Connecticut data broker registration starts January 1, 2027

What the law does

Public Act 26-64 (SB 4), signed May 27, 2026 amends the Connecticut Data Privacy Act. For data brokers it does three things:

• Registration. From January 1, 2027, data brokers covered by the law register annually with the Connecticut Department of Consumer Protection, for a fee of $2,500 a year.
• A deletion mechanism. The state must launch an accessible deletion mechanism by July 1, 2028, letting a consumer send one deletion request to every registered broker.
• A recurring duty. From October 1, 2028, registered brokers access the mechanism at least every 45 days and process the requests.

Check the definition first

Connecticut and California define "data broker" differently. A company that is registered in California is not automatically covered in Connecticut, and the reverse is also true. Read Connecticut's definition with your counsel before you register.

Dates for your calendar

• January 1, 2027: registration required.
• July 1, 2028: the deletion mechanism must be live.
• October 1, 2028: the 45-day access cycle begins.

If you already run California's DROP

The work is familiar: pull requests on a schedule, match them against your records, act, and keep evidence. BrokerShield keeps each state's mechanism behind its own adapter, so when Connecticut publishes the technical rules for its mechanism, it plugs into the same agent you already run for DROP.