Is Connecticut heralding a new era of rigorous enforcement in data privacy with its recent $85,000 settlement with TicketNetwork?
At a Glance
- Connecticut enacts its fifth state privacy law, effective July 1, 2023
- TicketNetwork fined $85,000 for failing to comply with Connecticut Data Privacy Act (CTDPA)
- Businesses face mounting pressure to align with strict privacy regulations
- Connecticut Attorney General’s aggressive enforcement stance sets a precedent
Connecticut’s New Privacy Law
Connecticut has taken a bold step into the realm of data privacy with the Connecticut Personal Data Privacy and Online Monitoring Act. Enacted on May 10, 2022, this important piece of legislation places new obligations on businesses operating within or targeting Connecticut residents. Crucially, it applies without any minimum revenue threshold, ensuring that companies of all sizes must comply with strict privacy protections.
The law impacts businesses controlling or processing personal data of 100,000 or more Connecticut residents, or 25,000 or more consumers if over 25% of gross income comes from selling personal data. Effective from July 1, 2023, this law demands accountability and transparency from all qualifying entities. Businesses are required to enable residents to confirm, access, correct, delete, and opt-out of data processing for various purposes.
TicketNetwork Under the Microscope
Connecticut Attorney General William Tong is setting a strong precedent, having reached a significant $85,000 settlement with TicketNetwork for non-compliance with the Connecticut Data Privacy Act (CTDPA). The settlement followed multiple warnings during a 60-day cure period, during which the Attorney General’s office sent reminder notifications that were blatantly ignored by TicketNetwork.
Attorney General Tong Announces $85,000 Settlement with TicketNetwork for Violations of the Connecticut Data Privacy Act.
Here's the stettlement: https://t.co/aMyHa9U6HY pic.twitter.com/oMDprslQ5v
— Luis Montezuma | @[email protected] (@montezumachavez) July 8, 2025
“This law has been in effect for two years. There is no excuse for continued non-compliance, and we are prepared to use the full weight of our enforcement authority to protect consumer privacy.” – AG William Tong
The failure of TicketNetwork to address these concerns prompted action from the state’s highest legal office. As a lesson for those companies who may think they can skirt around state laws, Connecticut is demonstrating that enforcement is no longer just a threat, but a reality.
Implications and Expectations
What does this settlement mean for businesses? Simply put, adapt or face the consequences. The Attorney General’s Office is tracking violations, issues and ensuring that the Connecticut Data Privacy Act is not taken lightly. Companies are put on notice as they must implement mechanisms so residents can easily opt-out of data sales or targeted advertising by January 1, 2025.
What has transpired in Connecticut with TicketNetwork serves as a cautionary tale for businesses nationwide. If a company chooses to ignore communication from the AG’s office, it risks costly repercussions. The gloves are off, showing that any erosion of personal data rights will not be tolerated.
