Substitute Bill No. 1356 seeks to enhance data privacy protections in Connecticut by introducing comprehensive regulations on personal data handling, online monitoring, and connected vehicle services. The bill repeals Sections 42-515 and 42-516 of the general statutes and establishes new definitions for terms such as "biometric data," "consumer health data," and "sensitive data," which clarify the types of personal information that are protected. It emphasizes the necessity of obtaining clear consumer consent for data processing and outlines the responsibilities of data controllers and processors. The bill expands the scope of entities subject to these regulations, now including businesses that control or process data for at least 35,000 consumers, and removes previous exemptions for nonprofit organizations and financial institutions.

Additionally, the bill introduces enhanced consumer rights, allowing individuals to delete their personal data, access it, and opt out of targeted advertising and data sales. It mandates that social media platforms unpublish minors' accounts upon request and prohibits the processing of minors' data for targeted advertising unless necessary. The legislation also requires data brokers to register with the Department of Consumer Protection and establishes penalties for non-compliance. Notably, it includes provisions to protect survivors of domestic violence by allowing them to terminate an abuser's access to connected vehicle services. The changes are set to take effect on October 1, 2025, aiming to strengthen consumer privacy and ensure greater accountability in data handling practices.

Statutes affected:
Raised Bill: 42-515, 42-516, 42-524, 42-529, 42-529a
GL Joint Favorable Substitute: 42-515, 42-516, 42-529a
File No. 609: 42-515, 42-516, 42-529a
JUD Joint Favorable: 42-515, 42-516, 42-529a
APP Joint Favorable: 42-515, 42-516, 42-529a