CT HB06002

Removes the exemption for Connecticut state agencies from the state's data protection and privacy laws (sections 42-515 to 42-525), effective January 1, 2026

State agencies will now be subject to consumer health data protections, including restrictions on geofencing within 1,750 feet of mental health or reproductive health facilities

Political subdivisions of the state (local governments) remain exempt from these privacy requirements

Maintains existing exemptions for nonprofits, private higher education institutions, HIPAA-covered entities, financial institutions subject to Gramm-Leach-Bliley Act, tribal nations, and federally regulated air carriers

Applies to entities that process personal data of at least 100,000 consumers or at least 25,000 consumers while deriving over 25% of gross revenue from data sales