Connecticut's AI law arrives in four separate waves -- here's what actually changed today

Connecticut's sprawling AI Responsibility and Transparency Act, signed by Gov. Ned Lamont on May 27, didn't take effect all at once. Six distinct provisions of the law -- known as the CART Act, Public Act No. 26-15 -- started applying Oct. 1, 2026: AI subscription-cancellation disclosures, a reporting duty for large frontier-model developers, a clarification to the state's employment-discrimination law, a generative-AI content-provenance requirement, a WARN Act disclosure for AI-driven layoffs, and new AI inventory and procurement rules for state agencies themselves.

The provision most likely to matter to an individual Connecticut resident is the narrowest-sounding one: the CART Act now makes clear that a company's use of automated employment decision technology is not, by itself, a legal defense against a discrimination claim. If an algorithm screens out older applicants or down-ranks resumes in a way that produces a discriminatory effect, the employer can't point to the software as the reason it isn't liable. That's a clarification of existing discrimination law, not a new cause of action -- and it's narrower than it sounds, since Connecticut's fuller automated employment decision technology (AEDT) disclosure regime, the one requiring employers to give workers written notice before using such tools in hiring, promotion, discipline, discharge, renewal, or training decisions, doesn't become operational until Oct. 1, 2027.

The provision with the broadest reach outside Connecticut is also the least publicized: starting Oct. 1, developers of large frontier AI models operating in the state take on new safety-reporting duties, placing Connecticut alongside California's SB 53 among the first states to regulate frontier models themselves rather than only the uses other companies put them to. None of the sourcing reviewed for this piece specifies the exact compute or revenue threshold that defines a "large frontier developer" under the Act -- a gap worth noting rather than guessing past.

Law firms tracking state AI legislation generally describe the CART Act as the most comprehensive enacted so far -- not because any single Connecticut provision goes further than a specific California or Colorado rule, but because it bundles frontier-model safety, employment-AI disclosure, companion-chatbot rules, and state-government AI governance into one statute on one shared implementation clock, rather than scattering them across separate bills with separate deadlines the way most states have. Connecticut didn't write a tougher AI law than its neighbors so much as a more organized one.

A companion law moved on the same Oct. 1 clock, and it's easy to miss because it isn't branded as an AI bill at all. Public Act No. 26-64 expands Connecticut's data-privacy statute alongside the CART Act, and as of today it bans the sale of residents' genetic data outright, restricts how companies can use facial recognition and geolocation data, and curbs so-called surveillance pricing -- setting prices for the same product differently for different people based on data profiling. The two laws share an effective date because they share a premise: most of what makes AI systems risky isn't the model itself, it's the data pipeline feeding it. The Department of Consumer Protection is also required, starting today, to stand up a system to track and regulate data brokers operating in the state.

The provision that has drawn the most outside attention -- rules governing AI companion chatbots, the kind designed to sustain an ongoing relationship with a user -- isn't one of today's six. Those requirements, including a ban on an AI companion claiming to be human, mandatory self-harm detection protocols, and added protections for minors, don't take effect until Jan. 1, 2027. California's own companion-chatbot law, by contrast, is already enforceable and lets an individual user sue directly for damages -- a structural difference Connecticut's version won't share even once it does take effect, since enforcement there runs exclusively through the state Attorney General's office under Connecticut's unfair-trade-practices statute, with penalties capped at $5,000 per violation and no private right of action.

State Sen. James Maroney, D-Milford, the General Law Committee co-chair who shepherded the bill through the legislature, was characteristically blunt about how far today's six provisions actually go.

“This is a start. This is not a finish; this is not a ceiling. This is the floor.” — State Sen. James Maroney (D-Milford), on the CART Act's first effective-date wave

That floor arrived on almost the same day California's governor signed a considerably blunter instrument for a related problem: the state's new "No Robo Bosses" law restricts employers from letting automated systems make termination and discipline decisions without human review, where Connecticut's Oct. 1 provision only clarifies that automation isn't a liability shield once a human has made the call. Two states, within days of each other, reaching for differently shaped tools on the same underlying question -- and in Connecticut's case, three more effective dates still to come before the law is actually all the way in force.