Connecticut Public Act 26-15 / SB 5 (Online Safety and AI Provisions): Disclosure Requirements
Notices and disclosures the law requires to be provided to consumers, employees, or downstream parties.
Disclosure requirements
- transparency→ developerPublic Act 26-100 § 46 (revising Public Act 26-15 / Sub. SB 5)
On and after October 1, 2026, a subscription-based provider that creates, codes, or otherwise produces a generative AI system with more than 1,000,000 monthly users and public accessibility to consumers for personal use must provide the generative-AI subscription disclosure required by Public Act 26-100 Section 46 (which replaced the original Public Act 26-15 subscription provisions). The duty is enforced solely by the Attorney General as a Connecticut Unfair Trade Practices Act (CUTPA) violation, with no private right of action.
Timing: from_2026-10-01
- disclosure→ deployerPublic Act 26-15 (Sub. SB 5, An Act Concerning Online Safety)
On and after October 1, 2026, an employer that conducts a layoff substantially caused or contributed to by an artificial intelligence system must provide the AI-related layoff notice required by Public Act 26-15. This is one of the earliest-effective private-sector duties in the Connecticut package and applies alongside the state's existing separation and mass-layoff notice obligations.
Timing: from_2026-10-01
- disclosure→ deployerPublic Act 26-15 (Sub. SB 5) — AEDT provisions
For deployments of automated employment-related decision technology (AEDT) on or after October 1, 2027, a deployer must provide the Act's interactive disclosures and pre-decision written notice to affected individuals. The Attorney General may issue a 60-day cure notice for AEDT violations occurring through December 31, 2027, so the earliest AEDT-specific compliance work is a 2027 program task rather than a 2026 one.
Timing: from_2027-10-01
We may receive referral commissions from recommended compliance tools. Recommendations are based on product fit and not on commission size. Links marked “partner link” include a tracked redirect.