Connecticut Data Privacy Act Amendment - LLM Training Disclosure (SB 1295)
Connecticut · 2025 Conn. Public Acts 25-153 (SB 1295), amending Conn. Gen. Stat. Sec. 42-520
This amendment to Connecticut's Data Privacy Act adds a first-in-the-nation transparency rule about AI training data. Businesses must state in their privacy notice whether they collect, use, or sell personal data to train large language models. The disclosure applies regardless of how the trained model is ultimately used. Like the rest of the privacy act, it is enforced by the Attorney General under Connecticut's consumer protection law.
Technical detail
SB 1295 (Public Act 25-153) amends the CTDPA's privacy-notice requirements (Conn. Gen. Stat. Sec. 42-520) to require controllers to disclose whether they collect, use, or sell personal data for the purpose of training large language models; enforced as a CUTPA violation.
Who is protected: Connecticut consumers whose personal data may be used to train large language models.
Who must comply: Controllers subject to the CTDPA that collect, use, or sell personal data for LLM training.
Key facts
| Jurisdiction | Connecticut |
|---|---|
| Level | State |
| Status | In effect |
| Protection strength | Limited protection |
| Effective date | 2026-07-01 |
| Enacted | 2025-06-24 |
| Citation | 2025 Conn. Public Acts 25-153 (SB 1295), amending Conn. Gen. Stat. Sec. 42-520 |
| Enforced by | Connecticut Attorney General (under the Connecticut Unfair Trade Practices Act) |
| Private right of action | No — agency enforcement only |
| Penalties | Enforced as a CUTPA violation, with civil penalties of up to $5,000 per willful violation. |
| Topics | AI disclosure and transparency · consumer data privacy |
| Last verified | 2026-07-22 |
| Official source | Connecticut General Assembly, SB 1295 (2025) / Public Act 25-153 ↗ |
More AI rules in Connecticut
- Connecticut algorithmic rent ban — HB 8002 (eff. Jan 1, 2026) · In effect
- CT Rideshare Dynamic-Pricing Law (surge-price limits) · In effect
- CT SB 1103 (state-government AI oversight) · In effect
- Connecticut Data Privacy Act (CTDPA) (profiling opt-out) · In effect
- CT SB 5 (2026 AI Act) · Enacted (not yet in effect)
- 2025 State of Connecticut Artificial Intelligence Inventory · In effect
Related AI disclosure and transparency rules elsewhere
- Trump AI Innovation & Security EO (June 2026) · In effect
- CO ADMT Act (SB 26-189, 2026) · Enacted (not yet in effect)
- Utah SB 319 (health insurer AI) · Enacted (not yet in effect)
- FERC order directing PJM and other grid operators to reform · Enacted (not yet in effect)
- Morris County resolution urging state oversight of data cent · Enacted (not yet in effect)
- SU-47 Special-Use Data Center Zoning District Ordinance · Proposed / pending
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.