Connecticut Data Privacy Act (CTDPA) Awareness Course
Connecticut made history as the first state outside California to take privacy enforcement action. The CTDPA demonstrates that comprehensive state privacy laws come with real enforcement teeth, not just theoretical penalties.
This course gives your team practical guidance on the Connecticut Data Privacy Act. We cover who the law applies to, what rights Connecticut residents have, data protection assessment requirements, and what Connecticut's active enforcement approach means for your organisation.
The CTDPA requires opt-in consent for sensitive data and mandates recognition of universal opt-out mechanisms. Connecticut has also participated in multi-state privacy investigations, showing coordination with other state attorneys general. No technical background required - just focused, practical training your team can apply immediately.
Why learn about the CTDPA?
- Understand a law with demonstrated active enforcement
- Know when opt-in consent is required for sensitive data
- Comply with mandatory universal opt-out mechanism requirements
- Conduct required data protection assessments correctly
- Prepare for potential multi-state coordinated enforcement
Course features
Connecticut-specific
Focused entirely on the CTDPA with Connecticut-specific requirements, thresholds, and enforcement context.
Practical scenarios
Real-world examples and case studies showing how the CTDPA applies in everyday business situations.
Enforcement insights
Learn from Connecticut's active enforcement approach and multi-state investigation participation.
Official sources
Built from Connecticut statutes and Attorney General guidance, with references to official documentation.
Learning with us
Course information
Learning outcomes
- Understand when and how the CTDPA applies to your organisation
- Know the rights Connecticut residents have over their personal data
- Recognise sensitive data and understand the opt-in consent requirement
- Conduct data protection assessments for high-risk processing
- Understand Connecticut's active enforcement approach
Training recommendations
- All employees who handle customer data should complete this training.
- Annual refresher training is recommended to stay current with enforcement trends.
- Teams handling consumer requests may benefit from additional role-specific training.
This course is recommended for
Employees who handle customer data at organisations that conduct business in Connecticut or target Connecticut residents. This includes marketing, sales, customer service, HR, IT, and compliance teams.
Prerequisites
There are no prerequisites for this course. No legal or technical background is required.
What do I need for this course?
This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).
Course content
In this section we introduce the Connecticut Data Privacy Act and explain why it matters. Connecticut was the first state outside California to take enforcement action, demonstrating an active approach to privacy compliance.
Lessons
- Introduction to the CTDPA
- Who the law applies to
- Key definitions explained
- Connecticut residents and their rights
Connecticut residents have comprehensive rights over their personal data. This section covers what those rights are, including opt-out rights for profiling and targeted advertising, and your obligations when handling requests.
Lessons
- The right to know and access
- The right to correct and delete
- The right to data portability
- The right to opt out of sales
- Opt-out of targeted advertising and profiling
- Handling consumer requests
The CTDPA requires opt-in consent before processing sensitive data. We explain what counts as sensitive data under Connecticut law and how to obtain and document consent correctly.
Lessons
- What is sensitive data under CTDPA?
- The opt-in consent requirement
- Children's data protections
- Precise geolocation data
- Practical consent workflows
Connecticut requires data protection assessments for certain processing activities. This section covers when assessments are required and how to conduct them properly.
Lessons
- When assessments are required
- Assessment components and process
- Targeted advertising assessments
- Sale of personal data assessments
- Profiling assessments
This section covers the day-to-day operational requirements including data minimisation, purpose limitation, security obligations, and processor contracts.
Lessons
- Data minimisation principles
- Purpose limitation
- Security requirements
- Processor contracts and obligations
- Privacy notice requirements
Connecticut has demonstrated active enforcement, being the first state outside California to take action. Understand the enforcement landscape, the cure period, and potential penalties.
Lessons
- Attorney General enforcement
- Connecticut's active enforcement approach
- The 60-day cure period
- Penalties and remedies
- Multi-state investigations
- Responding to investigations
Test your knowledge with scenario-based questions covering all the key CTDPA concepts from the course.
Lessons
- Knowledge check (10 questions)
How it works
Get notified
Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.
Start learning
Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.
Stay compliant
As the CTDPA evolves and enforcement trends develop, we'll update the course. Trainees can review updated materials to stay current.
What's included
Training
- Distraction-free online learning platform
- Scenario-based end of course assessment
Updates
- Access to all course material updates and enhancements for the length of your access period
Certification
- Certificate on completion
Course FAQs
Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.
This course is designed for employees who handle customer data at organisations that may be subject to Connecticut's privacy law. This includes marketing, sales, customer service, HR, and IT teams.
Connecticut was the first state outside California to take privacy enforcement action, demonstrating a particularly active approach. The CTDPA closely follows the Virginia model but with some enhancements, including mandatory recognition of universal opt-out mechanisms and required data protection assessments.
The CTDPA applies to organisations that conduct business in Connecticut or target Connecticut residents, AND either: (a) control or process personal data of 100,000+ Connecticut consumers (excluding payment transactions), or (b) control or process data of 25,000+ Connecticut consumers and derive more than 25% of gross revenue from selling personal data.
The Connecticut Attorney General can impose civil penalties of up to $5,000 per violation under the Connecticut Unfair Trade Practices Act. Connecticut has shown willingness to pursue enforcement, including participation in multi-state investigations.
Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.
The course typically takes 35-40 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.
Get notified when this course launches
Sign up to our newsletter to be the first to know when this course is available.
This course will be included in Measured Collective Plus
Get access to all our courses with one subscription from £236/year.
Learn About MC PlusAvailable courses
PECR & ePrivacy for Marketers
Included in PLUS
Learn PECR rules for direct marketing, cookies, and tracking technologies. Built for marketing and sales teams. Certificate on completion.
View Course
GDPR Refresher Training Course
Included in PLUS
A 25-minute refresher covering recent enforcement cases, the Data Use and Access Act 2025, and current GDPR best practices. Certificate…
View Course
GDPR Essentials Course
Included in PLUS
Master UK GDPR fundamentals: data protection principles, lawful bases, data subject rights, and compliance essentials. Certificate on completion.
View Course