Connecticut AI Law 2026 (SB 5): What It Requires and Compliance Checklist

Updated May 2026. Connecticut SB 5 (the Artificial Intelligence Responsibility and Transparency Act) passed the legislature 131-17 in the House and 32-4 in the Senate. Governor Lamont signed the bill into law in May 2026. Multiple effective dates apply, October 1, 2026, January 1, 2027, and October 1, 2027.

Connecticut's SB 5 passed 131-17 in the House and 32-4 in the Senate. It is not a broad "high-risk AI" framework, it targets three specific areas where AI causes concrete, documented harm: employment decisions, AI companion chatbots (especially for minors), and synthetic media. Each has its own effective date.

TL;DR: Connecticut SB 5 (Artificial Intelligence Responsibility and Transparency Act) passed the legislature 131-17 House, 32-4 Senate in May 2026. Governor Lamont signed it into law in May 2026. Key requirements vary by effective date: (1) October 1, 2026: automated employment decision technology (AEDT) anti-discrimination rules take effect (employer cannot use AI as a defense for discriminatory outcomes); AEDT developer-to-deployer documentation requirements; large-provider synthetic media provenance (1M+ monthly users); frontier model whistleblower protections; (2) January 1, 2027: AI companion chatbot rules apply, hourly bot disclosure, mental health safeguards, child protections; (3) October 1, 2027: deployer-to-employee/applicant pre-decision notices for AEDT, individual data rights, synthetic media provenance marking for all developers. Connecticut AG enforces with 60-day cure period (sunsets December 31, 2027). Private right of action exists for AI companion violations involving minors.

What Connecticut SB 5 Covers

High-Impact AI Systems: What Counts

Connecticut SB 5 focuses specifically on three areas. It is not a comprehensive "high-risk AI" framework covering all consequential decisions, that is the EU AI Act or the failed Colorado 2024 model. SB 5 targets employment automation, AI companion chatbots, and synthetic media provenance.

Automated Employment Decision Technology (AEDT)

SB 5 defines AEDT as any computational process that generates outputs, scores, rankings, recommendations, classifications, that are a "substantial factor" in employment decisions including hiring, promotion, discipline, or termination.

What this captures: resume screening software, candidate ranking tools, performance analytics systems, scheduling algorithms that affect hours or assignments, assessment and testing tools used in hiring.

Developer obligations (effective October 1, 2026): developers of AEDT must provide deployers with compliance documentation, what the system does, what data it uses, how it was tested for bias.

Deployer obligations:

• October 1, 2026: the "AI is not a defense" amendment to Connecticut employment discrimination law takes effect, if AEDT produces a discriminatory outcome, that is not shielded by the fact that a machine made the decision.
• October 1, 2027: disclose to job applicants and employees that AEDT is used, what it does, and what data it considers. For adverse decisions (rejection, termination, discipline), provide written notice explaining AEDT's role and the degree to which it contributed to the outcome. Affected individuals get the right to examine and correct data used by the AEDT.

AI Companion Chatbots (Effective January 1, 2027)

SB 5 covers AI systems that "communicate with individuals in natural language and simulate human conversation." The requirements are specific:

Disclosure: operators must display a clear notice that the service is AI, both at the start of each interaction and at least every hour during ongoing use. This is more aggressive than a one-time disclosure.

Child protections: if a minor could reasonably use the chatbot, operators cannot provide AI companions that:

• Encourage self-harm, suicidal ideation, or substance abuse
• Offer unsupervised mental health services (licensed treatment platforms have an exception)
• Use variable reinforcement schedules to maximize engagement time
• Prioritize user validation over factual accuracy or user safety

Enforcement: Connecticut AG (with 60-day cure for most violations). Minors and their parents can sue directly for violations of the child-protection provisions, actual and punitive damages plus attorney fees, within 3 years.

Synthetic Media Provenance

Two staggered requirements apply depending on provider size:

Large providers (1M+ monthly users), effective October 1, 2026: generative AI providers with more than one million monthly users must embed provenance data (C2PA-compatible) into any audio, image, or video content they generate or materially alter. The data must be resistant to removal or tampering.

All developers, effective October 1, 2027: developers of AI systems capable of generating synthetic digital content, audio, images, text, or video, must ensure the content is marked and detectable as AI-generated. The marking must be:

• Effective and reliable under current technical standards
• Interoperable with detection systems
• Applied at the point of generation, not just at distribution

Exceptions: clearly labeled artistic or satirical content, text-only public interest journalism, standard editing tools that do not generate synthetic media.

Frontier Model Whistleblower Protections (Effective October 1, 2026)

If your company trains frontier AI models (defined by compute thresholds), employees who disclose potential catastrophic risks are protected under Connecticut whistleblower law. Internal reporting protocols are required for large frontier developers. Enforcement: Connecticut Commissioner for Consumer Protection.

WARN Act AI Disclosure (Effective October 1, 2026)

SB 5 amends Connecticut's mini-WARN Act to require an additional disclosure when filing mass layoff notices. Beginning October 1, 2026, any employer filing a WARN notice with the Connecticut Department of Labor must state:

• Whether the layoff is related to the employer's use of AI or other technological change
• The form and manner prescribed by the Connecticut labor commissioner

This applies to employers with 100 or more employees triggering the state's advance notice obligations for mass layoffs or plant closings. Smaller employers below the WARN threshold are not affected.

Practical implication: If your company is planning reductions in force and uses AI systems that contributed to the restructuring decision, this disclosure is required in the WARN filing. Legal and HR teams should add this to their RIF checklists before October 1, 2026.

Compliance Checklist by Deadline

Before October 1, 2026:

• Audit AEDT use, identify any AI tool used as a substantial factor in hiring, promotion, discipline, or termination for Connecticut employees or applicants
• Draft AEDT disclosure, prepare notice language for job applicants and employees describing the AEDT's use, purpose, and data categories
• Request developer compliance documentation, from every AEDT vendor, request their compliance package
• Update RIF/WARN checklist: add AI-technology-change disclosure field to any WARN notice template

Before January 1, 2027:

• Audit AI companion chatbots, identify any conversational AI your business operates that Connecticut residents can access
• Implement hourly bot-disclosure, update the chatbot to display "This is an AI" at interaction start and every hour
• Add minor-user guardrails, if minors could use the chatbot, review it against the child-protection prohibitions in SB 5

Before October 1, 2027:

• Implement AEDT pre-decision notices, for adverse employment decisions, prepare written notice templates that explain AEDT's role and degree of contribution
• Add data correction rights, process for affected individuals to examine and correct AEDT data
• Implement synthetic media marking, if you develop AI systems that generate audio, images, text, or video, implement provenance marking

Timeline

Effective Dates Summary

Governor Lamont signed SB 5 into law in May 2026. The multiple effective dates mean different windows for different obligations, see the compliance checklist above and confirm the latest implementation guidance at the Connecticut General Assembly bill tracker (cga.ct.gov).

Who Is Covered: Scope and Applicability

Connecticut SB 5 applies broadly to entities that develop or deploy the covered AI systems for Connecticut residents, not just Connecticut-based companies. If your business operates in another state but employs Connecticut residents, uses AEDT in hiring decisions that affect Connecticut applicants, or operates an AI companion chatbot accessible to Connecticut users, you are in scope.

The law follows the now-standard deployer/developer split:

Developers build the AI systems and must provide deployers with compliance documentation. This includes bias testing results, data sources used to train the system, known limitations, and intended deployment contexts.

Deployers are the businesses that put the AI systems to use in employment, companion chatbot, or synthetic media contexts. Deployers carry the disclosure and notice obligations to affected individuals.

For small teams, the practical implication is that buying a third-party AEDT product does not transfer full compliance responsibility to the vendor. You, the deployer, are responsible for the disclosures, the adverse action notices, and ensuring the AEDT vendor has provided you adequate compliance documentation.

How Connecticut SB 5 Compares to Other State AI Laws

Connecticut SB 5 occupies a distinct position among 2026 state AI laws:

Connecticut's three-domain structure, employment, AI companions, synthetic media, reflects a pragmatic legislative approach: address the harms that are clearly documented and litigated rather than attempting a comprehensive framework. The practical effect is that SB 5 is more immediately relevant to a wider range of small businesses than a broad high-risk AI law would be, because most small teams are either employers, chatbot operators, or content creators.

Practical Guidance for Small Teams

If you use any AI in hiring: The October 1, 2026 deadline is the immediate priority. Review every tool involved in screening resumes, scoring assessments, or ranking candidates. Procurement decisions made now should include SB 5 compliance documentation from the vendor as a condition of purchase.

If you operate a chatbot with any conversational AI features: Determine whether Connecticut residents can access it. If yes, the January 1, 2027 deadline applies. Start the technical work to add bot-disclosure notices now, retrofitting disclosure into a production chatbot takes more time than most teams expect.

If you generate AI content at scale: The synthetic media provisions take effect in phases. If your platform has fewer than one million monthly users, October 2027 is your deadline. Use the intervening time to evaluate C2PA-compatible tooling and implement content-at-source provenance marking.

If you have no current exposure: Connecticut SB 5 still affects your vendor relationships. Any AEDT vendor, AI companion provider, or generative AI tool you use must be able to provide the compliance documentation SB 5 requires, bias testing results, data sources, limitation disclosures. Add these to your standard AI vendor due diligence questionnaire now.

The 60-Day Cure Period and What It Means

The Connecticut AG enforcement framework includes a 60-day cure period before the AG can file an enforcement action for AEDT violations. This is a significant procedural protection, it means your first violation is effectively a warning if you act promptly.

The cure period does not apply to AI companion violations involving minors. Those carry a private right of action, a parent or guardian can file directly without going through the AG, and there is no cure period in the minor-protection context.

Practically: the cure period rewards teams that have compliance documentation ready. If you receive an AG inquiry, being able to produce bias testing reports, disclosure notices, and vendor compliance packages within 60 days is what resolves the inquiry without litigation.

Penalties

Enforcement is by the Connecticut Attorney General. For AEDT violations and most SB 5 provisions, the AG must give a 60-day written notice to cure before filing. Civil penalties are up to $5,000 per violation. For AI companion violations involving a minor, a private right of action applies: parents or guardians can file directly without going through the AG, and there is no 60-day cure period.

Sources: Connecticut SB 5 (2026 Legislative Session), CT Mirror, DLA Piper SB 5 analysis, Shipman & Goodwin employment law analysis.

Related Reading

• EU AI Act compliance guide for small teams
• AI vendor due diligence checklist 2026
• EU AI Act August 2026 compliance checklist
• Colorado AI Act enforcement, what changed
• Texas TRAIGA compliance checklist 2026
• AI hiring tool compliance 2026, NYC, Illinois, Connecticut, Colorado matrix