Connecticut Attorney General William Tong issued an advisory that newly enacted privacy laws take effect October 1, 2026, including Public Act 26-64 (SB4), which amends the Connecticut Data Privacy Act, and Public Act 26-15 (SB5), which established the Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act). The new laws regulate surveillance pricing, facial recognition technology, genetic data collected by direct-to-consumer testing companies, a ban on the sale of precise geolocation data, a data broker registry, AI use in employment decisions, and chatbots offered to children. No enforcement action was taken; this is prospective guidance alerting consumers and businesses to new rights and compliance requirements.
None - no enforcement action or remedies were imposed. This press release is a prospective advisory that new statutory requirements (surveillance pricing limits, FRT disclosures, genetic data consent, geolocation data sale ban, data broker registration by January 1, 2027, AI employment notice, and chatbot child-safety protocols) take effect October 1, 2026.
Although no enforcement action was taken, in-house teams should prepare for Connecticut's October 1, 2026 effective date by reviewing vendor, customer, and employee-facing agreements and policies. Review data processing addenda and adtech/marketing agreements for any sale or sharing of consumers' precise geolocation data (now banned in Connecticut) and for pricing-analytics vendors using personal data for surveillance pricing; review facial recognition vendor contracts for new signage and policy-hyperlink disclosure obligations; review direct-to-consumer genetic testing agreements for consent, consumer property rights, and controls over collection, use, retention, and destruction of genetic samples and results; review AI vendor agreements and employment policies for written-notice obligations when AI impacts employment decisions and non-discrimination terms aligned with the Connecticut Fair Employment Practices Act; and review chatbot or children's product agreements for self-harm detection protocols, parental controls, and prohibitions on harmful or manipulative engagement mechanics. Also confirm data broker registration obligations (deadline January 1, 2027) in data broker contracts and update privacy policies and deletion workflows for expanded consumer deletion rights over profiles generated from publicly available information.
Entity
N/A - General advisory to Connecticut businesses and consumers (no specific entity)
Industry
OtherOfficial Press Release
https://portal.ct.gov/ag/press-releases/2026-press-releases/rights-and-requirements-related-to-new-and-updated-privacy-laws
2026SB 00004 R00SA AMD
https://www.cga.ct.gov/2026/amd/S/pdf/2026SB-00004-R00SA-AMD.pdf
2026SB 00005 R00SA AMD
https://www.cga.ct.gov/2026/amd/S/pdf/2026SB-00005-R00SA-AMD.pdf
Connecticut Attorney General Enforcement Page
https://portal.ct.gov/AG/Privacy/Privacy-Resources
"Attorney General Tong Advises Connecticut Consumers and Businesses of Rights and Requirements Related to New and Updated Privacy Laws"
"Attorney General William Tong today advises Connecticut consumers"
"beginning October 1, 2026, they will enjoy additional privacy rights"
"under newly-enacted laws related to artificial intelligence, Facial Recognition Technology (FRT), genetic data privacy, surveillance pricing, and data brokers"
"recent amendments to the Connecticut Data Privacy Act ("CTDPA")"
"Connecticut enacted Public Act 26-64 ("SB4") in May of this year to amend the CTDPA"
Connecticut Attorney General William Tong joined attorneys general from 17 states in an amicus brief urging the New York Court of Appeals to preserve state authority to pursue fraud cases. The underlying civil case alleges that Donald Trump and his co-defendants inflated asset values to obtain better loan and insurance terms; this press release announces advocacy, not a new enforcement order or penalty.
$220.0M
Connecticut and a coalition of 36 attorneys general reached a $220 million settlement with General Motors over the collection and sale of consumers’ driving behavior and location data to data brokers and insurers without adequate disclosure or consent. The settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy program assessments and dealership oversight and training.
Connecticut Attorney General William Tong and 13 other attorneys general sent Meta a letter after the No Kings Coalition’s Instagram account was mistakenly suspended during a nationwide election-related day of action. The letter asks Meta to explain the suspension, its use of human review, steps to prevent similar errors, and how users can seek redress; it does not announce a fine or impose a remedy.
Connecticut joined the FTC and attorneys general from 19 other states in suing Dollar General, alleging that it repeatedly charged customers more at checkout than prices displayed on shelves, tags, and advertisements. The complaint alleges years of overcharging and insufficient safeguards, but the release does not report a settlement, court order, or monetary penalty.
$500K
Connecticut Attorney General William Tong announced settlements with SunRun, Inc., Elevate Solar Solutions, and two salespeople over allegations of deceptive solar sales, including impersonating consumers and locking homeowners into long-term contracts without consent. SunRun must pay $300,000 and provide consumer relief; Elevate and the salespeople face a stated $200,000 penalty, with $100,000 suspended subject to ongoing compliance.
$8.0M
Connecticut announced an $8 million settlement with Mylan over allegations that it used agreements to delay generic EpiPen competitors and took other actions that inflated prices. Mylan also agreed to provide 10,000 free EpiPens; the release states that Mylan denies wrongdoing.