
Connecticut's CTDPA Now Covers Small Businesses: Neural Data, LLM Training Disclosures, and the July 2026 Rules
Connecticut's amended CTDPA took effect July 1, 2026, lowering the coverage threshold to 35,000 consumers, classifying neural data as sensitive, and requiring conspicuous disclosure of AI and LLM training on personal data. Processing any sensitive data — even one record — now triggers coverage, the 60-day cure period is gone, and penalties reach $5,000 per willful violation.










