Connecticut
AI behavior law: bot and agent disclosure, crawler and training-data rules, automated-agent transactions, and algorithmic decision-making.
Summary
Connecticut enacted one of the most comprehensive state AI-behavior laws in the country when Governor Lamont signed Senate Bill 5 (Public Act 26-15, the 'CART Act') on May 27, 2026. The CART Act creates interlocking obligations for AI companion chatbot providers (disclosure + safety protocols, eff. January 1, 2027), employers using automated employment-decision tools (notice + non-discrimination, eff. October 1, 2027), frontier-model developers (whistleblower channels, eff. October 1, 2026), and generative-AI content providers (synthetic-media provenance/watermarking, eff. October 1, 2026). Separately, the Connecticut Data Privacy Act (Conn. Gen. Stat. §§ 42-515 et seq.), as amended most recently by SB 1295 (2025, eff. July 1, 2026), requires controllers to honor consumer opt-outs from profiling for automated decisions with legal or similarly significant effects and to conduct data-protection impact assessments on algorithmic processing. Connecticut's 2025 session AI omnibus bill (SB 2) — which would have added high-risk-AI risk assessments and election-deepfake disclosure — passed the Senate but stalled in the House after a gubernatorial veto threat and died without enactment.
Enacted law
Government obligations
| Instrument | Category | Effective | Source |
|---|---|---|---|
| Unlawful Dissemination of Synthetic Intimate Images (Conn. Gen. Stat. § 53a-189c (as amended by Pub. Act 25-168, 2025 Gen. Assemb.)) | Bot / agent disclosure | 2025-10-01 | Connecticut Attorney General (portal.ct.gov); Connecticut Criminal Law Blog (connecticutcriminallawyerblog.com) |
Private sector obligations
| Instrument | Category | Effective | Source |
|---|---|---|---|
| Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act) (2026 Conn. Pub. Acts 26-15 (Sub. S.B. 5, 2026 Gen. Assemb., Reg. Sess.)) | Bot / agent disclosure, Agents acting on behalf of users, Automated decision-making | 2026-10-01 | Connecticut General Assembly (cga.ct.gov); Holland & Knight (hklaw.com); Morrison Foerster (mofo.com); DLA Piper (dlapiper.com); Future of Privacy Forum (fpf.org) |
| Connecticut Data Privacy Act (CTDPA) — Automated Decision-Making Opt-Out (Conn. Gen. Stat. §§ 42-515 to 42-525 (S.B. 6, 2022), as amended by S.B. 1295 (2025 Gen. Assemb.)) | Automated decision-making | 2023-07-01 | Connecticut Attorney General (portal.ct.gov); Hunton Andrews Kurth (hunton.com); Future of Privacy Forum (fpf.org) |
| Unlawful Dissemination of Synthetic Intimate Images (Conn. Gen. Stat. § 53a-189c (as amended by Pub. Act 25-168, 2025 Gen. Assemb.)) | Bot / agent disclosure | 2025-10-01 | Connecticut Attorney General (portal.ct.gov); Connecticut Criminal Law Blog (connecticutcriminallawyerblog.com) |
Drafted & in discussion
| Instrument | Status | Applies to | Category | Source |
|---|---|---|---|---|
| Connecticut Artificial Intelligence Act (SB 2, 2025) — Did Not Enact (S.B. 2, 2025 Gen. Assemb., Reg. Sess. (Conn. 2025) [not enacted]) | Dead / withdrawn | Both | Bot / agent disclosure, Automated decision-making | Connecticut Mirror (ctmirror.org); Future of Privacy Forum (fpf.org); LegiScan (legiscan.com) |
Automated-access legality
Carried forward from the crawler-law index. Governs whether automated clients may access public websites in this jurisdiction.
| Dimension | Value |
|---|---|
| Authorization test | without permission |
| Public-page carve-out | yes |
| Terms-of-service browsewrap enforceable | notice dependent |
| Terms-of-service clickwrap enforceable | yes |
| Copyright exception model | fair use |
| Text and data mining — commercial status | unsettled |
| Text and data mining — opt-out mechanism | none |
| robots.txt legal weight | non binding notice |
| AI training-specific law | none |
| Privacy regime | CTDPA |
| Trespass to chattels | requires harm |
Last reviewed: 2026-05-23. Confidence: high. Not legal advice.