Two governments moved AI regulation to the place where people actually meet the technology this week. Connecticut’s Artificial Intelligence Responsibility and Transparency Act, Public Act 26-15, began taking effect on October 1, 2026. Its first operative change tells employers that relying on an automated hiring or promotion tool is no defense to a discrimination complaint. On October 5, Norway’s Ministry of Digitalisation and Public Governance announced that the government will propose a temporary ban on AI glasses in selected public places while an expert group drafts permanent rules.
The defended position is that AI regulation is shifting from model-level promises to use-level duties. Operators who still govern AI only through vendor assurances are carrying risk that the law now assigns to them. Connecticut places that risk on the deployer at the moment of an employment decision, and Norway places it on the wearer when a camera enters a park, a school, or a changing room. Evidence that would weaken this reading includes Connecticut deferring its 2027 deployer notice duties, or Norway’s bill shrinking to guidance without a statutory ban. Neither has happened as of today.
What changed in Connecticut on October 1
Governor Ned Lamont announced on June 2, 2026 that he had signed Public Act 26-15. His office describes the law as a collaboration among the governor, Attorney General William Tong, and Senator James Maroney. The act stages its obligations across several dates, and October 1 is the first one that reaches private employers and AI developers directly.
Section 13 amends the state’s employment discrimination statute, Conn. Gen. Stat. 46a-60(b). Under the new text, “the use of an automated employment-related decision technology” shall not be a defense against a complaint alleging a discriminatory practice. The same section lets the commission or a court consider evidence of anti-bias testing, including its quality, efficacy, recency and scope, its results, and the employer’s response. That second sentence matters as much as the first, because it turns bias testing from a voluntary habit into evidence an employer will want on file before a complaint arrives.
Section 2 protects certain employees of frontier developers, defined as firms that train a foundation model using more than 1026 operations. The protection covers reports of activity posing a specific and substantial danger to public health or safety due to catastrophic risk. Large frontier developers, meaning those with more than $500 million in annual revenue, must stand up an anonymous internal reporting process by January 1, 2027. Violations carry civil penalties of up to $1,000 each, and the Attorney General enforces them.
Section 15 reaches generative systems that make images, audio, or video and have more than one million monthly users. Those covered providers must include provenance data in that content to the extent commercially and technically reasonable. The statute names the Coalition for Content Provenance and Authenticity standard as one way to make that data hard to strip. Section 38 bars state agencies from using AI in public-assistance decisions or rights-affecting functions unless the use follows policies set by the Office of Policy and Management and the Department of Administrative Services.
What Connecticut deferred, and why the dates matter
Several headline protections don’t start yet. Sections 9 and 10 require plain-language disclosure to applicants and employees who interact with an automated employment tool. They also require a written notice before a decision that names the tool’s trade name, purpose, data categories, and data sources. Those duties apply to tools deployed on or after October 1, 2027. The AI companion rules in Sections 4 through 6 take effect January 1, 2027, and they require protocols that detect expressions of suicide or self-harm risk and refer users to resources such as the 9-8-8 lifeline.
The Attorney General’s September 16 advisory presents the employment and chatbot provisions as consumer rights under the CART Act. It pairs them with separate privacy changes in Public Act 26-64 covering facial recognition signage, genetic data, precise geolocation, and surveillance pricing. Operators should read the advisory for intent and the statute for dates. The legislators’ October 2 release draws the same line, noting that internal reporting duties for large developers begin in 2027 and that surveillance pricing limits keep phasing in.
What Norway proposed on October 5
Norway’s announcement targets a different point of contact, which is the device on a person’s face. Minister Torgeir Micaelsen said he is worried that new, powerful technology is being introduced where people risk being photographed, filmed, or audio-recorded without knowing it (translated from the Norwegian release). The ministry’s candidate locations include parks, beaches, museums, shopping centres, and public events. It also lists schools, kindergartens, playgrounds, and youth clubs, along with health institutions, doctors’ offices, swimming pools, and gyms with changing rooms and showers.
The proposal isn’t a total ban. The ministry says exceptions will cover vulnerable groups and limited socially useful purposes. It hasn’t yet decided whether the ban should reach glasses with cameras and audio, glasses with cameras and AI features, or other body-worn technology. The government says it will bring a bill to the Storting as quickly as possible, and it will appoint an expert group to advise on permanent national rules for body-worn technology.
What Responsible AI operators should change now
The Factics move treats Public Act 26-15, the Connecticut releases, and the Norwegian ministry’s announcement as verified primary evidence. The tactic is a use-point register for every AI system that touches a hiring decision, a public space, or a person’s likeness. Each entry names the deployer, the decision or location the system touches, the testing record that exists today, and the legal date that triggers a duty. The KPI is coverage: the share of automated employment tools with a dated anti-bias test and documented response on file before October 2027, and the share of facilities with a written policy on camera-equipped wearables.
Checkpoint-Based Governance supplies the authority test. Connecticut’s statute already assumes a human checkpoint, because a court can weigh what the employer tested and how it responded. That record only exists if a named person reviewed the tool’s results and decided what to change. Norway’s proposal assumes one too, since venue operators and school leaders will need someone with authority to say a device stays outside. Factics keeps the brief honest by pairing each legal date with a tactic and a measure. A board update can then report which tools have evidence on file, instead of repeating that the company takes AI seriously.
The next signals to watch are the text of Norway’s bill when it reaches the Storting and the mandate of its expert group. Connecticut’s first Attorney General guidance or enforcement under the CART Act matters just as much. Each will show whether use-level duties hold their shape once they meet real deployments, and teams that build the register now won’t have to rebuild their testing history after a complaint is filed.
Sources
- Connecticut General Assembly. (2026). Public Act No. 26-15: An act concerning online safety (Substitute Senate Bill No. 5). https://www.cga.ct.gov/2026/act/pa/pdf/2026PA-00015-R00SB-00005-PA.pdf
- Office of Governor Ned Lamont. (2026, June 2). Governor Lamont signs legislation establishing youth online safety protections, regulations over artificial intelligence, and initiatives to upskill Connecticut’s workforce [Press release]. State of Connecticut. https://portal.ct.gov/governor/news/press-releases/2026/06-2026/governor-lamont-signs-legislation-establishing-youth-online-safety-protections
- Office of the Attorney General William Tong. (2026, September 16). Attorney General Tong advises Connecticut consumers and businesses of rights and requirements related to new and updated privacy laws [Press release]. State of Connecticut. https://portal.ct.gov/ag/press-releases/2026-press-releases/rights-and-requirements-related-to-new-and-updated-privacy-laws
- Delany, H., Maroney, J., Duff, B., & Connecticut General Assembly AI Caucus. (2026, October 2). Rep. Delany, Sen. Maroney, Sen. Duff & Connecticut AI Caucus announce implementation of new AI and data privacy laws [Press release]. Connecticut House Democrats. https://housedems.ct.gov/delany/rep-delany-sen-maroney-sen-duff-connecticut-ai-caucus-announce-implementation-new-ai-and
- Digitaliserings- og forvaltningsdepartementet. (2026, October 5). Vil innføre midlertidig forbud mot KI-briller [Will introduce a temporary ban on AI glasses] [Press release]. Government of Norway. https://www.regjeringen.no/no/aktuelt/vil-innfore-midlertidig-forbud-mot-ki-briller/id3175516/
Frequently Asked Questions
What is Connecticut’s CART Act?
The Connecticut Artificial Intelligence Responsibility and Transparency Act is Public Act 26-15, enacted from Substitute Senate Bill 5 and announced as signed by Governor Ned Lamont on June 2, 2026. It covers automated employment tools, AI companions, frontier developer whistleblowers, provenance data for generated media, state agency AI use, and workforce programs, with effective dates staged from July 2026 into 2028.
What took effect in Connecticut on October 1, 2026?
Several provisions began on October 1, including the amendment to Conn. Gen. Stat. 46a-60(b) stating that use of an automated employment-related decision technology is not a defense to a discrimination complaint, whistleblower protections for frontier developer employees, provenance data duties for large generative media providers, and limits on state agency AI use in benefits and rights-affecting functions.
Do Connecticut employers have to notify applicants about AI tools now?
Not yet under the statute’s text. The plain-language disclosure and pre-decision written notice duties in Sections 9 and 10 apply to automated employment-related decision technology deployed on or after October 1, 2027. The anti-discrimination amendment applies now, and courts may weigh an employer’s anti-bias testing and its response.
When do Connecticut’s AI companion chatbot rules start?
Sections 4 through 6 take effect January 1, 2027. Operators of AI companions will need protocols that detect user expressions clearly indicating risk of suicide, self-harm, or imminent violence, prevent outputs that encourage those acts, and refer users to resources such as the 9-8-8 National Suicide Prevention Lifeline.
What did Norway announce about AI glasses?
On October 5, 2026, Norway’s Ministry of Digitalisation and Public Governance said the government will propose a temporary ban on using AI glasses in selected places, such as parks, beaches, museums, shopping centres, schools, kindergartens, health institutions, and gyms with changing rooms. It is not a total ban, exceptions are planned, and an expert group will advise on permanent regulation.
What should Responsible AI teams do in response?
Build a use-point register that lists each AI system touching hiring decisions, public spaces, or personal likeness, with its deployer, testing record, and the legal date that triggers a duty. Put a dated anti-bias test and documented response on file for every automated employment tool, and adopt a written policy on camera-equipped wearables for facilities you operate.
#AIgenerated
Leave a Reply