{"data":{"id":"us-ct/conn.-gen.-stat.-42-531a","jurisdiction":"us-ct","citation":"Conn. Gen. Stat. § 42-531a","heading":"(Note: This section is effective July 1, 2026.) Connected vehicle services. Requirements re survivors and covered providers. Immunity from civil liability.","body":"(a) As used in this section:\n(1) “Abuser” means an individual who (A) is identified by a survivor pursuant to subsection (b) of this section, and (B) has committed, or allegedly committed, a covered act against the survivor making the connected vehicle services request;\n(2) “Account holder” means an individual who is (A) a party to a contract with a covered provider that involves a connected vehicle service, or (B) a subscriber, customer or registered user of a connected vehicle service;\n(3) “Connected vehicle service” means any capability provided by or on behalf of a motor vehicle manufacturer that enables a person to remotely obtain data from, or send commands to, a covered vehicle, including, but not limited to, any such capability provided by way of a software application that is designed to be operated on a mobile device;\n(4) “Connected vehicle service request” means a request by a survivor to terminate or disable an abuser's access to a connected vehicle service;\n(5) “Covered act” means conduct that constitutes (A) a crime described in Section 40002(a) of the Violence Against Women Act of 1994, 34 USC 12291(a), as amended from time to time, (B) an act or practice described in 22 USC 7102(11) or (12), as amended from time to time, or (C) a crime, act or practice that is (i) similar to a crime, act or practice described in subparagraph (A) or (B) of this subdivision, and (ii) prohibited under federal, state or tribal law;\n(6) “Covered connected vehicle services account” means an account or other means by which a person enrolls in, or obtains access to, a connected vehicle service;\n(7) “Covered provider” means a motor vehicle manufacturer, or an entity acting on behalf of a motor vehicle manufacturer, that provides a connected vehicle service;\n(8) “Covered vehicle” means a motor vehicle that is (A) the subject of a connected vehicle request, and (B) identified by a survivor pursuant to subsection (b) of this section;\n(9) “Emergency situation” means a situation that, if allowed to continue, poses an imminent risk of death or serious bodily harm;\n(10) “In-vehicle interface” means a feature or mechanism installed in a motor vehicle that allows an individual within the motor vehicle to terminate or disable connected vehicle services;\n(11) “Person” means an individual, association, company, limited liability company, corporation, partnership, sole proprietorship, trust or other legal entity; and\n(12) “Survivor” means an individual (A) who is eighteen years of age or older, and (B) against whom a covered act has been committed or allegedly committed.\n(b) A survivor may submit a connected vehicle service request to a covered provider pursuant to this subsection. Each connected vehicle service request submitted pursuant to this subsection shall, at a minimum, include (1) the vehicle identification number of the covered vehicle, (2) the name of the abuser, and (3) (A) proof that the survivor is the sole owner of the covered vehicle, (B) if the survivor is not the sole owner of the covered vehicle, proof that the survivor is legally entitled to exclusive possession of the covered vehicle, which proof may take the form of a court order awarding exclusive possession of the covered vehicle to the survivor, or (C) if the abuser owns the covered vehicle, in whole or in part, a dissolution of marriage decree, restraining order or temporary restraining order (i) naming the abuser, and (ii) (I) granting exclusive possession of the covered vehicle to the survivor, or (II) restricting the abuser's use of a connected vehicle service against the survivor.\n(c) (1) Not later than two business days after a survivor submits a connected vehicle service request to a covered provider pursuant to subsection (b) of this section, the covered provider shall take one or more of the following actions requested by the survivor in the connected vehicle service request, regardless of whether the abuser identified in the connected vehicle service request is an account holder: (A) Terminate or disable the covered connected vehicle services account associated with such abuser; (B) (i) terminate or disable the covered connected vehicle services account associated with the covered vehicle, including, but not limited to, by resetting or deleting any data or wireless connection with respect to the covered vehicle, and (ii) provide instructions to the survivor on how to reestablish a covered connected vehicle services account; (C) (i) terminate or disable covered connected vehicle services for the covered vehicle, including, but not limited to, by resetting or deleting any data or wireless connection with respect to the covered vehicle, and (ii) provide instructions to the survivor on how to reestablish connected vehicle services; or (D) if the motor vehicle has an in-vehicle interface, provide information to the survivor concerning (i) the availability of the in-vehicle interface, and (ii) how to terminate or disable connected vehicle services using the in-vehicle interface.\n(2) After the covered provider has taken action pursuant to subdivision (1) of this subsection, the covered provider shall deny any request made by the abuser to obtain any data that (A) were generated by the connected vehicle service after the abuser's access to such connected vehicle service was terminated or disabled in response to the connected vehicle service request, and (B) are maintained by the covered provider.\n(3) The covered provider shall not refuse to take action pursuant to subdivision (1) of this subsection on the basis that any requirement, other than a requirement established in subsection (b) of this section, has not been satisfied, including, but not limited to, any requirement that provides for (A) payment of any fee, penalty or other charge, (B) maintaining or extending the term of the covered connected vehicle services account, (C) obtaining approval from any account holder other than the survivor, or (D) increasing the rate charged for the connected vehicle service.\n(4) (A) If the covered provider intends to provide any formal notice to the abuser regarding any action set forth in subdivision (1) of this subsection, the covered provider shall first notify the survivor of the date on which the covered provider intends to provide such notice to the abuser.\n(B) The covered provider shall take reasonable steps to ensure that the covered provider only provides formal notice to the abuser, pursuant to subparagraph (A) of this subdivision, (i) at least three days after the covered provider notified the survivor pursuant to subparagraph (A) of this subdivision, and (ii) after the covered provider has terminated or disabled the abuser's access to the connected vehicle service.\n(5) (A) The covered provider shall not be required to take any action pursuant to subdivision (1) of this subsection if the covered provider cannot operationally or technically effectuate such action.\n(B) If the covered provider cannot operationally or technically effectuate any action as set forth in subparagraph (A) of this subdivision, the covered provider shall promptly notify the survivor who submitted the connected vehicle service request that the covered provider cannot operationally or technically effectuate such action, which notice shall, at a minimum, disclose whether the covered provider's inability to operationally or technically effectuate such action can be remedied and, if so, any steps the survivor can take to assist the covered provider in remedying such inability.\n(d) (1) The covered provider and each officer, director, employee, vendor or agent of the covered provider shall treat all information submitted by the survivor under subsection (b) of this section as confidential, and shall securely dispose of such information not later than ninety days after the survivor submitted such information.\n(2) The covered provider shall not disclose any information submitted by the survivor under subsection (b) of this section to a third party unless (A) the covered provider has obtained affirmative consent from the survivor to disclose such information to the third party, or (B) disclosing such information to the third party is necessary to effectuate the connected vehicle service request.\n(3) Nothing in subdivision (1) of this subsection shall be construed to prohibit the covered provider from maintaining, for longer than the period specified in subdivision (1) of this subsection, a record that verifies that the survivor fulfilled the conditions of the connected vehicle service request as set forth in subsection (b) of this section, provided such record is limited to what is reasonably necessary and proportionate to verify that the survivor fulfilled such conditions.\n(e) The survivor shall take reasonable steps to notify the covered provider of any change in the ownership or possession of the covered vehicle that materially affects the need for the covered provider to take action pursuant to subdivision (1) of subsection (c) of this section.\n(f) The requirements established in this section shall not prohibit or prevent a covered provider from terminating or disabling an abuser's access to a connected vehicle service in an emergency situation after receiving a connected vehicle service request.\n(g) Each covered provider shall publicly post, on such covered provider's Internet web site, a statement describing how a survivor may submit a connected vehicle service request to such covered provider.\n(h) Each covered provider and each officer, director, employee, vendor or agent of a covered provider shall be immune from any civil liability which might otherwise arise from any act or omission committed by such covered provider, officer, director, employee, vendor or agent pursuant to subsections (a) to (g), inclusive, of this section, provided such act or omission was committed in compliance with the provisions of said subsections.","path":["TITLE 42. BUSINESS, SELLING, TRADING AND COLLECTION PRACTICES","CHAPTER 743jj. DATA PRIVACY AND SECURITY","PART IV. CONNECTED DEVICES AND SERVICES"],"source_url":"https://www.cga.ct.gov/2026/sup/chap_743jj.htm#sec_42-531a","current_through":"Revised to January 1, 2026 (2026 Supplement to the General Statutes of Connecticut, applied over the base revision of January 1, 2025)","vintage":"","retrieved_at":"2026-09-06T19:07:27Z","sha256":"6f21b79a20b38035ecb73ca51d46d3c5cc99aae36e9b1c374952bece97903d99","source_id":"us-ct","stale":false,"prev":"us-ct/conn.-gen.-stat.-42-531","next":"us-ct/conn.-gen.-stat.-42-900"},"notice":"GroundRules: Original legal text. Not legal advice."}