From the journal

Connecticut Enacts Sweeping AI Law Covering Employment, Healthcare, and Online Safety in June 2026

Connecticut Governor Ned Lamont signed Senate Bill 5 on June 2, 2026, enacting the Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act, Public Act 26-15). The law creates disclosure obligations for employers using AI in hiring and layoff decisions, safety protocols for chatbot operators, and content-provenance requirements for large-scale generative AI systems. Compliance deadlines run from October 2026 through January 2028.

2 min read

Connecticut Governor Ned Lamont signed Senate Bill 5 into law on June 2, 2026. The legislation is designated Public Act 26-15 and carries the title Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act). The Act is now enacted law. Compliance deadlines run from October 2026 through January 2028 depending on the obligation.

The CART Act creates obligations across five domains. Employers using AI to make hiring or personnel decisions must give prescribed disclosures to affected workers. Employers issuing Worker Adjustment and Retraining Notification Act notices must disclose whether AI informed the layoff decision. Chatbot operators must implement protocols to detect expressions of suicidal ideation among users and respond with appropriate resources. Developers of generative AI systems with over one million monthly users must embed content-provenance data in AI-generated audio, image, and video.

Employers with Connecticut operations who use automated tools in hiring or performance management face disclosure and audit requirements before October 2026. AI companion platform operators and consumer chatbot providers must deploy safety protocols for Connecticut users. Developers of large-scale generative AI systems must build content-provenance infrastructure. Healthcare entities gain a carve-out for FDA-regulated clinical AI but must assess whether AI used in scheduling, billing, or staffing decisions falls within CART Act employment provisions.

The healthcare carve-out exempts AI clinical tools subject to FDA jurisdiction, but AI used in administrative staffing or billing may not qualify. Compliance timelines are staggered. Content-provenance requirements do not apply until January 2028. Whether the employment provisions extend to contractors alongside employees is an open question the Act does not resolve.

Licentium advises clients on state-level AI regulation and can draw on a partner network to assist organisations with multistate AI compliance. Clients deploying automated decision tools in Connecticut or considering product launches involving AI companions or generative systems may wish to review their obligations before the October 2026 threshold. Work we undertake includes AI regulatory compliance assessments, automated decision-tool disclosure drafting, state AI law monitoring, and AI product risk analysis.

Source: Connecticut Governor Ned Lamont, Public Act 26-15 (Senate Bill 5, Connecticut Artificial Intelligence Responsibility and Transparency Act), signed 2 June 2026

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.