LCO \\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-R01-
SB.docx
1 of 18
General Assembly Substitute Bill No. 1103
January Session, 2023
AN ACT CONCERNING ARTIFICIAL INTELLIGENCE, AUTOMATED
DECISION-MAKING AND PERSONAL DATA PRIVACY.
Be it enacted by the Senate and House of Representatives in General
Assembly convened:
Section 1. (NEW) (Effective July 1, 2023) (a) As used in this section: 1
(1) "Artificial Intelligence Officer" means the employee designated 2
pursuant to subsection (b) of this section; 3
(2) "Automated decision support system" means any automated 4
decision system that provides material information for the purpose of 5
informing a conclusion, decision or judgment made by an individual 6
on behalf of a state agency; 7
(3) "Automated decision system" means any machine-based system 8
or application, including, but not limited to, any such system or 9
application that is derived from machine learning, statistics or other 10
data processing or artificial intelligence techniques, that is developed, 11
procured or utilized to make, inform or materially support a critical 12
decision made by a state agency, but does not include passive 13
computing infrastructure; 14
(4) "Automated final decision system" means any automated 15
decision system that makes a final conclusion, decision or judgment on 16
behalf of a state agency without any intervention by an individual 17 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
2 of 18
acting on behalf of the state agency; 18
(5) "Automated system" means any automated decision support 19
system, automated decision system or automated final decision 20
system; 21
(6) "Automated systems procedures" means the procedures 22
developed and adopted pursuant to this section; 23
(7) "Connecticut Artificial Intelligence Advisory Board" means the 24
board established in section 2 of this act; 25
(8) "Critical decision" means any decision or judgment that has any 26
legal, material or similarly significant effect on an individual's life 27
concerning access to, or the cost, terms or availability of, (A) education 28
and vocational training, including, but not limited to, assessment, 29
accreditation or certification, (B) employment, worker management or 30
self-employment, (C) essential utilities such as electricity, heat, water, 31
Internet or telecommunications access or transportation, (D) family 32
planning services, including, but not limited to, adoption services or 33
reproductive services, (E) financial services, including, but not limited 34
to, any financial service provided by a mortgage company, (F) services 35
from a creditor or mortgage broker, (G) health care, including, but not 36
limited to, mental health care, dental care or vision care, (H) housing 37
or lodging, including, but not limited to, any rental, short-term 38
housing or lodging, (I) legal services, including, but not limited to, 39
private mediation or arbitration, (J) government benefits, or (K) public 40
services; 41
(9) "Passive computing infrastructure" means any intermediary 42
technology, including, but not limited to, web hosting, domain 43
registration, networking, caching, data storage or cybersecurity 44
technology, that does not influence or determine the outcome of a 45
decision, make or aid in making a decision, inform policy 46
implementation or collect data or observations; 47
(10) "State agency" means any department, board, commission, 48 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
3 of 18
council, institution, office, constituent unit of the state system of higher 49
education, technical education and career school or other agency in the 50
executive, legislative or judicial branch of state government; and 51
(11) "Trade secret" has the same meaning as provided in section 35-52
51 of the general statutes. 53
(b) Not later than October 1, 2023, the Secretary of the Office of 54
Policy and Management shall designate an employee of the Office of 55
Policy and Management to serve as the Artificial Intelligence Officer. 56
Such employee shall have: (1) Extensive knowledge concerning 57
automated systems and artificial intelligence analysis, governance, 58
principles, practices, technology, terminology and trends; and (2) 59
experience in administration, planning, policy development, project 60
management and service coordination. 61
(c) The Artificial Intelligence Officer shall be responsible for 62
performing said officer's duties as set forth in this section. The 63
Secretary of the Office of Policy and Management may contract with a 64
third party, if said secretary deems it necessary, to assist the Artificial 65
Intelligence Officer in performing said officer's duties under this 66
section. 67
(d) Not later than December 31, 2023, and every two years 68
thereafter, the Artificial Intelligence Officer shall, in consultation with 69
the state agency data officers and state agency heads, develop and 70
adopt automated systems procedures for use by state agencies in 71
developing, procuring and utilizing automated systems for critical 72
decisions. In developing such automated systems procedures, the 73
Artificial Intelligence Officer shall consider imposing the following 74
safeguards, where appropriate, to mitigate risk: (1) Requiring state 75
agencies to develop, procure and utilize automated systems in a 76
manner that is consistent with national and international standards; (2) 77
ensuring that state agencies develop, procure and utilize automated 78
systems in a manner that is consistent with state and federal laws, 79
including, but not limited to, state and federal laws prohibiting 80 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
4 of 18
discrimination and addressing privacy, civil rights and civil liberties; 81
(3) ensuring that no automated system disproportionately and 82
unlawfully impacts any individual or group of individuals on the basis 83
of any actual or perceived differentiating characteristic, including, but 84
not limited to, age, genetic information, color, ethnicity, race, creed, 85
religion, national origin, ancestry, sex, gender identity or expression, 86
sexual orientation, marital status, familial status, pregnancy, veteran 87
status, disability or lawful source of income; (4) ensuring that any 88
benefits that a state agency gains by utilizing an automated system 89
outweigh any risks inherent in utilizing the automated system; (5) 90
ensuring that each automated system is applied and utilized in a 91
manner that is consistent with the use cases for which such automated 92
system was trained in order to ensure accuracy, reliability and efficacy; 93
(6) ensuring that each automated system is safe, secure and resilient, 94
including, but not limited to, in circumstances in which such 95
automated system is confronted with any systematic vulnerability, 96
adversarial manipulation or other malicious exploitation; (7) ensuring 97
that the operations of, and outcomes generated by, an automated 98
system are sufficiently understandable by subject matter experts and 99
users; (8) ensuring that individual roles and responsibilities are clearly 100
defined, understood and appropriately assigned in a manner that is 101
consistent with the purpose for which each use of an automated 102
system is intended; (9) ensuring that the development, procurement 103
and utilization of an automated system is, and the inputs and outputs 104
for applications of an automated system are, documented and 105
traceable; (10) ensuring that the design, development, procurement 106
and monitoring of an automated system is, and intended purposes of 107
an automated system are, appropriately transparent to the public 108
under uniform protocols and public access requirements concerning 109
releases and posting of appropriate information by each state agency 110
utilizing the automated system; (11) ensuring that data inputs utilized 111
by each automated system are appropriately transparent under the 112
Freedom of Information Act, as defined in section 1-200 of the general 113
statutes; and (12) ensuring that each state agency that utilizes an 114
automated system (A) examines the automated system, at least once 115 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
5 of 18
every two years, to ensure compliance with such automated systems 116
procedures, (B) supersedes, disengages and deactivates any 117
application of the automated system that demonstrates performance 118
that is, or outcomes that are, inconsistent with such automated systems 119
procedures or any other provision of this section, (C) is appropriately 120
transparent in disclosing any information that is relevant to such state 121
agency's use of the automated system, (D) implements safeguards to 122
ensure that the automated system is properly applied, utilized and 123
functioning, and (E) provides appropriate training to all personnel 124
responsible for developing, procuring or utilizing the automated 125
system. 126
(e) No state agency shall develop, procure or utilize any automated 127
system on or after January 1, 2024, unless such automated system 128
satisfies the requirements established in the automated systems 129
procedures. 130
(f) Not later than November 1, 2023, and every two years thereafter, 131
the Artificial Intelligence Officer shall submit a preliminary draft of the 132
automated systems procedures to the Connecticut Artificial 133
Intelligence Advisory Board. The Connecticut Artificial Intelligence 134
Advisory Board shall hold a public hearing on such draft automated 135
systems procedures, and submit any suggested revisions to the 136
Artificial Intelligence Officer, not later than thirty days after said board 137
receives such draft automated systems procedures. 138
(g) After the public hearing held pursuant to subsection (f) of this 139
section and, if applicable, receiving any recommended revisions from 140
the Connecticut Artificial Intelligence Advisory Board, the Artificial 141
Intelligence Officer shall finalize the automated systems procedures 142
and submit such final automated systems procedures to said board. 143
The Artificial Intelligence Officer shall send a copy of the final 144
automated systems procedures to all state agency data officers, and the 145
Office of Policy and Management shall post such final automated 146
systems procedures on said office's Internet web site. 147 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
6 of 18
(h) Not later than December 31, 2024, and every two years 148
thereafter, each state agency shall: (1) Conduct an inventory of the 149
automated systems that are in use by such state agency, which 150
inventory shall be in a form prescribed by the Artificial Intelligence 151
Officer; and (2) submit such inventory to said officer and the 152
Connecticut Artificial Intelligence Advisory Board. The Office of Policy 153
and Management shall make each such inventory available to the 154
public on said office's Internet web site. 155
(i) The Artificial Intelligence Officer shall be subject to the Freedom 156
of Information Act, as defined in section 1-200 of the general statutes. 157
(j) No provision of this section shall be construed to: (1) Require 158
disclosure of any trade secret; (2) abrogate any work product 159
protection; or (3) restrict the Artificial Intelligence Officer's or any state 160
agency's ability to (A) conduct any internal research to develop, 161
improve or repair any product, service or technology, (B) prevent, 162
detect, protect against or respond to, or investigate, report or prosecute 163
any person responsible for, any security incident, identity theft, fraud, 164
harassment, malicious or deceptive activity or illegal activity, or (C) 165
preserve the integrity or security of any system. 166
Sec. 2. (NEW) (Effective July 1, 2023) (a) As used in this section: 167
(1) "Automated system" has the same meaning as provided in 168
section 1 of this act; 169
(2) "State agency" has the same meaning as provided in section 1 of 170
this act; and 171
(3) "Trade secret" has the same meaning as provided in section 35-51 172
of the general statutes. 173
(b) There is established the Connecticut Artificial Intelligence 174
Advisory Board, which shall be part of the Legislative Department. 175
(c) The board shall consist of the following members: (1) Two 176 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
7 of 18
appointed by the speaker of the House of Representatives; (2) two 177
appointed by the president pro tempore of the Senate; (3) two 178
appointed by the minority leader of the House of Representatives; (4) 179
two appointed by the minority leader of the Senate; (5) the House 180
chairperson of the joint standing committee of the General Assembly 181
having cognizance of matters relating to consumer protection, or one 182
appointed by such chairperson; and (6) the Senate chairperson of the 183
joint standing committee of the General Assembly having cognizance 184
of matters relating to consumer protection, or one appointed by such 185
chairperson. All appointed members shall have professional 186
experience or academic qualifications in matters pertaining to 187
automated systems, artificial intelligence, artificial intelligence 188
governance and accountability or other related fields. Additional 189
nonvoting ex-officio members shall include the following officials, or 190
their designees: The Commissioner of Administrative Services, the 191
Chief Data Officer, the executive director of the Freedom of 192
Information Commission, the executive director of the Commission on 193
Women, Children, Seniors, Equity and Opportunity, the Attorney 194
General, the Chief Court Administrator, the Treasurer and the 195
Comptroller. The speaker of the House of Representatives and the 196
president pro tempore of the Senate shall each select a co-chair of the 197
board from among the members of the board. 198
(d) All initial appointments to the board shall be made not later than 199
September 1, 2023. The terms of the appointed members shall be 200
coterminous with the terms of the appointing authority for each 201
member. Any vacancy shall be filled by the appointing authority. Any 202
vacancy occurring other than by expiration of a term shall be filled for 203
the balance of the unexpired term. A member of the board may serve 204
more than one term. The co-chairs shall jointly schedule the first 205
meeting of the board, which shall be held not later than October 1, 206
2023. 207
(e) The administrative staff of the joint standing committee of the 208
General Assembly having cognizance of matters relating to consumer 209 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
8 of 18
protection shall serve as administrative staff of the board. 210
(f) The board shall have the following powers and duties: (1) To 211
advise state agencies concerning artificial intelligence and automated 212
systems policy, including, but not limited to, best practices for the use 213
of artificial intelligence and automated systems; (2) to perform the 214
duties set forth in subsections (f) and (g) of section 1 of this act; (3) to 215
issue reports and recommendations to the General Assembly in 216
accordance with section 11-4a of the general statutes; (4) upon the 217
request of at least two members of the board, to request that any state 218
agency data officer or state agency head appear before the board to 219
answer questions; (5) to request from any state agency such assistance 220
and data as necessary and available to carry out the purposes of this 221
section; (6) to make recommendations to the legislative leaders 222
concerning artificial intelligence and automated systems policy; and (7) 223
to establish bylaws to govern the board's procedures. 224
(g) The board shall meet at least twice a year and may meet at such 225
other times as deemed necessary by the co-chairs of the board jointly 226
or by a majority of the members of the board. 227
(h) The board shall be subject to the Freedom of Information Act, as 228
defined in section 1-200 of the general statutes. 229
(i) No provision of this section shall be construed to: (1) Require 230
disclosure of any trade secret; (2) abrogate any work product 231
protection; or (3) restrict the board's or any state agency's ability to (A) 232
conduct any internal research to develop, improve or repair any 233
product, service or technology, (B) prevent, detect, protect against or 234
respond to, or investigate, report or prosecute any person responsible 235
for, any security incident, identity theft, fraud, harassment, malicious 236
or deceptive activity or illegal activity, or (C) preserve the integrity or 237
security of any system. 238
Sec. 3. (NEW) (Effective July 1, 2023) (a) As used in this section: 239
(1) "Artificial Intelligence Implementation Officer" means the 240 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
9 of 18
employee designated pursuant to subsection (b) of this section; 241
(2) "Automated system" has the same meaning as provided in 242
section 1 of this act; 243
(3) "Automated systems procedures" has the same meaning as 244
provided in section 1 of this act; 245
(4) "State agency" has the same meaning as provided in section 1 of 246
this act; and 247
(5) "Trade secret" has the same meaning as provided in section 35-51 248
of the general statutes. 249
(b) Not later than October 1, 2023, the Commissioner of 250
Administrative Services shall designate an employee of the 251
Department of Administrative Services to serve as the Artificial 252
Intelligence Implementation Officer. Such employee shall have: (1) 253
Extensive knowledge concerning automated systems and artificial 254
intelligence analysis, governance, principles, practices, technology, 255
terminology and trends; and (2) experience in administration, 256
planning, policy development, project management and service 257
coordination. 258
(c) The Artificial Intelligence Implementation Officer shall be 259
responsible for performing said officer's duties under this section and 260
section 4 of this act. The Commissioner of Administrative Services may 261
contract with a third party, if the commissioner deems it necessary, to 262
assist the Artificial Intelligence Implementation Officer in performing 263
said officer's duties under this section and section 4 of this act. 264
(d) Any state agency that intends to develop, procure or utilize any 265
automated system on or after January 1, 2024, shall provide to the 266
Artificial Intelligence Implementation Officer, in a form and manner 267
prescribed by said officer, at least sixty days' advance written notice 268
disclosing that such state agency intends to develop, procure or utilize 269
such automated system. 270 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
10 of 18
(e) Not later than ninety days after the Artificial Intelligence 271
Implementation Officer receives any notice submitted pursuant to 272
subsection (d) of this section, said officer may review such notice, and 273
any available documentation concerning the operation of the 274
automated system that is the subject of such notice and any related 275
safeguards, to determine whether developing, procuring or utilizing 276
such automated system would satisfy the requirements established in 277
the automated systems procedures. If the Artificial Intelligence 278
Implementation Officer does not make any determination during such 279
ninety-day period, the state agency that submitted such notice may 280
develop, procure or utilize such automated system. 281
(f) On and after July 1, 2025, the Artificial Intelligence 282
Implementation Officer: 283
(1) May, in said officer's discretion, periodically reevaluate any 284
automated system that is developed, procured or utilized by any state 285
agency to ensure that such automated system satisfies the 286
requirements established in the automated systems procedures; 287
(2) Shall, at least biennially, reevaluate any automated system that is 288
developed, procured or utilized by any state agency if said officer, in 289
said officer's discretion, determines that such automated system poses 290
any significant risk; and 291
(3) May take any action not set forth in subdivision (1) or (2) of this 292
subsection that said officer, in said officer's discretion, may deem 293
appropriate to carry out the purposes of this subsection. 294
(g) If the Artificial Intelligence Implementation Officer determines 295
that any automated system that is developed, procured or utilized by 296
any state agency does not satisfy the requirements established in the 297
automated systems procedures, said officer shall direct such state 298
agency to immediately cease development, procurement or utilization 299
of such automated system. 300
(h) The Artificial Intelligence Implementation Officer shall be 301 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
11 of 18
subject to the Freedom of Information Act, as defined in section 1-200 302
of the general statutes. 303
(i) No provision of this section shall be construed to: (1) Require 304
disclosure of any trade secret; (2) abrogate any work product 305
protection; or (3) restrict the Artificial Intelligence Implementation 306
Officer's or any state agency's ability to (A) conduct any internal 307
research to develop, improve or repair any product, service or 308
technology, (B) prevent, detect, protect against or respond to, or 309
investigate, report or prosecute any person responsible for, any 310
security incident, identity theft, fraud, harassment, malicious or 311
deceptive activity or illegal activity, or (C) preserve the integrity or 312
security of any system. 313
Sec. 4. (Effective July 1, 2023) (a) As used in this section: 314
(1) "Artificial Intelligence Implementation Officer" has the same 315
meaning as provided in section 3 of this act; 316
(2) "Automated decision support system" has the same meaning as 317
provided in section 1 of this act; 318
(3) "Automated final decision system" has the same meaning as 319
provided in section 1 of this act; 320
(4) "Automated system" has the same meaning as provided in 321
section 1 of this act; 322
(5) "Critical decision" has the same meaning as provided in section 1 323
of this act; 324
(6) "State agency" has the same meaning as provided in section 1 of 325
this act; and 326
(7) "Trade secret" has the same meaning as provided in section 35-51 327
of the general statutes. 328
(b) Not later than December 31, 2023, the Artificial Intelligence 329 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
12 of 18
Implementation Officer shall inventory all automated systems that are 330
in use by state agencies for critical decisions. Such inventory shall 331
include the following information for each such automated system: 332
(1) The name of such automated system and the vendor, if any, that 333
provided such automated system; and 334
(2) A description of the general capabilities of such automated 335
system, including, but not limited to: 336
(A) Any reasonably foreseeable capability of such automated system 337
that is outside of any state agency's intended use of such automated 338
system; 339
(B) Whether such automated system was used, or may be used, to 340
independently make, inform or materially support a conclusion, 341
decision or judgment and the resulting impact on residents of this 342
state; 343
(C) Each type of data input that was used by such automated 344
system, how such inputted data was collected, generated or processed 345
and the type or types of data such automated system generated or is 346
reasonably likely to generate; 347
(D) Whether such automated system (i) discriminated against any 348
individual or group of individuals in violation of state or federal law, 349
or (ii) disproportionately and unlawfully impacted any individual or 350
group of individuals on the basis of any actual or perceived 351
differentiating characteristic, including, but not limited to, age, genetic 352
information, color, ethnicity, race, creed, religion, national origin, 353
ancestry, sex, gender identity or expression, sexual orientation, marital 354
status, familial status, pregnancy, veteran status, disability or lawful 355
source of income; 356
(E) A description of the purpose and intended use of such 357
automated system, including, but not limited to, (i) which decision or 358
decisions such automated system was used to make, inform or 359 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
13 of 18
materially support, (ii) whether such automated system is an 360
automated final decision system or automated decision support 361
system, and (iii) the benefit or benefits such automated system was 362
purported to confer and any data or research necessary to determine 363
whether such automated system conferred such purported benefit or 364
benefits; and 365
(F) How the data used or generated by such automated system was 366
processed and stored, whether the state agency or agencies that 367
developed, procured or utilized such automated system intend to 368
share access to such automated system or data with any other person, 369
the name of such person and why such state agency or agencies intend 370
to share such access or data with such person. 371
(c) The Artificial Intelligence Implementation Officer shall, as part of 372
the inventory performed pursuant to subsection (b) of this section, 373
determine whether any automated system included in such inventory: 374
(1) Infringed any legal right of any resident of this state; and 375
(2) Was publicly disclosed under the Freedom of Information Act, as 376
defined in section 1-200 of the general statutes, in an appropriately 377
transparent manner. 378
(d) No provision of this section shall be construed to: (1) Require 379
disclosure of any trade secret; (2) abrogate any work product 380
protection; or (3) restrict the Artificial Intelligence Implementation 381
Officer's or any state agency's ability to (A) conduct any internal 382
research to develop, improve or repair any product, service or 383
technology, (B) prevent, detect, protect against or respond to, or 384
investigate, report or prosecute any person responsible for, any 385
security incident, identity theft, fraud, harassment, malicious or 386
deceptive activity or illegal activity, or (C) preserve the integrity or 387
security of any system. 388
(e) Not later than December 31, 2024, the Artificial Intelligence 389
Implementation Officer shall prepare and submit a report, in 390 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
14 of 18
accordance with section 11-4a of the general statutes, to the joint 391
standing committee of the General Assembly having cognizance of 392
matters relating to consumer protection. Such report shall contain the 393
inventory prepared pursuant to subsection (b) of this section. 394
Sec. 5. (NEW) (Effective July 1, 2023) Notwithstanding any provision 395
of the general statutes, no state contracting agency shall enter into any 396
contract with a business on or after July 1, 2023, unless such contract 397
contains a provision requiring the business to comply with all 398
applicable provisions of sections 42-515 to 42-525, inclusive, of the 399
general statutes. For the purposes of this section, "business", "contract" 400
and "state contracting agency" have the same meanings as provided in 401
section 4e-1 of the general statutes. 402
Sec. 6. Subsection (a) of section 42-517 of the general statutes is 403
repealed and the following is substituted in lieu thereof (Effective July 404
1, 2023): 405
(a) The provisions of sections 42-515 to 42-525, inclusive, do not 406
apply to any: (1) Body, authority, board, bureau, commission, district 407
or agency of this state or of any political subdivision of this state; (2) 408
nonprofit organization; (3) institution of higher education; (4) national 409
securities association that is registered under 15 USC 78o-3 of the 410
Securities Exchange Act of 1934, as amended from time to time; (5) 411
financial institution or data subject to Title V of the Gramm-Leach-412
Bliley Act, 15 USC 6801 et seq.; [or] (6) covered entity or business 413
associate, as defined in 45 CFR 160.103; or (7) air carrier, as defined in 414
49 USC 40102, as amended from time to time, and regulated under the 415
Federal Aviation Act of 1958, 49 USC 40101 et seq., and the Airline 416
Deregulation Act, 49 USC 41713, as said acts may be amended from 417
time to time. 418
Sec. 7. Subsection (a) of section 42-520 of the general statutes is 419
repealed and the following is substituted in lieu thereof (Effective July 420
1, 2023): 421 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
15 of 18
(a) A controller shall: (1) Limit the collection of personal data to 422
what is adequate, relevant and reasonably necessary in relation to the 423
purposes for which such data is processed, as disclosed to the 424
consumer; (2) except as otherwise provided in sections 42-515 to 42-425
525, inclusive, not process personal data for purposes that are neither 426
reasonably necessary to, nor compatible with, the disclosed purposes 427
for which such personal data is processed, as disclosed to the 428
consumer, unless the controller obtains the consumer's consent; (3) 429
establish, implement and maintain reasonable administrative, technical 430
and physical data security practices to protect the confidentiality, 431
integrity and accessibility of personal data appropriate to the volume 432
and nature of the personal data at issue; (4) not process sensitive data 433
concerning a consumer without obtaining the consumer's consent, or, 434
in the case of the processing of sensitive data concerning a known 435
child, without processing such data in accordance with COPPA; (5) not 436
process personal data in violation of the laws of this state and federal 437
laws that prohibit unlawful discrimination against consumers; (6) 438
provide an effective mechanism for a consumer to revoke the 439
consumer's consent under this section that is at least as easy as the 440
mechanism by which the consumer provided the consumer's consent 441
and, upon revocation of such consent, cease to process the data as soon 442
as practicable, but not later than fifteen days after the receipt of such 443
request; and (7) not process the personal data of a consumer for 444
purposes of targeted advertising, or sell the consumer's personal data 445
without the consumer's consent, under circumstances where a 446
controller has actual knowledge, [and] or wilfully disregards, that the 447
consumer is at least thirteen years of age but younger than sixteen 448
years of age. A controller shall not discriminate against a consumer for 449
exercising any of the consumer rights contained in sections 42-515 to 450
42-525, inclusive, including denying goods or services, charging 451
different prices or rates for goods or services or providing a different 452
level of quality of goods or services to the consumer. 453
Sec. 8. (Effective from passage) (a) There is established a task force to 454
study artificial intelligence. The task force shall (1) develop, and make 455 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
16 of 18
recommendations concerning adoption of, an artificial intelligence bill 456
of rights based on the "Blueprint for an AI Bill of Rights" published by 457
the White House Office of Science and Technology Policy, and (2) 458
study the feasibility of establishing, and make recommendations 459
concerning the establishment of, a department of artificial intelligence 460
enablement to assist state agencies and municipalities with ethically 461
implementing artificial intelligence technologies. 462
(b) The task force shall consist of the following members: 463
(1) Two appointed by the speaker of the House of Representatives; 464
(2) Two appointed by the president pro tempore of the Senate; 465
(3) One appointed by the majority leader of the House of 466
Representatives; 467
(4) One appointed by the majority leader of the Senate; 468
(5) One appointed by the minority leader of the House of 469
Representatives; 470
(6) One appointed by the minority leader of the Senate; 471
(7) The Commissioner of Administrative Services, or the 472
commissioner's designee; and 473
(8) Two appointed by the Governor. 474
(c) Any member of the task force appointed under subdivision (1), 475
(2), (3), (4), (5) or (6) of subsection (b) of this section may be a member 476
of the General Assembly. 477
(d) All initial appointments to the task force shall be made not later 478
than thirty days after the effective date of this section. Any vacancy 479
shall be filled by the appointing authority. 480
(e) The speaker of the House of Representatives and the president 481 Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
17 of 18
pro tempore of the Senate shall select the chairpersons of the task force 482
from among the members of the task force. Such chairpersons shall 483
schedule the first meeting of the task force, which shall be held not 484
later than sixty days after the effective date of this section. 485
(f) The administrative staff of the joint standing committee of the 486
General Assembly having cognizance of matters relating to consumer 487
protection shall serve as administrative staff of the task force. 488
(g) Not later than January 1, 2024, the task force shall submit a 489
report on its findings and recommendations to the joint standing 490
committee of the General Assembly having cognizance of matters 491
relating to consumer protection, in accordance with the provisions of 492
section 11-4a of the general statutes. The task force shall terminate on 493
the date that it submits such report or January 1, 2024, whichever is 494
later. 495
This act shall take effect as follows and shall amend the following
sections:
Section 1 July 1, 2023 New section
Sec. 2 July 1, 2023 New section
Sec. 3 July 1, 2023 New section
Sec. 4 July 1, 2023 New section
Sec. 5 July 1, 2023 New section
Sec. 6 July 1, 2023 42-517(a)
Sec. 7 July 1, 2023 42-520(a)
Sec. 8 from passage New section
Statement of Legislative Commissioners:
In Section 1(c), "said secretary" was substituted for "the commissioner"
for accuracy; in Section 1(d)(3), "disproportionately and unlawfully"
was substituted for "unlawfully and disproportionately" for internal
consistency; Section 1(d)(10) was redrafted for clarity; in Section 2(f)(3),
"to the General Assembly" was added after "recommendations" for
clarity; in Section 2(f)(4), "that" was added after "request" for clarity; in
Section 2(g), "jointly" was moved from after "as" to after "board" for
clarity; and in Section 8(a)(2), "to ethically implement" was changed to
"with ethically implementing" for clarity. Substitute Bill No. 1103
LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2023SB-01103-
R01-SB.docx }
18 of 18
GL Joint Favorable Subst.