Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

CT SB1295: An Act Concerning Broadband Internet, Gaming, Social Media, Online Services and Consumer Contracts

Effective Jul 1, 2026 Connecticut · 2025 session

Last verified Oct 12, 2026 · official bill text

SB1295 · where it stands

All steps complete
  1. Introduced Complete
  2. Passed first chamber Complete
  3. Passed both chambers Complete
  4. Enacted Complete
  5. Effective Since Jul 1, 2026
What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

Public Act 25-113 overhauls the Connecticut Data Privacy Act's rules on automated decision-making. From July 1, 2026, consumers can opt out of profiling used for any automated decision with legal or similarly significant effects (housing, insurance, health care, employment, financial services and more), question the result and learn why the decision was made, and for housing decisions correct inaccurate data. Controllers that profile for such decisions must complete impact assessments (for processing created on or after Aug. 1, 2026), and privacy notices must state whether personal data is collected, used or sold to train large language models.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

Businesses covered by the CTDPA that use automated profiling for significant decisions must offer opt-outs and explanations and complete impact assessments; companies training LLMs on personal data must disclose it.

Key provisions

  1. Sec. 5: defines profiling and broadens decisions that produce legal or similarly significant effects
  2. Sec. 8: right to opt out of profiling in furtherance of any automated decision, to question the result and to be told the reason for the decision
  3. Sec. 8: for housing decisions, right to correct inaccurate personal data and have the decision reevaluated
  4. Sec. 9: privacy notices must state whether the controller collects, uses or sells personal data to train large language models
  5. Sec. 11: impact assessments for profiling used to make significant decisions, for processing created or generated on or after Aug. 1, 2026
  6. Sec. 15: limits on profiling minors in furtherance of fully automated decisions

Latest legislative action

Jun 24, 2025. Signed by the Governor June 24, 2025 (Public Act 25-113)

Topics and industries

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error