Exam CIPP-US topic 1 question 83 discussion

Connecticut describes the covered entities subject to its notification law as “any person who conducts business in this state, and who, in the ordinary course of such person’s business, owns, licenses or maintains computerized data that includes personal information.” Some states limit the definition of “covered entities” to those that “conduct business in that state.” Note, however, that some state laws are narrower, such as the Georgia law applying only to “information brokers.”