CT Public Act 26-64 — An Act Concerning Consumer Privacy and Protection (SB 4)

Summary

AI law Connecticut Public Act No. 26-64 mandates strict consumer transparency and consent protocols for commercial entities that employ "personalized algorithmic pricing"—the automated practice of dynamically shifting the consumer-facing cost of retail goods or services based on individualized tracking profiles. The statute enforces a rigid operational disclosure requirement, forcing digital merchants and e-commerce platforms to display a clear, concurrent warning to online shoppers whenever an algorithmic optimization backend adjusts a pricing tier based on their specific personal metrics. Furthermore, the legislation completely blocks companies from designing these notification interfaces with deceptive dark patterns, ensuring that the disclosure cannot be buried, masked, or formatted to confuse consumers. Privacy law Governor Ned Lamont signed Public Act 26-64 on May 27, 2026, expanding Connecticut's privacy framework beyond the 2023 Connecticut Data Privacy Act. The law requires data brokers doing business in Connecticut to register with the Department of Consumer Protection, establishes a state-run accessible deletion mechanism inspired by California's DROP platform, bans the sale of consumers' precise geolocation data, and adds transparency rules for personalized algorithmic pricing. Data law Brokers must check the state deletion platform every 45 days for consumer deletion requests and may not sell brokered personal data without registration beginning January 1, 2027. The act also amends the CTDPA with stronger profiling rights, facial-recognition safeguards, and limits on automated license plate reader data sharing in government contracts.

AI-drafted · Attorney-reviewed