Connecticut Data Privacy Act (CTDPA)
Maintain compliance using Classify360.
CTDPA applies to entities conducting business in Connecticut as well as products or services that target Connecticut residents. CTDPA mandates entities using and storing personal consumer data must fulfill specific basic data protection purposes, like the minimization of stored personal data and limited usage of that data. This legislation will take effect July 1, 2023.
Book an Intro Call
How Classify360 Ensures CTDPA Compliance
Enable Data Privacy and Regional Regulation
Identify data falling under CTDPA and other geographically-based regulations to take appropriate compliance measures.
No Additional Copies of Data
Classify360’s inverted index provides a rapid, thorough search of connected data sources without making copies and the associated additional risk. Chain of custody is automatically documented and maintained, clearly demonstrating files were not opened or altered by the Classify360 platform. The CDMHub ensures only data stewards with appropriate security permissions have access to data for review purposes.
Avoid Financial and Reputational Damages
Failure to comply with CTDPA is considered an unfair trade practice under the Connecticut Unfair Trade Practices Act, rendering penalties of up to $5,000 per willful violation; there is potential for more severe penalties to be enacted once the legislation is in effect. Furthermore, lack of compliance can cause irreversible reputational damage.
Actionable Workflows to Maintain Historical and Ongoing Compliance
Achieve historical compliance with untouched dark data and maintain ongoing compliance as new data is created by placing Classify360 at the top of your data workflows.
Comprehensive Data Compliance Solution at Scale
Rapidly classify any amount of data, from gigabytes to petabytes – even exabytes. As quickly as your organization produces data, Classify360 can classify and take action on it to ensure you are never outside the parameters of CTDPA compliance.
Take Action, Stay Compliant
Authorized data stewards take informed action within Classify360’s CDMHub to migrate, archive, preserve, or delete data per CTDPA standards.
Are You Ready to Be CTDPA Compliant?
Frequently Asked Questions
CTDPA applies to businesses servicing or targeting residents of Connecticut and, during the preceding calendar year either:
- Controlled or processed the personal data of at least 100,000 consumers, excluding personal data controlled or processed solely for the purpose of completing payment transactions
- Controlled or processed the personal data of at least 25,000 consumers and derived over 25% of their gross revenue from the sale of personal data
Connecticut consumers are provided 5 rights under CTDPA:
- Right to access – the right to confirm whether or not an entity holds their personal data, except in instances where this access would reveal a trade secret
- Right to correct – the right to correct any inaccurate personal data held by an entity
- Right to delete – the right to delete any personal data about themselves
- Right to data portability – the right to receive a copy of their personal data held by an organization in a portable, usable format the consumer can use to transmit their personal data with ease
- Right to opt out – the right to choose to not have their personal data processed for the purposes of targeted advertising and sales
Classify360 software uses a manage-in-place principle for an organization’s data, ensuring data persists in its original location. The cloud platform for Classify360 does not make, store, or copy entire files from their original sources. Only indexes that make files searchable are kept in a compressed and illegible form. Analyses and resulting classifications reference data in their original locations. This approach eliminates the burden, cost, and risk of managing additional data and yields a very efficient store of searchable content for a responsive user experience.
