Raised Bill No. 1356 seeks to enhance consumer data privacy and regulate the activities of data brokers in Connecticut. The bill introduces new definitions, such as "biometric data," "neural data," and "precise geolocation data," while also clarifying terms like "consent" as a clear affirmative act. It modifies existing definitions to improve clarity, including expanding "consumer health data" to encompass gender-affirming and reproductive health data. The bill mandates that data brokers register with the Department of Consumer Protection, pay a registration fee, and disclose compliance measures with privacy laws. It also establishes civil penalties for violations and outlines exemptions for certain entities, such as financial institutions.
Additionally, the bill emphasizes consumer rights regarding personal data, allowing individuals to confirm data processing, correct inaccuracies, and delete their data. It requires data controllers to obtain consent before processing sensitive data and to provide clear privacy notices. The bill also introduces specific protections for minors, including restrictions on collecting precise geolocation data and mandates for data protection assessments for online services directed at minors. Overall, Raised Bill No. 1356 aims to create a comprehensive framework for consumer data protection, with an effective date set for October 1, 2025.
Statutes affected: Raised Bill: 42-515, 42-516, 42-524, 42-529, 42-529a