The Connecticut Data Privacy Act Amendments (SB 1295, Public Act 25-113) are a 2025 overhaul that adds significant AI-related obligations for businesses handling consumer data. The amendments took effect July 1, 2026 after being signed June 25, 2025.
New Consumer Rights in the Connecticut Data Privacy Act Amendments
Consumers gain the right to opt out of profiling used to make automated decisions with legal or similarly significant effects, such as decisions about housing, employment, insurance, credit, health care, education, or criminal justice. Where feasible, consumers can question a covered automated decision, get an explanation of how it was reached, and review the personal data used.
Transparency and Assessment Duties
The amendments also expand transparency duties, including notice obligations connected to the use of personal data in training large language models, and they require data protection assessments for higher risk profiling. The profiling impact assessment duty starts August 1, 2026. Any company doing business with Connecticut consumers at the law’s thresholds should review its AI-driven decision workflows now that the compliance date has arrived.
Source: Connecticut General Assembly: SB 1295 / Public Act 25-113
Report a violation: If you believe a business is violating this law, you can file a complaint with the Connecticut Attorney General Consumer Assistance Unit.
