AG ​Tong today released a new report on the Connecticut Data Privacy Act (CTDPA), detailing the Office’s actions in 2025 to enforce compliance with Connecticut’s data privacy law. The report discloses for the first time multiple active and ongoing investigations related to the safety of children and teens online across numerous platforms, including online messaging, gaming and chat bots.

“Connecticut has one of the nation’s first and strongest data privacy laws, and the Office of the Attorney General is active and aggressive in protecting our rights to privacy, security and safety online. In 2025, we held companies accountable for delayed and inadequate data breach notices and hidden consumer rights. We launched active and ongoing investigations into multiple platforms that may have exploited and exposed our kids and their sensitive data to unacceptable privacy and security risks online. Privacy and data security are not optional and companies that do business in our state must take these requirements seriously.” – AG Tong