Privacy Law and Privacy Regulations

Connecticut Governor Ned Lamont has signed Senate Bill 4 into law, making major changes to the Connecticut Data Privacy Act (CTDPA). Together, these updates represent some of the most significant changes to the CTDPA since it took effect.

Although California drivers did not face higher insurance premiums because state law bars insurers from using such data for rate increases, regulators argued that GM and OnStar still violated California privacy law by retaining the data longer than necessary and misleading consumers about its sales to data brokers.

Companies deploying tracking technologies and algorithmic pricing face a new wave of class action litigation that merges wiretapping claims with deceptive pricing allegations. These lawsuits leverage the ECPA's crime-tort exception and state consumer protection statutes to challenge privacy policies that fail to disclose how consumer data feeds into dynamic pricing engines. The convergence of these two litigation trends creates compounded exposure across industries using data-driven pricing strategies.