Connecticut Attorney General William Tong announced a settlement with TicketNetwork, Inc. as a result of an investigation into violations of the Connecticut Data Privacy Act.
Under the settlement, TicketNetwork has agreed to comply with the requirements of the CTDPA, maintain metrics for consumer rights requests received under the CTDPA, provide a report of these metrics, and pay $85,000.
According to the announcement, the attorney general first sent a CTDPA “cure notice” to TicketNetwork on November 9, 2023— four months after the law took effect. The notice flagged alleged deficiencies in the company’s privacy notice and gave the company the chance to come into compliance without penalty. The company’s privacy notice was “largely unreadable, missing key data rights, and contained rights mechanisms that were misconfigured or inoperable,” according to officials.
Under the law, TicketNetwork had 60 days— until January 8, 2024— to resolve each deficiency. TicketNetwork had not resolved these deficiencies well beyond the cure period, according to the attorney general.
To date, the attorney general has issued four separate “privacy notice sweeps” of businesses consisting of more than two dozen cure notices in total, all aimed at addressing privacy notice deficiencies. According to Tong, TicketNetwork is the “only entity that repeatedly represented that they had resolved deficiencies when they had not done so, and failed to timely respond to follow-up correspondence.” Nearly all other companies took prompt steps to come into compliance, he said.
“This law has now been in effect for two years. There is no excuse for continued non-compliance, and we are prepared to use the full weight of our enforcement authority to protect consumer privacy,” said Tong.
Connecticut was one of the first states to pass a comprehensive consumer data privacy law. The CTDPA was signed into law on May 10, 2022 and took effect on July 1, 2023.
The law gives Connecticut residents rights over their personal data and establishes privacy protection standards for businesses that process personal data. Connecticut residents have the right to: access data that companies are holding on them; have companies correct data that is inaccurate; request that companies delete such data; and opt-out of the processing of their personal data for sale, targeted advertising, or profiling. Beginning January 1, 2025, businesses were required to also recognize universal opt-out preference signals indicating a consumer’s intent to opt out of targeted advertising and sales of personal data.
Topics Connecticut
Was this article valuable?
Here are more articles you may enjoy.
Villages Health System Sees $350 Million in Medicare Overcharges 
Insured Losses From US Hurricanes Could Rise by 50% With Global Warming 
State Farm Implements 27% Rate Increase for Illinois Homeowners 
Air India Junior Pilot Asked Captain Why He Turned Off Fuel Switches 
