Law / United States / 
Connecticut
State Agency Use of Artificial Intelligence Technology: Compliance with State Policy and Standards and Impact Assessments
2026 Conn. Pub. Acts 26-15, Sec. 38
In force since .
An AI governance rule binding government bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Governance, DPIA
- Audit expectation
- none
What it requires
- If you are a state agency, or an entity acting on behalf of a state agency, do not use artificial intelligence technology in a function related to the delivery of a public assistance benefit, or in a function that will have a material impact on the rights, civil liberties, safety or welfare of individuals in the state, unless the use complies with the policies and standards of the Office of Policy and Management and the Department of Administrative Services (Public Act 26-15, Sec. 38(b)(1)).
- If you are a state agency, do not authorize a procurement, purchase or acquisition of artificial intelligence technology except where its use complies with those policies and standards (Public Act 26-15, Sec. 38(b)(2)).
- If you are a state agency authorized to procure, purchase or acquire an artificial intelligence technology, complete an artificial intelligence impact assessment in compliance with those policies and standards (Public Act 26-15, Sec. 38(b)(3)).
- Submit the impact assessment to the Commissioner of Administrative Services in the form and manner the commissioner prescribes, and post it on your web site not later than sixty days before you deploy the technology; you may redact personally identifiable information of any individual (Public Act 26-15, Sec. 38(c)).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
Section 38(c) sends the impact assessment to the Commissioner of Administrative Services and posts it on the agency's web site. The section names no log contents, no retention period and no later production of a record to an auditor.
- Kind
- None
- As of
What this law does
A state agency, or an entity acting on behalf of a state agency, may not use any artificial intelligence technology in a function related to the delivery of a public assistance benefit, or in a function that will have a material impact on the rights, civil liberties, safety or welfare of individuals in the state, unless the use complies with policies and standards of the Office of Policy and Management and the Department of Administrative Services.
A state agency may not authorize any procurement, purchase or acquisition of artificial intelligence technology, except where its use complies with policies and standards of the Office of Policy and Management and the Department of Administrative Services.
A state agency authorized to procure, purchase or acquire an artificial intelligence technology must complete an artificial intelligence impact assessment in compliance with policies and standards of the Office of Policy and Management and the Department of Administrative Services.
The impact assessment must be submitted to the Commissioner of Administrative Services, in a form and manner the commissioner prescribes, and posted on the agency's Internet web site not later than sixty days before deployment of the technology. An agency may redact personally identifiable information of any individual from the impact assessment.
Artificial intelligence technology under the section excludes any cybersecurity tool, and any data analytics tool or system where artificial intelligence is incidental and not determinative. Section 38 of Public Act 26-15 takes effect on .
When LexLint raises it
When your app profile says your app makes public services decisions.
Back to the example · Lint your app
Page updated .