Connecticut AG Enforces Data Privacy Laws, Targets Child Safety Risks in 2025 Report In 2025, Connecticut’s Office of the Attorney General (OAG), led by Attorney General William Tong, intensified enforcement of the state’s data privacy laws, releasing a report under the Connecticut Data Privacy Act (CTDPA) that highlights aggressive oversight of corporate compliance and child safety risks online. The OAG received 1,830 data breach notifications in 2025, issued 63 warning letters, and secured a $105,000 settlement with Omni Healthcare over a 2024 ransomware attack. The report details active investigations into platforms exploiting children’s data, including social media apps, messaging services, gaming platforms, and AI-driven chatbots. Additional enforcement actions targeted connected vehicles, geolocation data, data brokers, and privacy violations involving genetic and consumer health data. Key updates include upcoming CTDPA amendments in July 2026, which are expected to strengthen protections further. The OAG’s efforts reflect Connecticut’s commitment to holding companies accountable for delayed breach notifications, inadequate disclosures, and failures to safeguard minors’ sensitive information.