Recording Law for Voiceprints & Biometric Data in Connecticut

Connecticut does not have a standalone biometric privacy law like Illinois’ BIPA. Instead, voiceprints are treated as "sensitive data" under the Connecticut Data Privacy Act (CTDPA) when processed for the purpose of uniquely identifying a person, but only if the CTDPA’s applicability thresholds are met. If you use live.law’s voice-ID feature to extract a voiceprint from a recorded audio sample for identification purposes and your service meets one of the CTDPA’s thresholds (you control or process personal data of at least 100,000 Connecticut consumers in a year, or at least 25,000 Connecticut consumers and more than 25% of your gross revenue comes from selling personal data), you are processing biometric data that qualifies as sensitive data under CTDPA § 42-515(38)(C) and § 42-520(a)(4). Under these provisions, you must obtain the person’s "clear affirmative act" consent before processing their voiceprint. This consent cannot rely on buried terms of service, mere non-interaction, or dark patterns — it must be a specific, informed opt-in. The law also requires you to let the person revoke consent easily and stop processing the voiceprint within 15 days of receiving the revocation.

Connecticut defines "biometric data" in CTDPA § 42-515(4) to include "a voiceprint," but it excludes raw audio recordings unless the data generated from that recording is used to identify a specific individual. So if you simply record someone’s voice without extracting a unique identifier, that raw audio is not biometric data under the CTDPA. But once you process that recording to create a voiceprint used to identify that person, it becomes biometric data. The law makes this clear: "'Biometric data' does not include (A) a digital or physical photograph, (B) an audio or video recording, or (C) any data generated from a digital or physical photograph, or an audio or video recording, unless such data is generated to identify a specific individual." This means live.law’s voice-ID feature, which extracts a unique voiceprint for identification, is squarely within the biometric data definition when it is used to identify a specific person.

The Connecticut Attorney General has exclusive authority to enforce the CTDPA’s biometric provisions. There is no private right of action under the CTDPA, so individuals cannot sue you directly for violating its biometric rules. Instead, enforcement is limited to the Attorney General, who can seek remedies under Connecticut’s unfair trade practices law. The statute does not set fixed per-violation damages like Illinois’ BIPA. Penalties depend on factors such as the number of violations, the size and complexity of your organization, the likelihood of public injury, the safety risks involved, whether the violation was the result of human or technical error, the sensitivity of the data, and the nature and extent of the processing. A mandatory 60-day cure period applied only during the law’s early years, but since January 1, 2025, the Attorney General has discretion to allow or deny a cure based on these specific factors. Even if you fall outside the CTDPA’s thresholds, you should still consider whether your use of voiceprints complies with other privacy or professional rules that may apply to your practice.

Connecticut’s wiretap and eavesdropping laws govern audio recording, but they do not directly address biometric voiceprints extracted from that audio. The criminal eavesdropping statute (Conn. Gen. Stat. § 53a-187) makes it a crime to record a conversation without the consent of at least one party only if the recorder is not physically present. Because a participant who is present can record their own conversation, Connecticut effectively operates as a one-party-consent state for in-person recordings made by someone in the conversation. For telephone calls, the criminal statute allows one-party consent (recording is lawful if either the sender or receiver consents), but a separate civil statute, Conn. Gen. Stat. § 52-570d, requires all parties’ consent or specific notice before recording an "oral private telephonic communication." The term "private" in § 52-570d is not defined by statute or controlling case law, so whether a call qualifies as "private" can be unclear. If you are only extracting a voiceprint from audio you lawfully recorded under these rules, the wiretap laws do not directly regulate the voiceprint itself.

Connecticut has a civil statute, Conn. Gen. Stat. § 52-571j, that protects people from interference when recording on-duty police in public. The statute makes the employer of a peace officer civilly liable if the officer interferes with someone taking a photo, video, or digital still image of the officer performing official duties, subject to exceptions where the officer had reasonable grounds to believe interference was needed to enforce criminal law, protect public safety, preserve a crime scene, safeguard privacy interests (for example, of a crime victim), or enforce Judicial Branch facility rules. However, this civil shield does not resolve the underlying constitutional question: the U.S. Court of Appeals for the Second Circuit, which covers Connecticut, has not yet squarely recognized a First Amendment right to record police in public, and that exact question is currently pending in Massimino v. Benoit (2d Cir., appeal docketed April 28, 2025; docketed August 18, 2025; oral argument held March 2, 2026; no Second Circuit decision as of July 2026). Because the constitutional predicate for § 52-571j’s protection is unsettled, the safest practice is to treat capture of an on-duty police officer as permitted only in the clearest paradigm case (wearer lawfully present, officer visibly on official duty, no separate third-party conversation, no contrary order) and route anything closer to the margins to attorney review.

Imagine you are representing a client in a Connecticut court case and want to use live.law’s voice-ID feature to authenticate their identity during a remote hearing. You record the client’s voice during a pre-hearing call. You then extract a voiceprint from that recording to create a unique identifier for your client. Under the CTDPA, if your service meets the law’s applicability thresholds (100,000 Connecticut consumers in the prior year, or 25,000 consumers plus more than 25% of gross revenue from data sales), you must obtain your client’s affirmative consent before processing their voiceprint for identification purposes. You cannot rely on a general terms-of-service acceptance — you need a clear, specific opt-in. If your client revokes consent later, you must stop processing the voiceprint within 15 days. For the underlying audio recording, Connecticut’s wiretap rules allow you to record the call if you are a participant (one-party consent), but if you plan to use the recording in court, you should still follow the rules for introducing evidence and consider whether the recording’s content or context could create additional legal issues.

If you plan to use live.law’s voice-ID feature in Connecticut, first check whether the CTDPA applies to your use of voiceprints by verifying whether your service meets the law’s applicability thresholds (100,000 Connecticut consumers in the prior year, or 25,000 consumers plus more than 25% of gross revenue from data sales). If it does, obtain clear, informed consent from each person whose voiceprint you will process for identification purposes. Do not rely on passive acceptance, buried terms of service, or dark patterns. Make sure your system allows easy revocation and stops processing voiceprints within 15 days of revocation. Even if the CTDPA does not apply, consider whether your use of voiceprints complies with ethical rules, client confidentiality obligations, or other privacy laws. For the underlying audio recording, ensure you are complying with Connecticut’s wiretap laws — one-party consent for in-person conversations recorded by a participant, and all-party consent or specific notice for telephone calls under § 52-570d. When in doubt, consult a Connecticut attorney familiar with data privacy and professional ethics.

Connecticut’s wiretap and eavesdropping statutes only restrict recording that captures audio content. Conn. Gen. Stat. § 53a-187 defines both "wiretapping" and "mechanical overhearing of a conversation" in terms of overhearing or recording a "telephonic or telegraphic communication" or a "conversation or discussion" — i.e., audio content. There is no reference to image or video capture in §§ 53a-187–189, and § 52-570d likewise applies only to "oral private telephonic communication." Only the presence of an audio channel triggers these statutes; a person filming silent video of a dispute, interaction, or police encounter would not violate the eavesdropping or wiretap statutes on that basis alone. (Separately, Connecticut's voyeurism statute, § 53a-189a, does restrict certain non-consensual image/video recording, but only where done with malice or sexual intent or via trespass and where the subject has a reasonable expectation of privacy and is not in plain view — not applicable to filming public disputes or police interactions.)