Connecticut § 42-529c Processors' duties. Contracts between controllers and processors.

Connecticut Statutes

§ 42-529c — Processors' duties. Contracts between controllers and processors.

Connecticut § 42-529c

Title 42Business, Selling, Trading and Collection Practices

Ch. 743jjData Privacy and Security

This text of Connecticut § 42-529c (Processors' duties. Contracts between controllers and processors.) is published on Counsel Stack Legal Research, covering Connecticut primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Conn. Gen. Stat. § 42-529c (2026).

Text

(a)A processor shall adhere to the instructions of a controller, and shall:

(1)Assist the controller in meeting the controller's obligations under sections 42-529 to 42-529e, inclusive, taking into account (A) the nature of the processing, (B) the information available to the processor by appropriate technical and organizational measures, and (C) whether such assistance is reasonably practicable and necessary to assist the controller in meeting such obligations; and (2) provide any information that is necessary to enable the controller to conduct and document data protection assessments.

(b)A contract between a controller and a processor shall satisfy the requirements established in subsection (b) of section 42-521 .

(c)Nothing in this section shall be construed to relieve a controller

Free access — add to your briefcase to read the full text and ask questions with AI

(a) A processor shall adhere to the instructions of a controller, and shall: (1) Assist the controller in meeting the controller's obligations under sections 42-529 to 42-529e, inclusive, taking into account (A) the nature of the processing, (B) the information available to the processor by appropriate technical and organizational measures, and (C) whether such assistance is reasonably practicable and necessary to assist the controller in meeting such obligations; and (2) provide any information that is necessary to enable the controller to conduct and document data protection assessments. (b) A contract between a controller and a processor shall satisfy the requirements established in subsection (b) of section 42-521 . (c) Nothing in this section shall be construed to relieve a controller or processor from the liabilities imposed on the controller or processor by virtue of such controller's or processor's role in the processing relationship, as described in sections 42-529 to 42-529e , inclusive. (d) Determining whether a person is acting as a controller or processor with respect to a specific processing of data is a fact-based determination that depends upon the context in which personal data is to be processed. A person who is not limited in such person's processing of personal data pursuant to a controller's instructions, or who fails to adhere to such instructions, is a controller and not a processor with respect to a specific processing of data. A processor that continues to adhere to a controller's instructions with respect to a specific processing of personal data remains a processor. If a processor begins, alone or jointly with others, determining the purposes and means of the processing of personal data, the processor is a controller with respect to such processing and may be subject to an enforcement action under section 42-529e .