Conn. Gen. Stat. § 42-531: (Note: This section is effective July 1, 2026.) Connected devices. Requirements. Exceptions. Unfair or deceptive trade practice.
Where this section sits in the code
- TITLE 42. BUSINESS, SELLING, TRADING AND COLLECTION PRACTICES
- CHAPTER 743jj. DATA PRIVACY AND SECURITY
- PART IV. CONNECTED DEVICES AND SERVICES
(a) For the purposes of this section:
(1) “Connected device” means an Internet-connected home appliance, television or toy that includes a camera or microphone;
(2) “Connected device manufacturer” means a person doing business in this state who manufactures a connected device;
(3) “Initial consumer” means an individual who is (A) a resident of this state, and (B) with respect to any connected device, the first individual to lease, purchase or assume ownership of such connected device;
(4) “Person” means an individual, association, corporation, limited liability company, partnership, trust or other legal entity;
(5) “Personally identifying information” has the same meaning as provided in section 42-284;
(6) “Provider” means (A) a connected device manufacturer, and (B) any person who (i) enters into a contract with a connected device manufacturer, and (ii) receives access to (I) any camera or microphone included in a connected device manufactured by the connected device manufacturer, (II) any image or video collected, recorded, stored, analyzed, interpreted or transmitted by way of any camera included in any connected device manufactured by the connected device manufacturer, or (III) any spoken word or other sound collected, recorded, stored, analyzed, interpreted or transmitted by way of any microphone included in any connected device manufactured by the connected device manufacturer; and
(7) “Toy” means a product that a manufacturer designs, or intends to be used, for amusement or play.
(b) No provider shall allow any person to activate any connected device unless the provider:
(1) Prominently displays to the initial consumer or any person whom the initial consumer designates to first install or set up the connected device, at the time that such initial consumer or person first installs or sets up such connected device:
(A) A disclaimer in the following form:
“This device transmits audio and/or video back to the manufacturer and/or a third party and which may be recorded.”; and
(B) A statement disclosing (i) that such connected device includes a camera or microphone, (ii) that the camera or microphone included in such connected device will be enabled or turned on, (iii) that such connected device might record such initial consumer, (iv) that the connected device manufacturer of such connected device or another provider might retain recordings of such initial consumer, (v) which command or action will activate or enable operation of the camera or microphone included in such connected device, (vi) the categories of images, videos or sounds that (I) the camera or microphone included in such connected device will look for, listen for or record, or (II) might be disclosed to any person other than such initial consumer, (vii) the categories of persons described in subparagraph (B)(vi)(II) of this subdivision, and (viii) that such initial consumer shall not be discriminated against if such initial consumer or person declines to activate a camera or microphone included in the connected device unless (I) such connected device is provided to such initial consumer as a condition of employment, or (II) declining to activate such camera or microphone would render such connected device useless; and
(2) Provides to the initial consumer or any person whom the initial consumer designates to first install or set up the connected device, at the time that such initial consumer or person first installs or sets up such connected device, the ability to decline to activate a camera or microphone included in the connected device, unless declining to activate the camera or microphone would render such connected device useless.
(c) Each provider shall implement and maintain reasonable security measures to protect any personally identifying information collected through a camera or microphone included in a connected device from any unauthorized access, acquisition, destruction, disclosure, modification or use thereof.
(d) No provider shall use or sell any recording collected through operation of a camera or microphone included in a connected device for the purposes of targeted advertising, as defined in section 42-515, unless the initial consumer opts in to such use or sale for such purposes.
(e) No person shall compel any provider to build specific features for the purpose of allowing a law enforcement agency or officer to monitor communications through a camera or microphone included in a connected device.
(f) Nothing in this section shall be construed to:
(1) Impose any liability on a provider for any functionality provided by an application that an initial consumer (A) downloads and installs, or (B) chooses to use on a network of remote servers hosted on the Internet to store, manage and process data;
(2) Authorize disclosure of any recording retained by a provider to another person, including, but not limited to, a law enforcement agency or officer, unless such disclosure is authorized by other applicable law or pursuant to an order issued by a court of competent jurisdiction; or
(3) Modify, limit or supersede the operation of any other provision of the general statutes concerning privacy or security.
(g) Any violation of subsections (b) to (d), inclusive, of this section shall be deemed an unfair or deceptive trade practice under subsection (a) of section 42-110b.
Collected 2026-09-06T19:07:27Z. Source file · JSON