Consumer health data consent, confidentiality and geofencing
Enacted in force
Fields requiring verification
- enforcement date: Unverified — No distinct enforcement-start date was established. Primary source
In plain English
- Persons doing business in Connecticut or targeting products/services to residents when processing covered consumer health data, without the general CTDPA volume thresholds; §2 entity and data exemptions apply. Primary source
- Permit employee or contractor access to consumer health data only under a contractual or statutory confidentiality duty and use compliant processor arrangements. Primary source
- Do not sell or offer to sell consumer health data without first obtaining consumer consent. Primary source
- Do not use a geofence within1,750feet of a mental-health or reproductive/sexual-health facility for the prohibited health-data identification, tracking, collection or notification purposes. Primary source
Dates and phased obligations
2023-07-01 Primary source
Distinct2023 consumer-health amendment, not a second row for the original2022 comprehensive CTDPA or its2025/2026 amendments. The enacted §2 distance is1,750feet, not2,000feet. Source and qualifications
Questions from this record
Who does PublicAct23-56 §2 cover?
Persons doing business in Connecticut or targeting products/services to residents when processing covered consumer health data, without the general CTDPA volume thresholds; §2 entity and data exemptions apply. Primary source
What is the law’s status?
Enacted / in force Primary source
What date does this record track?
2023-07-01 Primary source
Has this record been verified?
This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source
- Connecticut General Assembly, PublicAct23-56§2 effective2023-07-01, duties and scope; §§3,5–6 exemptions/enforcement
Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.