20% off all courses - Use code NEWYEAR20 at checkout.

Connecticut Data Privacy Act (CTDPA) Awareness Course

Coming Soon: March 2026 Delivery: 100% online Duration: 35-40 minutes Certificate on Completion
0:00
15,000+ learners across our course collection. Immediate access on launch. 14 day 100% money-back guarantee.

Connecticut made history as the first state outside California to take privacy enforcement action. The CTDPA demonstrates that comprehensive state privacy laws come with real enforcement teeth, not just theoretical penalties.

This course gives your team practical guidance on the Connecticut Data Privacy Act. We cover who the law applies to, what rights Connecticut residents have, data protection assessment requirements, and what Connecticut's active enforcement approach means for your organisation.

The CTDPA requires opt-in consent for sensitive data and mandates recognition of universal opt-out mechanisms. Connecticut has also participated in multi-state privacy investigations, showing coordination with other state attorneys general. No technical background required - just focused, practical training your team can apply immediately.

Why learn about the CTDPA?

  • Understand a law with demonstrated active enforcement
  • Know when opt-in consent is required for sensitive data
  • Comply with mandatory universal opt-out mechanism requirements
  • Conduct required data protection assessments correctly
  • Prepare for potential multi-state coordinated enforcement

Course features

Connecticut-specific

Focused entirely on the CTDPA with Connecticut-specific requirements, thresholds, and enforcement context.

Practical scenarios

Real-world examples and case studies showing how the CTDPA applies in everyday business situations.

Enforcement insights

Learn from Connecticut's active enforcement approach and multi-state investigation participation.

Official sources

Built from Connecticut statutes and Attorney General guidance, with references to official documentation.

Learning with us

Course information

Learning outcomes

  • Understand when and how the CTDPA applies to your organisation
  • Know the rights Connecticut residents have over their personal data
  • Recognise sensitive data and understand the opt-in consent requirement
  • Conduct data protection assessments for high-risk processing
  • Understand Connecticut's active enforcement approach

Training recommendations

  • All employees who handle customer data should complete this training.
  • Annual refresher training is recommended to stay current with enforcement trends.
  • Teams handling consumer requests may benefit from additional role-specific training.

This course is recommended for

Employees who handle customer data at organisations that conduct business in Connecticut or target Connecticut residents. This includes marketing, sales, customer service, HR, IT, and compliance teams.

Prerequisites

There are no prerequisites for this course. No legal or technical background is required.

What do I need for this course?

This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).

Course content

In this section we introduce the Connecticut Data Privacy Act and explain why it matters. Connecticut was the first state outside California to take enforcement action, demonstrating an active approach to privacy compliance.

Lessons

  • Introduction to the CTDPA
  • Who the law applies to
  • Key definitions explained
  • Connecticut residents and their rights

Connecticut residents have comprehensive rights over their personal data. This section covers what those rights are, including opt-out rights for profiling and targeted advertising, and your obligations when handling requests.

Lessons

  • The right to know and access
  • The right to correct and delete
  • The right to data portability
  • The right to opt out of sales
  • Opt-out of targeted advertising and profiling
  • Handling consumer requests

The CTDPA requires opt-in consent before processing sensitive data. We explain what counts as sensitive data under Connecticut law and how to obtain and document consent correctly.

Lessons

  • What is sensitive data under CTDPA?
  • The opt-in consent requirement
  • Children's data protections
  • Precise geolocation data
  • Practical consent workflows

Connecticut requires data protection assessments for certain processing activities. This section covers when assessments are required and how to conduct them properly.

Lessons

  • When assessments are required
  • Assessment components and process
  • Targeted advertising assessments
  • Sale of personal data assessments
  • Profiling assessments

This section covers the day-to-day operational requirements including data minimisation, purpose limitation, security obligations, and processor contracts.

Lessons

  • Data minimisation principles
  • Purpose limitation
  • Security requirements
  • Processor contracts and obligations
  • Privacy notice requirements

Connecticut has demonstrated active enforcement, being the first state outside California to take action. Understand the enforcement landscape, the cure period, and potential penalties.

Lessons

  • Attorney General enforcement
  • Connecticut's active enforcement approach
  • The 60-day cure period
  • Penalties and remedies
  • Multi-state investigations
  • Responding to investigations

Test your knowledge with scenario-based questions covering all the key CTDPA concepts from the course.

Lessons

  • Knowledge check (10 questions)

How it works

Step 1

Get notified

Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.

Step 2

Start learning

Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.

Step 3

Stay compliant

As the CTDPA evolves and enforcement trends develop, we'll update the course. Trainees can review updated materials to stay current.

What's included

Training

  • Distraction-free online learning platform
  • Scenario-based end of course assessment

Updates

  • Access to all course material updates and enhancements for the length of your access period

Certification

  • Certificate on completion

Course FAQs

Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.

This course is designed for employees who handle customer data at organisations that may be subject to Connecticut's privacy law. This includes marketing, sales, customer service, HR, and IT teams.

Connecticut was the first state outside California to take privacy enforcement action, demonstrating a particularly active approach. The CTDPA closely follows the Virginia model but with some enhancements, including mandatory recognition of universal opt-out mechanisms and required data protection assessments.

The CTDPA applies to organisations that conduct business in Connecticut or target Connecticut residents, AND either: (a) control or process personal data of 100,000+ Connecticut consumers (excluding payment transactions), or (b) control or process data of 25,000+ Connecticut consumers and derive more than 25% of gross revenue from selling personal data.

The Connecticut Attorney General can impose civil penalties of up to $5,000 per violation under the Connecticut Unfair Trade Practices Act. Connecticut has shown willingness to pursue enforcement, including participation in multi-state investigations.

Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.

The course typically takes 35-40 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.

Get notified when this course launches

Sign up to our newsletter to be the first to know when this course is available.

This course will be included in Measured Collective Plus

Get access to all our courses with one subscription from £236/year.

Learn About MC Plus

Available courses

PECR & ePrivacy for Marketers

PECR & ePrivacy for Marketers

UK PECR / ePrivacy

Included in PLUS

Learn PECR rules for direct marketing, cookies, and tracking technologies. Built for marketing and sales teams. Certificate on completion.

View Course
Abstract blue cityscape with tall buildings

GDPR Refresher Training Course

UK UK GDPR

Included in PLUS

A 25-minute refresher covering recent enforcement cases, the Data Use and Access Act 2025, and current GDPR best practices. Certificate…

View Course
woman reading book in training room with team members

GDPR Essentials Course

UK UK GDPR

Included in PLUS

Master UK GDPR fundamentals: data protection principles, lawful bases, data subject rights, and compliance essentials. Certificate on completion.

View Course