Explore. Learn. Grow.

The Connecticut Data Privacy Act (CTDPA) governs how businesses collect, process, and sell Connecticut residents’ personal data. This guide covers applicability thresholds, sensitive data categories, consumer rights, and enforcement, including the July 2026 amendments (Public Act 25-113) and SB 4, which add profiling rights, a geolocation sale ban, and new disclosure requirements for businesses.

For companies doing business with residents of California, CCPA and CPRA compliance are required. Here’s how to protect your business.

The Alabama Personal Data Protection Act (APDPA), enacted through HB 351 in April 2026, establishes consumer rights over personal data and corresponding obligations for businesses processing data of Alabama residents. The law takes effect May 1, 2027 and includes notable distinctions around its applicability thresholds, sale definition, consent revocation, teen data protections, and cure period.

The Virginia Consumer Data Protection Act was the second US state-level privacy law passed, in effect from January 1, 2023. It establishes consumers’ rights and companies’ responsibilities, and has been influential over subsequent data privacy laws passed in other states.