Sign Up
HB 6002 Connecticut House · 2025 Regular Session

AN ACT SUBJECTING STATE AGENCIES TO THE SAME DATA PROTECTION AND PRIVACY LAWS AS THE PRIVATE SECTOR.

HB 6002 requires state agencies to follow the same data privacy and protection rules as private businesses, removing their previous exemption from consumer health data laws. It mandates that state agencies obtain consumer consent before selling health data, ban geofencing within 1,750 feet of mental health or reproductive health facilities for data collection, and ensure employees/contractors have confidentiality agreements. This bill directly affects state agencies and their contractors who handle consumer health data, extending private-sector standards to government operations. The changes take effect January 1, 2026.
Issues: ✓ HealthcareSupports HealthcareStrengthens health data privacy protections by requiring consent for data sales, banning geofencing near mental health facilities, and mandating confidentiality agreements - directly protecting patient rights in healthcare data handling.90% confidence ✓ TechnologySupports TechnologyMandates state agencies comply with data privacy laws, requires consent for health data sales, bans geofencing near sensitive facilities - strengthening consumer data protections.95% confidence
Bill status in committee 1 of 4 stages cleared
Introduction
Jan 2025
Committee Review
Floor Vote
Governor
Introduced Jan 22, 2025 Last action Apr 14, 2025
Maddy AI version diff · 1 comparison

What changed between versions

Proposed Bill → Committee Bill · 4 edits
MODERATE
The bill was amended from a proposed version to a committee version with significant changes to exemptions and applicability. The committee version adds specific exemptions for political subdivisions, nonprofit organizations, and various regulated entities like financial institutions and tribal governments. It also clarifies that the data protection laws apply to out-of-state businesses targeting Connecticut residents.
Scope change
The bill's scope was narrowed by adding numerous exemptions for government entities, nonprofits, educational institutions, and regulated industries, while expanding applicability to out-of-state businesses targeting Connecticut residents.
SCOPE

Added exemptions for political subdivisions, nonprofit organizations, private higher education institutions, national securities associations, financial institutions, tribal nation governments, and air carriers from the data protection requirements.

ELIGIBILITY

Extended the bill's applicability to persons conducting business in Connecticut and producing products or services targeted to Connecticut residents, regardless of where they are located.

REQUIREMENT

Repealed and replaced sections 42-517, 42-526, and 42-529d with new language that includes specific exemptions and clarifies which entities are subject to the data protection laws.

TECHNICAL

Changed the bill number designation from 'Proposed Bill' to 'Committee Bill' and updated the LCO number from 1767 to 5850, reflecting legislative processing changes.

Floor votes

How they voted

No floor votes recorded yet.
Full legislative history

Actions timeline

Total actions
12
Key actions
2
Committee
4
Mar 27, 2025
Lower · Passed
Joint Favorable
lower
Mar 7, 2025
Committee
REF. TO JOINT COMM. ON Government Administration and Elections
lower
Mar 6, 2025
Lower · Passed
DRAFTED BY COMMITTEE
lower
Jan 22, 2025
Committee
REF. TO JOINT COMM. ON Government Administration and Elections
lower
0 primary · 0 co-sponsors

Sponsors

No sponsor information available.