Law / United States / 
Connecticut
Civil Action and Platform Takedown Duty for Synthetically Created Intimate Images
2026 Conn. Pub. Acts 26-55 (Sub. H.B. 5312, 2026 Gen. Assemb., Reg. Sess.)
In force since .
An AI prohibited practices rule binding public and private bodies.
- Obligation class
- Prohibition
- Audit expectation
- none
- Setting the rule reaches
- General
What it requires
- If you knowingly disseminate a synthetically created intimate image intending to cause harm, an individual you harmed may sue you within two years of discovering the dissemination for an injunction and for damages, including punitive damages, plus costs and attorneys' fees.
- If you operate a covered platform under 47 U.S.C. Sec. 223a, set up a process letting a harmed individual or the Attorney General notify you of such an image and request its removal.NIST AI RMFMEASURE 3.3
- Post a clear and conspicuous notice describing that removal process in plain language.NIST AI RMFMEASURE 3.3
- On receiving a valid removal request, remove the image and make reasonable efforts to remove copies within forty-eight hours.NIST AI RMFMANAGE 4.1
- Removing an image in good faith under this process shields you from liability for that removal.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MEASURE 3.3Feedback processes for end users and impacted communities to report problems and appeal system outcomes are established and integrated into AI system evaluation metrics.
- MANAGE 4.1Post-deployment AI system monitoring plans are implemented, including mechanisms for capturing and evaluating input from users and other relevant AI actors, appeal and override, decommissioning, incident response, recovery, and change management.
Our reading of where this law's duties sit in each framework, and in the NIST AI RMF, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
What it makes you log
What the log must hold
Output reference, Affected person reference
Logging duty
Section 2(a) requires a covered platform to establish and maintain a process for a written removal request, naming what the written request must contain, and Section 2(c) requires removal within forty-eight hours of a valid request. Neither subsection names a log, record or audit trail, but a platform cannot show it received a valid request and met the forty-eight-hour deadline, in an Attorney General enforcement petition under subsection (e), without keeping the written request and a record of when it acted, so the duty is implicit.
- Kind
- Implicit
- As of
- Provision
- Sec. 2(a) to (c)
What this law does
Signed and taking effect .
An individual harmed by the unlawful dissemination of a synthetically created intimate image, defined the same way as in Conn. Gen. Stat. Sec. 53a-189d, may bring a civil action for an injunction and for economic, emotional-distress, and punitive damages against a person who knowingly disseminated the image intending to cause harm, within two years of discovering the dissemination, with costs and attorneys' fees available to the prevailing party.
Separately, a covered platform under 47 U.S.C. Sec. 223a must set up a notice-and-removal process for a harmed individual or the Attorney General to report such an image, post a clear and conspicuous notice describing that process, and, within forty-eight hours of a valid request, remove the image and make reasonable efforts to remove copies, with good-faith removal shielded from liability.
A platform that violates the removal duty is subject to a civil penalty of up to twenty-five thousand dollars per day, sought by the Attorney General in Superior Court, in addition to the harmed individual's own private right of action.
When LexLint raises it
When your app profile says your app generates images with AI, generates video with AI, publishes adult content or operates a social platform.
Back to the example · Lint your app
Page updated .