Privacy Law Library

Connected Vehicle Services: Survivor Requests (P.A. 25-113, s. 19)

CT Connected Vehicle Safety

Location · Other

Lets adult survivors of domestic violence, sexual assault, stalking or trafficking require a car maker to cut off an abuser's remote access to a vehicle's connected services, including location tracking. The provider must act within two business days, deny the abuser newly generated data, and keep the survivor's information confidential.

Where
Connecticut
Citation
Conn. Gen. Stat. 42-531a (P.A. 25-113, s. 19)
Status
In force
In force since
2026-07-01
Enforced by
Not specified in the section
People can sue
No
Penalties
No penalty clause in 42-531a; providers acting in compliance are immune from civil liability (42-531a(h)).
Applies to
  • Motor vehicle manufacturers, and entities acting for them, that provide connected vehicle services (remote data access or commands) (42-531a(a)(7))

What a privacy notice must say

  • Publicly post on the provider's website how a survivor may submit a request.Conn. Gen. Stat. 42-531a(g)

Rights it gives people

  • On a survivor's request with the VIN, the abuser's name and proof of ownership or exclusive possession, terminate or disable the abuser's (or the vehicle's) connected-services access within two business days, without fees or other account-holder approval.Conn. Gen. Stat. 42-531a(b)-(c)(1), (c)(3)

Practices it requires

  • Deny the abuser access to data generated after access was cut off, and notify the survivor before giving any formal notice to the abuser.Conn. Gen. Stat. 42-531a(c)(2), (c)(4)

Security duties

  • Treat survivor-submitted information as confidential, share it only with consent or as needed to act, and securely dispose of it within 90 days.Conn. Gen. Stat. 42-531a(d)

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Research reference, not legal advice.