Connecticut’s Legal Approach to Regulating AI Systems

Connecticut AG Issues Memorandum on Application of Existing Laws to AI

On February 25, the Attorney General of Connecticut, William Tong, released a memorandum that clarifies how existing Connecticut laws may be applied to artificial intelligence (AI) systems. This is particularly relevant in contexts such as tenant screening, employment decisions, credit risk and loan determinations, insurance claims, and targeted consumer advertising.

Key Legal Frameworks

The memorandum outlines several statutory frameworks that the Office of the Attorney General may utilize when addressing AI-related conduct:

  • Civil Rights Laws: These laws prohibit discrimination in various sectors, including employment, housing, insurance, and lending, based on protected characteristics.
  • Connecticut Data Privacy Act: This act grants consumers rights to access, delete, correct, and opt out of certain uses of their personal data.
  • Connecticut Unfair Trade Practices Act: This act may be applied in cases of deceptive practices involving AI.
  • Connecticut Antitrust Act: This act addresses anti-competitive behavior that may involve AI systems.

Application of Anti-Discrimination Laws

The memorandum emphasizes that existing anti-discrimination laws extend to automated decision-making, mirroring their application in traditional business practices. Connecticut statutes explicitly prohibit discrimination in:

  • Employment
  • Housing
  • Insurance
  • Lending

Moreover, the memorandum mentions that federal anti-discrimination statutes, such as the Equal Credit Opportunity Act, necessitate adverse action notices when credit decisions are made using algorithmic models.

Legal Frameworks for Developing AI Systems

When businesses develop or deploy AI systems, several existing legal frameworks may apply:

  • Privacy Obligations: The Connecticut Data Privacy Act stipulates rights for consumers regarding their personal data.
  • Data Security Requirements: Connecticut’s Safeguards Law and Breach Notification Law require businesses to protect personal information and report any data breaches.
  • Consumer Protection and Antitrust Laws: The Connecticut Unfair Trade Practices Act and the Connecticut Antitrust Act apply to AI when used in deceptive practices or anti-competitive conduct.

Looking Forward: Regulatory Considerations

State lawmakers and regulators are actively considering the implications of AI systems on consumer finance and commercial decision-making. Connecticut’s memorandum suggests a pragmatic approach: applying existing consumer protection, privacy, anti-discrimination, and competition laws to AI-related conduct rather than establishing a new regulatory framework.

While the memorandum is neither binding nor precedential, it provides valuable insights into how the Attorney General plans to address these emerging issues in the future.

More Insights

Revolutionizing Drone Regulations: The EU AI Act Explained

The EU AI Act represents a significant regulatory framework that aims to address the challenges posed by artificial intelligence technologies in various sectors, including the burgeoning field of...

Revolutionizing Drone Regulations: The EU AI Act Explained

The EU AI Act represents a significant regulatory framework that aims to address the challenges posed by artificial intelligence technologies in various sectors, including the burgeoning field of...

Embracing Responsible AI to Mitigate Legal Risks

Businesses must prioritize responsible AI as a frontline defense against legal, financial, and reputational risks, particularly in understanding data lineage. Ignoring these responsibilities could...

AI Governance: Addressing the Shadow IT Challenge

AI tools are rapidly transforming workplace operations, but much of their adoption is happening without proper oversight, leading to the rise of shadow AI as a security concern. Organizations need to...

EU Delays AI Act Implementation to 2027 Amid Industry Pressure

The EU plans to delay the enforcement of high-risk duties in the AI Act until late 2027, allowing companies more time to comply with the regulations. However, this move has drawn criticism from rights...

White House Challenges GAIN AI Act Amid Nvidia Export Controversy

The White House is pushing back against the bipartisan GAIN AI Act, which aims to prioritize U.S. companies in acquiring advanced AI chips. This resistance reflects a strategic decision to maintain...

Experts Warn of EU AI Act’s Impact on Medtech Innovation

Experts at the 2025 European Digital Technology and Software conference expressed concerns that the EU AI Act could hinder the launch of new medtech products in the European market. They emphasized...

Ethical AI: Transforming Compliance into Innovation

Enterprises are racing to innovate with artificial intelligence, often without the proper compliance measures in place. By embedding privacy and ethics into the development lifecycle, organizations...

AI Hiring Compliance Risks Uncovered

Artificial intelligence is reshaping recruitment, with the percentage of HR leaders using generative AI increasing from 19% to 61% between 2023 and 2025. However, this efficiency comes with legal...