Connecticut Data Privacy Act (CTDPA) CTDPA-42-521-PROCESSOR: Processor Obligations and Contracts

Processing by a processor must be governed by a contract setting out instructions, nature/purpose, data types, duration, confidentiality, deletion/return, audit cooperation and sub-processor flow-down; processors must assist controllers.

Other controls in CTDPA: Processor and De-identified Data (42-521/523)

CTDPA-42-521-DEIDENT De-identified and Pseudonymous Data

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Connecticut Data Privacy Act (CTDPA) controls