Connecticut Signs Sweeping Privacy and Data Broker Amendments Into Law
Connecticut enacted two significant pieces of privacy legislation in 2026. SB 4 makes substantial amendments to the state's existing Connecticut Data Privacy Act and establishes a new data broker registration law, while SB 5 addresses a range of AI-related topics including companion chatbots and employment uses of AI, according to Connecticut State Senator James Maroney, who sponsored both bills.
The amendments arrive as part of a broader mid-2026 wave of state action: Connecticut's, Arkansas's, and Utah's privacy law changes all took effect around July 1, 2026, according to tracking by legal researchers at Troutman Pepper Locke and MultiState.
Utah's amendments notably add a consumer right to correct inaccurate personal data, a protection the state's otherwise business-friendly privacy law previously lacked. Arkansas's law, taking effect for the first time in 2026, introduces the state's first comprehensive set of consumer privacy rights.
Connecticut's new data broker registration requirement mirrors elements of California's approach, requiring brokers with a Connecticut nexus to register annually and disclose their data practices — adding Connecticut to a growing list of states treating data brokers as a distinct regulatory category from general data controllers.
See our overview of every major 2026 state privacy law for the full state-by-state picture.