Weekly Signal

Week of October 12, 2026

The few developments that change decisions for a small or mid-sized business, with what happened and what it means for you. Published Monday, reviewed by a human before it goes out.

All editions

Employment

Connecticut switched on the half of its AI employment law that has no grace period

What happened. Gibson Dunn's Artificial Intelligence in Employment newsletter, published October 5, 2026, flags that the anti-discrimination provisions of Connecticut Public Act 26-15 took effect October 1, 2026. Section 13 amends the Connecticut Fair Employment Practices Act so that using an automated employment decision technology is not a defense to a complaint alleging a discriminatory employment practice, and a court or the Connecticut Commission on Human Rights and Opportunities may consider evidence of anti-bias testing. The provisions most employers have been planning around are the later ones: the plain-language disclosure that a person is interacting with an automated employment decision technology, and the written notice before a decision where that technology is a substantial factor, apply to technologies deployed on or after October 1, 2027, with a cure opportunity that runs to December 31, 2027. The newsletter also notes that Colorado's enforcement of its own automated-decision law is stayed in xAI v. Weiser until the court rules on a preliminary injunction motion that is not due until 28 days after the implementing rules are final.

What it means for you. Look at which half arrived first. The paperwork is still a year out, and the liability is live now. Until October 1 of last week, an employer in Connecticut could at least argue that a tool made the call. That argument is gone, and the statute invites the other side to ask what testing you did. This cuts both ways, because evidence of anti-bias testing is admissible for you as readily as its absence is admissible against you. The practical consequence is that your defense file has to exist before a claim does. Name every tool that screens, ranks, scores or flags an applicant or an employee, including the ones that came switched on inside software you bought for payroll, scheduling or performance. For each one, write down what you tested, when, who ran the test and what you did about the result. If the vendor ran the testing, get the report rather than the marketing page, and get it in writing that you may produce it. A tool you cannot document is a tool you are carrying uninsured.

Source: Gibson Dunn

Regulation

Colorado published the draft of your January obligations, and the window to argue with it closes October 26

What happened. The Colorado Department of Law released an interim draft of its Automated Decision-Making Technology and Conversational Artificial Intelligence Service rules on October 6, 2026. The formal proposed rules went to the Secretary of State on August 11, 2026, and they implement two statutes that both take effect January 1, 2027: Senate Bill 26-189, the ADMT Act, which repealed and reenacted the automated-decision provisions of the 2024 law, and House Bill 26-1263, the Chatbot Safety Act, signed July 1, 2026. The ADMT Act requires rules before it applies. The Chatbot Safety Act does not, and the attorney general's office is writing them anyway to clarify compliance, including the annual report requirement. Written comments are due October 26, 2026 by 11:59 p.m. MST, and the rulemaking hearing is that same day at 10:00 a.m. in Denver, in person or virtual with prior registration.

What it means for you. Two useful facts sit in that paragraph. The first is a date: the obligations bind on January 1 and the text that defines them is not final yet, which means anyone selling you a finished Colorado compliance package this month is selling you a guess. Read the interim draft against how you really use automated screening, and hold the last of your build until the rules settle. The second is rarer. A regulator has opened a door and set a time on it. If a disclosure requirement is written in a way that a twenty-person company cannot satisfy, October 26 is the day that becomes the record rather than your problem, and a comment from an operator carries weight that a trade association letter does not. Worth noting too: the Chatbot Safety Act reaches conversational AI services, so a support chatbot on your own site may put you inside a rule set you have not been reading. Take the specifics to counsel, because scope here turns on definitions.

Source: Colorado Attorney General

Nothing in the Weekly Signal is legal advice. HEED SAI is not your law firm or your accountant. Where a development touches your obligations, we will tell you what to ask your counsel.

A note on availability

New assignments by referral only

We have been humbled by the amount of work arriving through referrals from clients and colleagues. To protect the quality of what we deliver to the businesses already counting on us, HEED SAI is accepting new assignments by referral only for the moment.

If someone we work with pointed you here, write to info@heedsai.com and tell us who sent you. We read every message, and we will tell you honestly whether we have room.