惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

L
LangChain Blog
博客园 - 司徒正美
美团技术团队
WordPress大学
WordPress大学
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
人人都是产品经理
人人都是产品经理
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
T
Troy Hunt's Blog
S
Schneier on Security
T
The Exploit Database - CXSecurity.com
P
Proofpoint News Feed
云风的 BLOG
云风的 BLOG
Engineering at Meta
Engineering at Meta
Cisco Talos Blog
Cisco Talos Blog
T
Tor Project blog
B
Blog
NISL@THU
NISL@THU
月光博客
月光博客
博客园 - 【当耐特】
AWS News Blog
AWS News Blog
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
腾讯CDC
L
Lohrmann on Cybersecurity
The Cloudflare Blog
L
LINUX DO - 最新话题
S
Security @ Cisco Blogs
S
Secure Thoughts
Spread Privacy
Spread Privacy
有赞技术团队
有赞技术团队
The Last Watchdog
The Last Watchdog
Project Zero
Project Zero
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
Vercel News
Vercel News
H
Hacker News: Front Page
S
SegmentFault 最新的问题
Schneier on Security
Schneier on Security
aimingoo的专栏
aimingoo的专栏
P
Privacy & Cybersecurity Law Blog
博客园 - 三生石上(FineUI控件)
Forbes - Security
Forbes - Security
C
CXSECURITY Database RSS Feed - CXSecurity.com
I
InfoQ
T
Tailwind CSS Blog
Application and Cybersecurity Blog
Application and Cybersecurity Blog
G
GRAHAM CLULEY
W
WeLiveSecurity
小众软件
小众软件
Recorded Future
Recorded Future
Cyberwarzone
Cyberwarzone
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org

Privacy & Cybersecurity Law Blog

Louisiana Enacts Comprehensive Consumer Privacy Law China CAC Issues Guidance on Conducting Audits Technology Companies Should Prepare for FTC Enforcement of Take It Down Act HHS Reorganizes Office for Civil Rights Oregon Prohibition on Public Body Disclosures to Data Brokers for Federal Immigration Purposes Now In Effect Connecticut Privacy Law Updates: Data Broker Rules, Geolocation Sale Ban, Surveillance Pricing Restrictions, and Genetic Data Regulations NYDFS Warns of Cybersecurity Risks from Frontier AI Models UK and Australia Announce Memorandum of Understanding on AI Security FTC Announces Settlements With Three Marketing Firms Over Allegations of Deceptive Statements About Active Listening AI-Powered Services Cybersecurity Authorities Issue Joint Guidance on the Adoption of Agentic AI Systems Colorado AI Act Amended and Effective Date Delayed European Commission Releases Draft Guidelines on High-Risk AI Under the EU AI Act Texas AG Announces Lawsuit Against Netflix for Alleged Misrepresentations Regarding User Data UK ICO Recommends Targeted Changes to PECR Rules for Online Advertising California AG Announces Record $12.75M Settlement with GM over CCPA Data Minimization and Purpose Limitation Violations Illinois Department of Human Rights Issues Regulations Governing the Use of AI in Employment Decisions Delta Dental Agrees to $2.25 Million Settlement with NYDFS Over MOVEit Data Breach Response Maryland Enacts First-of-its-Kind Ban on Surveillance Pricing for Grocery Sales UK ICO Publishes Guidance on Storage and Access Technologies CIPL Report Discusses Significant Alignment between GDPR and Global CBPR CalPrivacy Announces the Agenda for its April 30–May 1 Board Meeting CalPrivacy Requests Preliminary Comments on Notices & Disclosures, Employee Data COPPA Rule Amendment Compliance Deadline Approaches House Republicans Introduce Comprehensive Federal Privacy Bill: “SECURE Data Act” Kentucky Classifies Smart TV Data as Sensitive Alabama Becomes 21st State With Comprehensive Consumer Privacy Law CalPrivacy Director Expects CCPA Compliance Audits in 2026 Virginia Bans Sale of Geolocation Data HHS’ Office for Civil Rights Settles HIPAA Investigation of Health Care Software Company New Jersey Enacts New Restrictions on Health Care Facilities’ Use of Patient Data Washington State Enacts Law Regulating AI Companion Chatbots with Private Right of Action Guardrails for Legal AI: What California’s SB 574 Would Require of Attorneys and Arbitrators
Connecticut Signs Comprehensive AI Bill into Law
2026-06-11 · via Privacy & Cybersecurity Law Blog

On May 27, 2026, Connecticut enacted a comprehensive state artificial intelligence law, Substitute Senate Bill No. 5 (Public Act No. 26-15) (the “Act”), establishing several regulatory frameworks that address companion chatbots, frontier model governance, and AI use in employment decisions, among other topics. The effective dates are staggered beginning in October 2026. Key provisions of the Act are described below.

AI Companion Safeguards

Operators must implement protocols to detect and respond to user expressions of self-harm, prevent outputs that encourage harm, and avoid anthropomorphic deception. Operators of AI companions that could reasonably be mistaken for human users must clearly disclose that the user is interacting with AI. This disclosure must be either continuously visible throughout the interaction or provided at defined intervals: at the start of the first interaction during any twenty-four hour period and, during a continuous interaction, at least hourly for minors and every three hours for adults.

The Act also requires operators to implement additional safeguards for users the operator knows or has reason to believe are minors, including preventing certain types of interactions with the AI companion and providing minor users and their parents or legal guardians tools to manage the minor users’ screen time and account settings.

Frontier Model Governance

The Act defines “frontier developer” using a compute-based threshold broadly similar to California’s and covers persons who train or intend to train foundation models using computing power greater than 10^26 integer or floating-point operations. Unlike California’s law, the compute-based threshold is included in the definition of “frontier developer” rather than in a standalone definition of a “frontier model.”

The Act distinguishes between “frontier developers” and “large frontier developers,” imposing baseline whistleblower protections on all frontier developers while reserving more robust governance obligations for large frontier developers (defined as those with more than $500 million in annual gross revenue).

Specifically, all frontier developers are prohibited from retaliating against employees who report risks associated with catastrophic outcomes and must provide clear notice of employee rights under the statute. Large frontier developers must establish formal internal reporting systems by January 1, 2027, including anonymous reporting channels for covered employees, obligations to provide updates on investigations and mitigation actions, and quarterly reporting of such matters to officers and directors.

AI in Employment Decisions

The Act requires employers to disclose when employers or applicants are interacting with automated employment-related decision technologies, unless that fact would be obvious to the reasonable person. In addition, before any such technology may be used to generate any output for the purpose of making (or as a substantial factor in making) an employment-related decision concerning an employee or applicant, employers must provide the employee or applicant with a notice that lets the employee or applicant know that the employer has deployed such technology and includes information about the technology, including the technology’s name and purpose, the nature of the decision, the categories of personal data the technology will process, how such data will be assessed in reaching a decision, the sources of such data, and the employer’s contact information.

Generative AI Provenance

Covered providers (defined as any person who produces a generative AI system with more than 1 million users per month that is publicly accessible to consumers for personal use) must, where commercially and technically feasible, embed metadata or similar signals to allow users to identify AI-generated or materially altered content.

Disclosures for AI Subscriptions

Subscription-based providers are prohibited from entering into or renewing subscriptions for AI technology without first providing consumers with written notice disclosing the key terms and conditions of the subscription and receiving written notice from the consumer that such consumer has accepted the key terms and conditions of the subscription.

Regulatory Sandbox Program and Enforcement

The Act directs the Connecticut Commissioner of Economic and Community Development to develop a plan to establish an AI regulatory sandbox program to allow testing of innovative products or services on a limited basis under reduced regulatory and other legal requirements under Connecticut law.

Enforcement authority rests primarily with the Connecticut Attorney General.