Technology

SB 4 establishes a data broker registration system in Connecticut, requiring businesses that sell or license personal data to register with the Department of Consumer Protection by October 1, 2026. It directly affects data brokers (businesses collecting and selling personal data) and Connecticut consumers, who gain new rights to request data deletion. Key provisions include mandatory $600 annual registration fees, a requirement for data brokers to provide an "accessible deletion mechanism" for consumer requests, and definitions clarifying terms like "brokered personal data." The law aims to increase transparency and control over personal data handling while imposing specific compliance obligations on data brokers.

SB 5 (AN ACT CONCERNING ONLINE SAFETY) requires subscription-based AI providers (e.g., companies offering AI tools via paid plans) to give consumers clear, written disclosures about subscription terms before signing or renewing. This includes detailing any usage limits, such as restrictions based on user behavior or changes to prior terms. The bill also establishes new safety rules for "frontier developers" of advanced AI systems ("foundation models"), defining "catastrophic risk" as scenarios where AI could cause mass harm (e.g., aiding weapon creation or severe physical injury) and mandating risk assessments by covered employees. It does not ban specific AI uses but sets transparency and safety protocols for high-risk systems. The law takes effect October 1, 2026.