AI law comparison · Data verified 2026-08-22
California AB 2013 vs Connecticut CTDPA
California AB 2013 and Connecticut CTDPA are two of the 169 AI and data regulations Aegis Firma tracks. They have different scopes, effective dates, and penalties — and many businesses fall under both. Here is the side-by-side, drawn directly from the regulatory registry.
Find which laws apply to my businessSide by side
Summary of publicly available regulatory text. Verify against current official sources before relying on this for compliance decisions. Not legal advice.
The key difference
Connecticut CTDPA takes effect first, so it is usually the more urgent of the two. California AB 2013 tracks 3 compliance requirements and Connecticut CTDPA tracks 15. They are not interchangeable — meeting one does not discharge the other. The practical question is not which law is “stricter,” but which of them — or both — actually applies to your business.
California AB 2013 — Generative AI Training Data Transparency Act
California AB 2013 requires any person or company that designs, codes, produces, or substantially modifies a generative AI system made available to California residents (since January 1, 2022) to publicly post a high-level summary of the training datasets used. This applies to businesses that build their own AI models or substantially customize foundation models — not just those using off-the-shelf AI APIs. If your p…
Full California AB 2013 requirementsConnecticut AI & Data Privacy Stack — PA 26-15 (AI/Online Safety), PA 26-64 (Privacy/Surveillance Pricing), CTDPA as amended by PA 25-113, CID Bulletin MC-25
Connecticut regulates AI through four stacked instruments, three of which are already in force and one of which lands on 1 October 2026. (1) PUBLIC ACT 26-15 (Substitute SB 5, "An Act Concerning Online Safety", Approved 27 May 2026) is Connecticut's AI act. Effective 1 October 2026 it: requires a written key-terms notice and written consumer acceptance before any AI-technology SUBSCRIPTION is entered or renewed (§ 1)…
Full Connecticut CTDPA requirementsCommon questions
Could both California AB 2013 and Connecticut CTDPA apply to my business?
Yes. California AB 2013 and Connecticut CTDPA are separate regulations with separate scopes — a business can fall under both at once. California AB 2013 covers Applies to any person or entity that "designs, codes, produces, or substantially modifies" a generative AI system and makes it available to California residents… Connecticut CTDPA covers CONNECTICUT AI SCOPE IN ONE PLACE — four instruments, four different scope tests, so check each separately rather than assuming one threshold governs. If your operations meet both scopes, you must comply with both. Aegis Firma's free scan checks all 169 tracked regulations against your business profile so you do not have to read each law to find out.
Which has the higher maximum penalty — California AB 2013 or Connecticut CTDPA?
California AB 2013: No statutory penalty — AB 2013 specifies NO monetary penalty amount and names NO enforcer (the statute is silent on enforcement). There is no private right of action. Non-compliance would most likely be pursued by the California Attorney General (or district/city attorneys) under the Unfair Competition Law (Bus. & Prof. Code §17200 et seq.); any monetary exposure derives from that general theory, not from AB 2013 itself. The prior "$5,000 per violation" figure was not in the statute. legal_review_pending. Connecticut CTDPA: CUTPA (the enforcement route for the CTDPA, PA 26-15 §§ 1, 8-11, 15 and PA 26-64): up to $5,000 per willful violation of § 42-110b and up to $25,000 for violating an injunction (Conn. Gen. Stat. § 42-110o, findlaw text "Current as of January 01, 2025"); AG-exclusive, no private right of action. PA 26-15 § 2 (frontier-developer whistleblower duties) carries its own civil penalty of up to $1,000 per violation recoverable by the AG in Hartford Superior Court, plus investigation costs, expert fees and attorney's fees. Insurance: CUIPA penalties of up to $5,000 per act ($50,000 aggregate) for non-willful and up to $25,000 per act ($250,000 per six months) for willful violations, plus licence suspension or revocation (Conn. Gen. Stat. § 38a-817, same findlaw stamp). Penalty structures differ by regulator and violation type — read each law's full page for the cure periods and per-violation detail.
When does each law take effect?
California AB 2013 — effective 2026-01-01. Connecticut CTDPA — effective 2023-07-01, enforcement from 2026-10-01. Dates last verified against official sources on 2026-08-22 and 2026-08-25 respectively.
Related comparisons
Stop guessing which laws apply
Answer a short questionnaire about your business and Aegis Firma tells you exactly which of 169 regulations apply — and what each one requires you to do.
Start free compliance scan