Sections

Page 1 of 6

• When does notice have to be provided?

• How should notice be provided to the Office of the Attorney General?

• What happens after I submit my completed Data Breach Notice form?

• Who should I contact with questions or feedback about this form

• Is anything required in addition to notice?

• What should I do if I have previously submitted a data breach notification form and wish to update, amend or supplement my submission?

• If a Consumer Health Data Controller is a nonprofit is it exempt from complying with the CTDPA

• What are some examples of conduct that Consumer Health Data Controllers are prohibited from engaging in under the CTDPA?

• Who is Exempt from Complying with the Act?

• What is a Consumer Health Data Controller?

• I am a Consumer; can I send an Opt Out Preference Signal?

• What Consumer Health Data Controllers are covered by the CTDPA?

• Do all Controllers need to Honor Opt Out Preference Signals?

• Is there a Private Right of Action for Individuals?

• How Often Can a Consumer Request Information About their Personal Data from a Controller? Is there a Cost?