To answer this question, please select “yes” if you control or process the sensitive personal information of residents of Connecticut. The Connecticut Data Privacy Act states that any personal information that includes the following would be considered “sensitive personal information”: 

  • Racial or ethnic origin; 

  • Religious beliefs; 

  • Mental or physical health condition, diagnosis, disability or treatment; 

  • Sex life, sexual orientation or status as nonbinary or transgender; 

  • Citizenship or immigration status; 

  • Consumer health data; 

  • Genetic or biometric data processed for the purpose of uniquely identifying and individual or information derived therefrom; 

  • Children’s personal information; 

  • Data concerning an individual’s status as a victim of crime; 

  • Geolocation data; 

  • Neural data; 

  • A consumer’s financial account number, financial account log-in information or credit card or debit card number that, in combination with any required access or security code, password, or credential, would allow access to a consumer’s financial account; 

  • Government-issued identification number, including, but not limited to, Social Security number, passport number, state identification card number or driver’s license number. 


“Controlling” means determining the purpose and means of processing personal information. For example, if you determine whether individuals are added to an email marketing list or whether a contact from inquiry will be responded to, then you are controlling the personal information submitted to your website or application. 


“Processing” means the collection, use, sale, storage, disclosure, analysis, deletion or modification of personal information. For example, if you collect personal information, then you are processing personal information. 


If you do not control or process the sensitive personal information of residents of Connecticut, please select “no” to this question. 


Related privacy laws 

Connecticut Data Privacy Act