Connecticut AI Regulations

Last verified: August 13, 2026

Regulatory Status

SB-1103

An Act Concerning Artificial Intelligence, Automated Decision-Making and Personal Data Privacy (Public Act 23-16)

enacted

Public Act 23-16 — the enacted form of Connecticut SB-1103 (2023 session). Signed by Governor Ned Lamont on June 7, 2023, making Connecticut among the first states to impose oversight on state agency use of AI. Government-only scope: does NOT directly regulate private-sector AI. Requires state agencies to complete impact assessments before deploying AI systems, publish a public AI inventory, and submit annual reports to the joint standing consumer-protection committee. Sections 1–3 effective July 1, 2023; Section 4 effective October 1, 2023; Section 5 effective upon passage.

Effective: 2023-07-01 View Bill Text →

Key Requirements

State Agency AI Impact Assessments State agencies may not employ AI systems that have not undergone impact assessments or that result in unlawful discrimination or disparate impact against specified individuals or groups
Public AI Inventory All inventory reports detailing AI systems used by state agencies and the Judicial Department must be publicly accessible online, with the Department of Administrative Services making its inventories available on the state's open data site
Annual Consumer-Protection Report Annual report to the joint standing committee on consumer protection, due February 15 beginning 2025 and annually thereafter
PA-25-113

Connecticut Data Privacy Act Impact-Assessment Amendment (Public Act 25-113)

enacted

Public Act 25-113 amended Connecticut General Statutes Section 42-522 to require covered controllers that profile consumers for decisions producing legal or similarly significant effects to conduct and document an impact assessment. The amendment took effect July 1, 2026, and the new impact-assessment requirements apply prospectively to processing activities created or generated on or after August 1, 2026. This is a private-controller consumer- data regime, distinct from SB-1103's state-agency AI assessments.

Effective: 2026-07-01 View Bill Text →

Key Requirements

Profiling Impact Assessment Controllers engaged in profiling for decisions that produce legal or similarly significant effects must document the purpose, inputs, outputs, risks, mitigations, performance limits, transparency measures, monitoring, and safeguards
Prospective Application The new impact-assessment requirement applies to processing activities created or generated on or after August 1, 2026, and is not retroactive
Attorney General Access The Connecticut Attorney General may require disclosure of an assessment relevant to an investigation; disclosed assessments remain confidential

Insurance Implications

Carrier Endorsement Status Applies To Filing Date Source
Verisk CG 40 47 filed CGL 2026-01-20 verisk.com
W.R. Berkley PC 51380 pending D&O, E&O, Fiduciary 2026-02-15 berkley.com
Verisk CG 40 48 filed CGL 2026-01-20 verisk.com
Verisk CG 35 08 filed Products/Completed Operations 2026-01-20 verisk.com

Filing status based on carrier announcements and state DOI records. Verify filings through your state's SERFF Filing Access system.

Industry-Specific Compliance

See how Connecticut AI regulations apply to specific industries:

Law FirmsInsurance Brokers
Disclaimer: This content is provided for informational purposes only and does not constitute legal advice. AI regulations and insurance policy terms change frequently. Consult with a qualified attorney or insurance professional for advice specific to your situation. Gridex makes no warranties regarding the accuracy or completeness of this information.