CT SB 1295 (AI training-data disclosure)

Connecticut Data Privacy Act Amendment - LLM Training Disclosure (SB 1295)
Connecticut · 2025 Conn. Public Acts 25-153 (SB 1295), amending Conn. Gen. Stat. Sec. 42-520

Status
In effect
Took effect
July 1, 2026
Applies to
Controllers subject to the CTDPA that collect, use, or sell personal data for LLM training.
Enforced by
Connecticut Attorney General (under the Connecticut Unfair Trade Practices Act)

This amendment to Connecticut's Data Privacy Act adds a first-in-the-nation transparency rule about AI training data. Businesses must state in their privacy notice whether they collect, use, or sell personal data to train large language models. The disclosure applies regardless of how the trained model is ultimately used. Like the rest of the privacy act, it is enforced by the Attorney General under Connecticut's consumer protection law.

Who is protected: Connecticut consumers whose personal data may be used to train large language models.

Legal detail

SB 1295 (Public Act 25-153) amends the CTDPA's privacy-notice requirements (Conn. Gen. Stat. Sec. 42-520) to require controllers to disclose whether they collect, use, or sell personal data for the purpose of training large language models; enforced as a CUTPA violation.

Key facts

JurisdictionConnecticut
LevelState
StrengthLimited
EnactedJune 24, 2025
Citation2025 Conn. Public Acts 25-153 (SB 1295), amending Conn. Gen. Stat. Sec. 42-520
Private right of actionNo, agency enforcement only
PenaltiesEnforced as a CUTPA violation, with civil penalties of up to $5,000 per willful violation.
TopicsAI disclosure and transparency · consumer data privacy
Bill textConnecticut General Assembly, SB 1295 (2025) / Public Act 25-153

More AI rules in Connecticut

Related AI disclosure and transparency rules elsewhere

See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.