Connecticut Attorney General William Tong praised final passage of House Bill 5312, which creates new civil enforcement mechanisms for deepfake digital sexual assault. The legislation allows the AG to pursue civil injunctions and penalties against platforms that disseminate illegal synthetic intimate images, including AI-generated child pornography, and establishes a private right of action for victims. The bill builds on prior Connecticut laws criminalizing unauthorized dissemination of intimate images.
The legislation authorizes the Connecticut Attorney General to seek civil injunctions and monetary penalties against platforms that disseminate unlawful synthetically created intimate images, including AI-generated child pornography. It also establishes a private right of action for victims to sue abusers and platforms hosting such content.
In-house legal teams at social media platforms, AI companies, and user-generated content hosts should review customer terms of service and vendor agreements (including content moderation and AI training vendors) for clauses related to synthetic intimate image prohibitions, takedown timelines, and indemnification for deepfake content. Vendor agreements with content moderation providers should include requirements to detect and remove AI-generated intimate images, including CSAM, in compliance with Connecticut’s new law, as well as penalty allocations for failure to remove such content. Customer agreements should be updated to explicitly prohibit uploading deepfake intimate images, outline takedown procedures, and clarify liability for violations. Additionally, companies should review insurance policies and indemnification clauses to cover potential civil penalties or private lawsuits under the new law.
Entity
None
Industry
Other"Attorney General Tong Statement Praising Passage of Legislation Strengthening Enforcement Against Deepfake Digital Sexual Assault"
"05/07/2026"
"Connecticut"
"legislation creating new civil enforcement mechanisms"
"House Bill No. 5312"
"AI-generated child pornography"
The press release is a weekly roundup of Virginia Attorney General Jay Jones' activities, including updates on vape legislation, joining a 22-state coalition opposing a USPS firearm mailing proposal, filing emergency appeals to the U.S. Supreme Court regarding redistricting, commencement speeches, and Law Day events. No privacy-related enforcement actions are documented.
The FTC is seeking public comment on an Advance Notice of Proposed Rulemaking (ANPRM) to amend the Negative Option Rule, which governs prenotification negative option marketing plans. The rulemaking aims to address deceptive or unfair practices including misleading disclosures, unauthorized billing, and difficult cancellation processes, following over 100,000 consumer complaints about negative option practices in the past five years. Comments will be accepted for 30 days after the ANPRM is published in the Federal Register.
New Jersey Attorney General Matthew Platkin and the Division on Civil Rights (DCR) announced the adoption of comprehensive new rules codifying the prohibition against disparate impact discrimination under the New Jersey Law Against Discrimination (LAD). The rules, published in the New Jersey Register on December 15, 2025, clarify legal standards for disparate impact liability in employment, housing, public accommodations, financial lending, and contracting, including the use of artificial intelligence in employment contexts. The rules do not create new liability but provide clarity on existing LAD protections amid federal rollbacks of disparate impact standards.
$625K
Connecticut reached a $625,000 settlement with Frontier Communications Parent Inc. over an April 2024 breach in which compromised employee and vendor credentials were used to access internal systems and exfiltrate unencrypted personal information of 58,841 Connecticut residents. The settlement requires Frontier to strengthen its security program, implement specific safeguards and training, and obtain an independent third-party assessment.
$2.6M
Connecticut and New York found that Boston Children’s Health Physicians and its security vendor, XTIUM, failed to use reasonable safeguards, resulting in hackers accessing sensitive personal, medical, and employee information. The companies agreed to pay penalties totaling $2.64 million and implement enhanced cybersecurity measures.
Connecticut joined a coalition of state attorneys general filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive information it holds. The states seek protections for children and consumers if the company’s business or assets are sold or transferred; the filing does not impose a fine or other remedy.