Connecticut's expanded privacy law takes effect today

Connecticut's Public Act 26-64 took effect October 1, 2026, banning the sale of precise geolocation data and adding rules for surveillance pricing, facial recognition and direct-to-consumer genetic testing. Data brokers must register with the state by January 1, 2027, with a centralized deletion mechanism due by July 1, 2028.

• Sale of precise geolocation data is now prohibited in Connecticut
• Businesses using facial recognition must post signage and a policy QR code
• Data brokers must register with the state by January 1, 2027
• A centralized deletion mechanism is due by July 1, 2028