Applies to persons conducting business in Connecticut or targeting CT residents that, in the preceding year, controlled/processed the personal data of 100,000+ consumers (excluding payment-transaction-only data), or 25,000+ consumers and derived 25%+ of gross revenue from the sale of personal data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.