Connecticut data privacy and data broker removal
Connecticut has a comprehensive privacy law and a new data-broker registry, putting it among the strongest US states for privacy protection. Here's what that gives you, and how to use it.
Your rights in Connecticut
Connecticut residents are protected by the Connecticut Data Privacy Act (CTDPA).
- Right to access and know. Request a copy of the personal information a company holds about you.
- Right to correct. Ask a company to fix inaccurate personal information.
- Right to delete. Ask a company to delete your personal information.
- Right to data portability. Get your data in a portable format you can take elsewhere.
- Right to opt out of sale. Tell a company to stop selling your personal information.
- Right to opt out of targeted advertising. Stop ads aimed at you based on your personal data.
- Right to opt out of profiling. Stop companies from building a behavioral profile of you.
- Right to appeal. Challenge a company's denial of your privacy request.
- Right to contest profiling. Added by SB 1295, effective July 1, 2026.
Does this cover the company that has my data?
Most companies that collect or sell personal data in Connecticut are covered. A company falls under the law if it does any of the following:
- Processes the personal data of 35,000 or more Connecticut consumers
- Processes sensitive data (any volume)
- Sells personal data (any volume)
How to remove yourself from data brokers in Connecticut
Connecticut gives you more tools than most states. Here's how to use them, ordered from strongest to most practical.
1. Watch for the data-broker registry
Connecticut's data-broker registry opens in January 2027, when brokers must register with the state's Department of Consumer Protection. Once live, it shows which companies collect and sell your information and gives you a starting point for opt-out requests. Connecticut's universal deletion mechanism (a single request that reaches every registered broker) is due by July 2028; until then, you contact each broker separately.
2. Enable Global Privacy Control
Global Privacy Control is a free browser setting that tells every site you visit not to sell or share your data. It takes about two minutes to turn on, then works automatically in the background. Connecticut law requires covered businesses to honor it, so it carries legal weight.
3. Submit direct opt-out requests
You can also file requests directly. Look for the "Do not sell my personal information" link in a company's website footer; most major brokers have one. You can send formal access, deletion, or correction requests through each company's privacy policy page.
Covered companies must respond within the statutory deadline. If they don't, you have grounds to file a complaint with the Connecticut attorney general.
4. Automate ongoing removal
Even after you finish every step above, brokers pull your information back in from public records, data-sharing networks, and commercial databases. Within a few months, the profiles reappear. Staying removed isn't a one-time task; it's ongoing work that's hard to keep up by hand.
Delist searches the open internet for where your information shows up, including what AI assistants say about you, then files removals on your behalf and re-runs a full scan every month so it stays down. Start with a free scan, about a minute, to see where you're exposed.
Run a free scan →Connecticut's data broker law: what it means for you
Connecticut's data-broker law was enacted as SB 4 (Public Act 26-64), "An Act Concerning Consumer Privacy and Protection," signed on May 27, 2026. It adds a registry and a deletion system on top of the state's existing privacy act. The parts that matter to you:
- Data brokers must register with the Department of Consumer Protection and pay a $2,500 annual fee, starting January 1, 2027.
- By July 2028, the state will run a universal deletion mechanism, modeled on California's, that lets you send one request to every registered broker.
- The state enforces the law and can levy civil penalties. There's no private right of action, so you can't sue a broker directly.
Other privacy protections in Connecticut
Beyond the comprehensive privacy law, Connecticut has other protections that may apply to you:
- Safe at Home. The Address Confidentiality Program, run by the Secretary of the State, shields the address of survivors of domestic violence and stalking.
- Protections for minors. Companies need opt-in consent before selling or targeting ads to consumers under 16.
- New under SB 4. Facial-recognition notice requirements, limits on surveillance pricing, and protections for direct-to-consumer genetic-testing data.
- Biometric data. Connecticut has no separate biometric-privacy law you can sue under; biometric information is treated as sensitive data under the CTDPA and enforced by the attorney general.
How to file a privacy complaint in Connecticut
File with the Connecticut attorney general's Privacy and Data Security Section: portal.ct.gov/ag/sections/privacy
State agencies enforce privacy laws in the aggregate. They investigate patterns of violations rather than resolving individual disputes. Filing still matters: it creates a record that helps trigger enforcement.
Frequently asked questions
Does Connecticut have a data privacy law?
Can I sue a company for violating my privacy in Connecticut?
How do I opt out of data brokers in Connecticut?
Does Connecticut require websites to honor Global Privacy Control?
Is there a data broker registry in Connecticut?
Sources
This page is privacy-rights information, not legal advice. Privacy law changes frequently; verify current rules with your state privacy agency or a licensed attorney before acting. Last verified July 13, 2026. We re-check state privacy laws quarterly.