Connecticut expands privacy law with facial recognition, age assurance rules
Connecticut has amended its state privacy law to add new rules covering facial recognition technology and age assurance requirements. The changes extend the law's reach into biometric data practices and the ways platforms verify user age.
Why this matters: Two things happening at once here, and both matter. Facial recognition rules mean companies in Connecticut now have clearer limits on how they can collect and use your face as data. Age assurance rules mean platforms will need to verify how old users are, which sounds protective but routinely requires collecting identity documents from everyone to protect some. That trade-off is real. More states moving this direction means the patchwork of American privacy law keeps growing, and what your data rights look like increasingly depends on your zip code.
Who should care: Lawyers · Compliance · Privacy officers · Cybersecurity · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.