delete Act-style, but Connecticut-specific, data broker registration and deletion-mechanism regime. It also restricts the sale, sharing, transfer, and provision of access to precise geolocation data;[2] imposes facial recognition transparency requirements; adds surveillance-pricing prohibitions and disclosure obligations; narrows the CTDPA’s “publicly available information” exclusion; adds rules for certain employment-related processing and profiling decisions; expands consumer deletion rights; and regulates direct-to-consumer (DTC) genetic testing companies.

At a high level, the Act adds compliance obligations for data brokers, CTDPA controllers and processors, retailers, third-party delivery services, and DTC genetic testing companies.[3]

These amendments follow shortly after the July 1, 2026 effective date for separate CTDPA amendments enacted in 2025 through SB 1295, which expanded coverage thresholds, added profiling impact assessment obligations, and imposed minors-related requirements. Companies should thus treat SB 4 as part of a broader 2026 Connecticut compliance cycle, rather than a standalone update.

I. SB 4: Key Takeaways

Key provisions[4] include:

A California Delete Act-style data broker registry and centralized consumer deletion mechanism;
Restrictions on the sale and transfer of precise geolocation data;
New surveillance pricing obligations, meaning pricing programs historically treated as marketing or revenue optimization tools may require legal review;
Expanded regulation of facial recognition technologies;
New rules for profiling used to make legal or similarly significant decisions, including employment-related profiling, and related consumer rights;
New consumer rights over genetic data held by direct-to-consumer genetic testing…

Source