Law / United States / Connecticut

AI Companion Chatbot Disclosure and Minor Safety Duties

2026 Conn. Pub. Acts 26-15, Secs. 4 to 6

An AI transparency rule binding private bodies.

How the hook was established
express
What makes it apply
User location
Audit expectation
none

What it requires

  • This duty takes effect .
  • If your AI companion would cause a reasonable user to believe they are speaking with a human, give a clear and conspicuous notice that the user is communicating with an artificial intelligence companion.NIST AI RMFMEASURE 2.8
  • Repeat that notice at least hourly for a user under eighteen, and at least every three hours for an adult user.NIST AI RMFMEASURE 2.8
  • If a user directly asks whether the companion is human, disclose that it is not.NIST AI RMFMEASURE 2.8
  • If you know or have reason to believe a user is a minor, do not let the companion encourage self-harm, suicide, violence, disordered eating, or unlawful drug or alcohol use.NIST AI RMFMEASURE 2.6
  • Do not let the companion engage in romantic or sexually explicit interaction with a minor user, or use the manipulative engagement techniques the statute lists.NIST AI RMFMAP 1.6
  • Give minor users and their parents or guardians tools to manage screen time and account settings.NIST AI RMFMAP 1.6

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MAP 1.6System requirements (e.g., “the system shall respect the privacy of its users”) are elicited from and understood by relevant AI actors. Design decisions take socio-technical implications into account to address AI risks.
  • MEASURE 2.6The AI system is evaluated regularly for safety risks – as identified in the MAP function. The AI system to be deployed is demonstrated to be safe, its residual negative risk does not exceed the risk tolerance, and it can fail safely, particularly if made to operate beyond its knowledge limits. Safety metrics reflect system reliability and robustness, real-time monitoring, and response times for AI system failures.
  • MEASURE 2.8Risks associated with transparency and accountability – as identified in the MAP function – are examined and documented.

Our reading of where this law's duties sit in each framework, and in the NIST AI RMF, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law

What it makes you log

Who may demand the log

Public

What the log must hold

Decision basis

Logging duty

Section 5(a)(1)(A) requires the AI companion to include a self-harm and violence detection and referral protocol, and Section 5(a)(2) requires the operator to post that protocol in a prominent and publicly accessible location on its web site. Neither subsection uses the words logs, records or audit trail, but the operator cannot demonstrate having a compliant protocol, or comply with the posting duty, without a written document, so the duty is implicit. Section 5(b)'s human-or-companion disclosure notice and Section 6's minor-safety behavioral restrictions state no duty of their own to create, keep, or later produce a record of having complied.

Kind
Implicit
As of
Provision
Sec. 5(a)

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Takes effect .

An operator of an artificial intelligence companion, an AI system with a natural language interface designed to sustain a relationship across multiple interactions, that would cause a reasonable user to believe they are speaking with a human must give a clear and conspicuous notice that the user is communicating with an artificial intelligence companion, repeated at least hourly for a user under eighteen and at least every three hours for an adult user, and must respond to a direct question about whether it is human by disclosing that it is not.

A violation of the disclosure duty is enforced solely by the Attorney General as an unfair trade practice and creates no private right of action.

Separately, an operator that knows or has reason to believe a user is a minor may not let the companion encourage self-harm, suicide, or violence, offer mental-health services outside narrow exceptions, discourage the user from seeking help from a professional or a trusted adult, engage in romantic or sexually explicit interaction, or use enumerated manipulative engagement techniques, and must give minor users and their parents tools to manage screen time and account settings.

When LexLint raises it

When your app profile says your app generates content with AI, serves under-18s or deploys a companion chatbot.

Back to the example  ·  Lint your app

Page updated .