Connecticut's New AI Law Is Now on the Books. Here's What Small Businesses Need to Know.

What SB5 Covers

SB5 is a 39-section law that addresses several AI-related concerns under one bill. For small businesses, the most immediate section is the one on Automated Employment Decision Tools (AEDTs) — software that uses algorithms or AI to evaluate job applicants or make employment recommendations.

The law also addresses:

• AI companion chatbots — products designed to build emotional attachment with users, effective January 2027
• Synthetic media transparency — requirements for AI-generated content to carry provenance data, targeting platforms above one million users
• Frontier AI developer obligations — safety programs and whistleblower protections for large-scale AI developers

For most Connecticut small businesses, the AEDT section is the one that requires action.

The Employment Rules: What They Require

Effective October 1, 2026.

If your business uses an automated tool in any part of the hiring process, you must:

1. Disclose it to applicants. Job seekers have the right to know when AI is being used to evaluate them — what data the tool uses, what data sources it draws from, and how that information factors into the decision.
2. Accept and respond to challenges. Applicants can ask to have a decision reviewed by a human, or request an alternative process that doesn't use the automated tool. You need a procedure for handling those requests.
3. Avoid using the tool as a legal shield. If an applicant brings a discrimination claim against your company, the fact that an AI made the decision does not protect you. Connecticut amended its anti-discrimination statute specifically to close that door. Courts will look at whether you tested for bias before deploying the tool.

The enforcement mechanism matters here: violations are treated as unfair or deceptive trade practices under Connecticut consumer protection law, enforced by the Attorney General. Through the end of 2027, there's a 60-day cure period — the AG can give you time to fix a violation before filing suit. There is no private right of action, meaning individual applicants can't sue you directly under this provision.

What Counts as an Automated Employment Decision Tool?

This is the question most small business owners will ask first, and it's worth being precise.

The law covers tools that use algorithms, machine learning, or other AI to do things like:

• Screen resumes for keywords or qualifications
• Score applicants on predicted job performance
• Rank candidates by likelihood of success or retention
• Flag applicants as "high potential" or "low risk"

It does not cover every piece of software your HR process touches. A calendar tool that schedules interviews isn't regulated. A static job posting form isn't regulated. The line is whether the tool is evaluating or ranking human candidates using automated logic.

If you're not sure whether a tool you use qualifies, start by reading its product documentation. Legitimate HR software vendors are already publishing compliance guidance on this. If the vendor hasn't addressed SB5 at all, that's a gap worth flagging.

The Discrimination Provision Is Broader Than It Looks

Under prior Connecticut law, an employer facing a discrimination claim could point to an AI system as the decision-maker and create ambiguity about intent. SB5 removes that argument.

If an automated tool produces a discriminatory outcome — meaning it screens out a protected class at a disproportionate rate — that outcome is actionable regardless of whether the employer intended it. Courts evaluating these claims will consider whether the employer ran anti-bias testing on the tool before deployment, how recent and thorough that testing was, and how the employer responded to results.

The practical implication: if you're using a hiring tool, you should know whether its vendor has published bias audits, and you should keep records of that documentation.

One Piece of the Law That Benefits Small Businesses

SB5 creates a state AI working group with an explicit mandate: develop guidance on accelerating AI adoption by small businesses, and figure out how liability should be apportioned when AI agents take actions on behalf of a small business owner.

That second piece — liability apportionment — is a real problem that currently has no clean answer. When an AI tool makes a bad recommendation and a business follows it, who's responsible? SB5 doesn't answer the question yet, but it directs the state to work toward one. Initial appointments to the working group are due by July 31, 2026.

The Effective Date Timeline

Note the distinction in the last row: the disclosure requirements apply to tools deployed on or after October 1, 2027. Tools already in use before that date are subject to the October 2026 provisions — but the full notice architecture applies to new deployments.

What to Do Before October 1, 2026

1. Audit your hiring stack. List every tool your business or HR process uses between the moment a candidate applies and the moment you extend an offer. Flag anything that scores, ranks, or filters candidates automatically.
2. Read your supplier agreements. SB5 allows deployers to contract with the tool's developer to handle required notices on their behalf. Some vendors will offer this. Check whether yours does — and get it in writing if so.
3. Document bias testing. If you're using an AEDT, ask the vendor whether they've conducted independent bias audits, and request copies. If they haven't, decide whether to continue using the tool.
4. Build a challenge procedure. You need a documented process for what happens when an applicant requests human review or an alternative evaluation method. It doesn't need to be complicated, but it needs to exist before a request arrives.

The Bigger Picture

SB5 passed 131-17 in the House and 32-4 in the Senate. It had bipartisan support and a governor who backed the final version after vetoing an earlier attempt in 2025. This law is not going away, and Connecticut's Attorney General had already signaled an aggressive enforcement posture before the bill passed.

The businesses that will struggle most are the ones using AI tools without realizing they're using AI tools. A lot of small business owners don't think of an applicant tracking system as "AI" — but if it sorts and scores candidates automatically, it meets the definition under SB5.

The good news is that the cure period through 2027 gives businesses time to get compliant before enforcement gets serious. That window is available to those who use it.