Artificial intelligence and data privacy laws take effect in Connecticut

New regulations in the fields of artificial intelligence and data privacy are gradually coming into effect in Connecticut. With the Connecticut Artificial Intelligence Accountability and Transparency Act and the expansion of the data privacy law, AI chatbots, employment decisions, and consumer rights are being reshaped.

Scope of the artificial intelligence law

The comprehensive AI law passed in Connecticut, known as the CART Act, targets areas such as AI chatbots, youth social media use, hiring decisions, and workforce development. Certain provisions of the law had already taken effect earlier.

As of October, AI disclosure requirements for subscriptions, new whistleblower protections for individuals involved in developing large AI models, and definitions aimed at standardizing AI technology are coming into play.

Data privacy and consumer rights

The data privacy law focuses on consumer protections by establishing the rights citizens hold against controversial AI uses, such as facial recognition. The Department of Consumer Protection is mandated to establish a system to track data brokers.

Under the new regulation, the sale of residents' genetic data is prohibited, and restrictions are introduced regarding the use of facial recognition technology and surveillance pricing.

New obligations for employers

The biggest changes for employers come with the CART Act. Companies are now required to establish a framework explaining when and how artificial intelligence is used in employment decisions.

The use of automated employment decision-making will not shield companies from allegations of discrimination. Companies utilizing such technologies will be required to inform applicants and employees in clear language.

Protection of youth and chatbot rules

The law includes significant regulations regarding the online safety and social media use of minors. Parental controls are enhanced while default settings limiting notifications are introduced.

AI companion chatbots are required to disclose that they are not human. Additionally, regulations concerning mental health protections and protocols for detecting suicide and self-harm are planned.

Implementation timeline and process

The artificial intelligence and data privacy laws are being implemented through a phased rollout schedule, with certain provisions taking effect at later dates. The majority of enforcement authority rests with the Office of the Attorney General.

The state legislature is preparing to evaluate new regulations in the coming months to address emerging future uses of artificial intelligence.