Connecticut's AI law takes effect today: written consent required before AI subscription renewals

#What happened

On October 1, 2026, Section 1 of Connecticut's Public Act 26-15 (Substitute Senate Bill 5, the Connecticut AI Responsibility and Transparency / C.A.R.T. Act, a 74-page, 39-section law) takes effect. A subscription-based provider of AI technology may not enter into or renew a subscription with a Connecticut consumer, or collect a fee for one, unless it has given written notice of the key terms and the consumer has accepted them in writing. The notice must cover quantitative or qualitative limits the provider may impose (including limits triggered by the consumer's own conduct) and whether the provider has discretion to reduce or eliminate functionality. Violations count as unfair or deceptive trade practices under the Connecticut Unfair Trade Practices Act, enforced by the state Attorney General. The same law protects "frontier developer" employees from being fired or retaliated against for anonymously reporting AI development that could pose catastrophic risk. Companion legislation expanding the Connecticut Data Privacy Act also takes effect: a new data broker regulatory framework, a ban on selling residents' genetic information, and restrictions on facial recognition, precise geolocation, and personalized algorithmic pricing. The anonymous-reporting-system mandate for large AI companies phases in by January 1, 2027.

#Why it matters

This is the first U.S. state law tying AI subscription practices — renewals, usage limits, and the provider's right to cut functionality — to explicit written consumer consent, landing just as usage-limit frustration around AI coding tools is making headlines. It could become the template other states copy.

#Sources

• Daily Campus, Sep 30, 2026: New AI regulation law goes into effect Oct. 1
• PYMNTS, Sep 29, 2026: New AI and privacy rules for businesses take effect in Connecticut
• Digital Policy Alert: AI system design and risk management regulation in Act concerning online safety, Public Act 26-15
• PAICE.work guide: Connecticut AI Responsibility Act — October 1

Verified Oct 1, 2026.