Attorney General Tong Advises Connecticut Consumers and Businesses of Rights and Requirements Related to New and Updated Privacy Laws

09/16/2026

(Hartford, CT) – Attorney General William Tong today advises Connecticut consumers that beginning October 1, 2026, they will enjoy additional privacy rights under newly-enacted laws related to artificial intelligence, Facial Recognition Technology (FRT), genetic data privacy, surveillance pricing, and data brokers, as well as through recent amendments to the Connecticut Data Privacy Act (“CTDPA”).

Connecticut enacted Public Act 26-64 (“SB4”) in May of this year to amend the CTDPA, as well as to introduce new laws that, amongst other things, set forth additional requirements for businesses and rights for consumers related to data privacy. New rights and requirements under SB4 include:

• Limitations on surveillance pricing as well as disclosure requirements for businesses using personal data in price setting;
• Limitations on and disclosure requirements for the use of FRT, including requiring that companies post clearly legible signage alerting consumers that FRT is in use on the premises and providing them with a conspicuous hyperlink or quick response code directing them to the company’s facial recognition technology policy;
• Limitations and consent obligations for Direct-to-Consumer Testing Companies that are collecting consumer’s genetic data, including providing consumers with a property right and exclusive control over the collection, use, retention, maintenance, disclosure, and destruction of the sample and result;
• Further limitations on what is considered publicly available information as well as expanded consumer data deletion rights related to consumer profiles generated from publicly available information;
• A ban on the sale of consumer’s precise geolocation data; and
• The creation of a data broker registry which requires data brokers to register with the Connecticut Department of Consumer Protection by January 1, 2027.

Connecticut also enacted Public Act 26-15—or SB5—in May which established the Connecticut Artificial Intelligence Responsibility and Transparency Act (“CART Act”) —one of the most comprehensive Artificial Intelligence (“AI”) laws in the country. The CART Act sets forth requirements for businesses and rights for consumers related to the use of Artificial Intelligence technology. New rights and requirements under the CART Act include:

Chatbots and Kids

• Companies that offer chatbots to children must put a protocol in place to detect and address chats indicating a risk of self-harm;
• Chatbot platforms must offer parental controls;
• Chatbots are prohibited from sending harmful communications to children;
• Chatbots cannot encourage children towards physical violence, substance abuse, or disordered eating; and
• Companies that offer chatbots to children cannot allow their chatbots to engage in romantic or sexual interactions with children or use manipulative engagement mechanics to keep them using the platform.

AI and Employment

• Employers must provide written notice when using AI to make a decision that impacts terms, privileges, or conditions of employment; and
• Employers are prohibited from using AI to discriminate against employees, and any such discrimination is considered employment discrimination that is also violative of the Connecticut Fair Employment Practices Act.

“Big Tech is saying it themselves—they are in a warp-speed arms race to deploy ever more powerful, profitable and capable technology. They know what they are doing is reckless and potentially catastrophic and they aren’t stopping. Connecticut is doing everything we can—through legislation and litigation—to protect our online privacy and safety. These laws going into effect are significant steps to protect our kids from dangerous chatbots, safeguard our privacy, and prevent unfair pricing practices. We know that Trump’s Washington is unable and unwilling to do this work, so it’s going to fall to states like Connecticut to keep updating and strengthening our laws to keep pace with evolving technology and threats,” said Attorney General Tong.

Consumers should note that not all Connecticut businesses are covered by the CTDPA. The CTDPA includes specific revenue thresholds and exempts certain industries regulated by other privacy frameworks.

For more information about the CTDPA, visit the Attorney General’s FAQ page here. For the full text of SB4 visit this link. For the full text of the CART Act visit this link.

Twitter: @AGWilliamTong

Facebook: CT Attorney General

Media Contact:

Elizabeth Benton
elizabeth.benton@ct.gov

Consumer Inquiries:

860-808-5318
attorney.general@ct.gov

Legal Disclaimer:

EIN Presswire provides this news content "as is" without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.