In one paragraph
Public Act 25-113 overhauls the Connecticut Data Privacy Act's rules on automated decision-making. From July 1, 2026, consumers can opt out of profiling used for any automated decision with legal or similarly significant effects (housing, insurance, health care, employment, financial services and more), question the result and learn why the decision was made, and for housing decisions correct inaccurate data. Controllers that profile for such decisions must complete impact assessments (for processing created on or after Aug. 1, 2026), and privacy notices must state whether personal data is collected, used or sold to train large language models.
Plain-English summary, written with AI assistance. The official text controls.
What it means for business
Businesses covered by the CTDPA that use automated profiling for significant decisions must offer opt-outs and explanations and complete impact assessments; companies training LLMs on personal data must disclose it.
Key provisions
- Sec. 5: defines profiling and broadens decisions that produce legal or similarly significant effects
- Sec. 8: right to opt out of profiling in furtherance of any automated decision, to question the result and to be told the reason for the decision
- Sec. 8: for housing decisions, right to correct inaccurate personal data and have the decision reevaluated
- Sec. 9: privacy notices must state whether the controller collects, uses or sells personal data to train large language models
- Sec. 11: impact assessments for profiling used to make significant decisions, for processing created or generated on or after Aug. 1, 2026
- Sec. 15: limits on profiling minors in furtherance of fully automated decisions
Latest legislative action
Jun 24, 2025. Signed by the Governor June 24, 2025 (Public Act 25-113)
Topics and industries
Related topics
Affected industries
This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error