General Law

HB 5349 establishes a 10-member task force to study the operations of the Department of Consumer Protection. The task force includes representatives from both legislative chambers (appointed by leadership), the Department Commissioner, and two gubernatorial appointees. It must submit a final report to the relevant legislative committee by January 1, 2027, detailing findings and recommendations about the department's functioning. This bill does not change existing laws or regulations but creates a formal process for evaluating the department's operations.

HB 5222 clarifies and strengthens the Department of Consumer Protection's authority to investigate and enforce consumer protection laws. It specifically amends statutes to explicitly grant the Department and its board the power to issue subpoenas, administer oaths, compel testimony, and request documents during investigations. The bill also establishes immunity for staff acting in good faith and requires the state to cover legal costs for such actions. Additionally, it details enforcement mechanisms, including the ability to issue orders to stop violations and impose civil penalties up to $50,000 for violations of consumer protection statutes. The bill does not affect professional licensing fees or architecture regulations, which appear to be misplaced in the text.

SB 116 requires hotels, motels, and similar lodging operators to share tax payment records with consumer protection officials monthly and maintain guest transaction records for six months. It mandates employee training on recognizing human trafficking signs and conducting annual awareness campaigns, with certification required in personnel files. The bill also prohibits offering hourly discounts (12 hours or less) for rooms to prevent trafficking tactics. Violations carry $5,000 civil penalties per offense, enforced by the Consumer Protection Department through audits and inspections. The law directly affects lodging businesses and aims to strengthen trafficking prevention through transparency and staff education.

SB 4 establishes a data broker registration system in Connecticut, requiring businesses that sell or license personal data to register with the Department of Consumer Protection by October 1, 2026. It directly affects data brokers (businesses collecting and selling personal data) and Connecticut consumers, who gain new rights to request data deletion. Key provisions include mandatory $600 annual registration fees, a requirement for data brokers to provide an "accessible deletion mechanism" for consumer requests, and definitions clarifying terms like "brokered personal data." The law aims to increase transparency and control over personal data handling while imposing specific compliance obligations on data brokers.

SB 5 (AN ACT CONCERNING ONLINE SAFETY) requires subscription-based AI providers (e.g., companies offering AI tools via paid plans) to give consumers clear, written disclosures about subscription terms before signing or renewing. This includes detailing any usage limits, such as restrictions based on user behavior or changes to prior terms. The bill also establishes new safety rules for "frontier developers" of advanced AI systems ("foundation models"), defining "catastrophic risk" as scenarios where AI could cause mass harm (e.g., aiding weapon creation or severe physical injury) and mandating risk assessments by covered employees. It does not ban specific AI uses but sets transparency and safety protocols for high-risk systems. The law takes effect October 1, 2026.