Technology

This bill prohibits employers from using electronic surveillance devices like audio recorders or closed-circuit cameras in employee areas designed for comfort or safety, such as restrooms, locker rooms, and lounges. It creates a specific exception allowing third-party vendors to operate surveillance at self-service kiosks in these areas, provided the cameras do not record sound and only monitor the checkout area and product display zones. The bill also restricts employers from requesting access to this video footage except when a theft is reported by the vendor, and it establishes fines and potential jail time for violations of these rules.

SB 4 establishes a data broker registration system in Connecticut, requiring businesses that sell or license personal data to register with the Department of Consumer Protection by October 1, 2026. It directly affects data brokers (businesses collecting and selling personal data) and Connecticut consumers, who gain new rights to request data deletion. Key provisions include mandatory $600 annual registration fees, a requirement for data brokers to provide an "accessible deletion mechanism" for consumer requests, and definitions clarifying terms like "brokered personal data." The law aims to increase transparency and control over personal data handling while imposing specific compliance obligations on data brokers.

SB 5 (AN ACT CONCERNING ONLINE SAFETY) requires subscription-based AI providers (e.g., companies offering AI tools via paid plans) to give consumers clear, written disclosures about subscription terms before signing or renewing. This includes detailing any usage limits, such as restrictions based on user behavior or changes to prior terms. The bill also establishes new safety rules for "frontier developers" of advanced AI systems ("foundation models"), defining "catastrophic risk" as scenarios where AI could cause mass harm (e.g., aiding weapon creation or severe physical injury) and mandating risk assessments by covered employees. It does not ban specific AI uses but sets transparency and safety protocols for high-risk systems. The law takes effect October 1, 2026.