{"name":"AI disclosure laws: U.S. state, federal, EU and UK rules on telling people they are dealing with AI","description":"Every AI disclosure law BotNotice tracks: what must be said, to whom, when, the penalties, who enforces it, and the primary sources. Reviewed weekly. Not legal advice.","url":"https://botnotice.app/datasets/ai-disclosure-laws","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"BotNotice, botnotice.app","version":"2026-11-02","generated_at":"2026-11-11T05:44:40.900Z","schema":{"record":"https://botnotice.app/datasets/ai-disclosure-laws#record","status_values":["in_force","enacted_future","pending","enjoined"],"applies_to_codes":["support_chatbot","sales_chatbot","companion_chatbot","voice_agent","ai_content","synthetic_performers","ai_hiring","healthcare","mental_health","advice","automated_decisions"]},"distribution":{"json":"https://botnotice.app/datasets/ai-disclosure-laws.json","csv":"https://botnotice.app/datasets/ai-disclosure-laws.csv","per_law":"https://botnotice.app/datasets/ai-disclosure-laws/{slug}.json","llms_full":"https://botnotice.app/llms-full.txt"},"count":31,"laws":[{"id":"us-ftc-act-5","slug":"ftc-act-section-5","url":"https://botnotice.app/laws/ftc-act-section-5","jurisdiction":"US-FED","jurisdiction_name":"United States (federal)","name":"FTC Act Section 5: deceptive AI practices","citation":"15 U.S.C. § 45; 16 C.F.R. § 1.98 (penalty amounts)","status":"in_force","effective_date":"1914-09-26","applicability_note":null,"summary":"Section 5 bans deceptive acts and practices in commerce. It has no AI rule and no required AI notice. A practice is deceptive if it is likely to mislead a reasonable consumer on something material, so leading customers to believe they are dealing with a person, when that would matter to their decision, risks a claim. In 2016 the FTC charged the operators of AshleyMadison.com with saying messages came from actual women when they came from fake profiles.","who_must_comply":"Businesses engaged in commerce in the United States, except those the statute leaves out, such as banks and common carriers.","applies_to":[{"code":"support_chatbot","label":"Customer-service / FAQ chatbot"},{"code":"sales_chatbot","label":"Sales, lead-capture, or booking chatbot"},{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"voice_agent","label":"AI phone / voice agent"},{"code":"ai_content","label":"AI-generated marketing text, images, or video"},{"code":"synthetic_performers","label":"AI-generated 'people' in ads"},{"code":"advice","label":"AI giving financial, legal, or medical guidance"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"No set wording. Do not mislead consumers about whether they are interacting with a human or about what your AI can do.","timing":"The statute sets no timing. In practice, before the consumer relies on the interaction.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Do not make claims about your AI that you cannot back up.","Good practice, not a duty in the statute: keep records of what disclosures were made and when."],"exemptions":["No AI exemption. The statute leaves out banks, savings and loans, federal credit unions, common carriers and air carriers."],"penalties":"Orders and injunctions. Civil penalties up to $53,088 per violation apply to violations of FTC rules and orders, and to practices the FTC has already ruled unlawful when the business knew that.","enforcement":"Federal Trade Commission. State attorneys general act under their own consumer laws.","private_right_of_action":false,"sources":[{"title":"15 U.S.C. § 45 (govinfo)","url":"https://www.govinfo.gov/content/pkg/USCODE-2023-title15/html/USCODE-2023-title15-chap2-subchapI-sec45.htm"},{"title":"16 C.F.R. § 1.98 (penalty amounts)","url":"https://www.ecfr.gov/current/title-16/chapter-I/subchapter-A/part-1/subpart-L/section-1.98"},{"title":"FTC Policy Statement on Deception (1983)","url":"https://www.ftc.gov/legal-library/browse/ftc-policy-statement-deception"},{"title":"FTC press release: AshleyMadison.com settlement (Dec 2016)","url":"https://www.ftc.gov/news-events/news/press-releases/2016/12/operators-ashleymadisoncom-settle-ftc-state-charges-resulting-2015-data-breach-exposed-36-million"}],"risk_weight":2,"last_verified":"2026-11-02"},{"id":"us-fcc-tcpa-ai-voice","slug":"fcc-tcpa-ai-voice","url":"https://botnotice.app/laws/fcc-tcpa-ai-voice","jurisdiction":"US-FED","jurisdiction_name":"United States (federal)","name":"TCPA: AI-generated voices are 'artificial or prerecorded' calls","citation":"47 U.S.C. § 227; 47 C.F.R. § 64.1200; FCC Declaratory Ruling, FCC 24-17 (released Feb 8, 2024)","status":"in_force","effective_date":"2024-02-08","applicability_note":null,"summary":"The FCC ruled that calls using AI-generated voices are 'artificial or prerecorded voice' calls under the TCPA. They need the called person's prior express consent unless there is an emergency purpose or an exemption, and the message must identify who is responsible for the call at the start. In 2024 the FCC also proposed an AI disclosure at the start of these calls (FCC 24-84), but the current rule text has none.","who_must_comply":"Anyone placing AI-voice calls to U.S. residential or mobile numbers.","applies_to":[{"code":"voice_agent","label":"AI phone / voice agent"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"State clearly who is responsible for the call at the beginning of the message, and give a phone number during or after it. A federal AI-voice notice is proposed, not required. California has its own rule.","timing":"At the beginning of the message.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Get prior express consent, in writing for telemarketing.","Place telephone solicitations only between 8am and 9pm at the called person's location.","Offer an automated opt-out in telemarketing messages, and honor a request to revoke consent within a reasonable time, at most ten business days."],"exemptions":["Calls for an emergency purpose.","Calls exempted by the statute or FCC rule."],"penalties":"In private suits, $500 per call or actual loss if greater, up to three times that if willful or knowing, with no cap in the statute. FCC forfeitures are separate.","enforcement":"FCC, state attorneys general, and private plaintiffs.","private_right_of_action":true,"sources":[{"title":"47 U.S.C. § 227 (govinfo)","url":"https://www.govinfo.gov/content/pkg/USCODE-2023-title47/html/USCODE-2023-title47-chap5-subchapII-partI-sec227.htm"},{"title":"47 C.F.R. § 64.1200","url":"https://www.ecfr.gov/current/title-47/chapter-I/subchapter-B/part-64/subpart-L/section-64.1200"},{"title":"FCC 24-17, Declaratory Ruling","url":"https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf"},{"title":"FCC 24-84, proposed rule (Federal Register, Sept 10, 2024)","url":"https://www.govinfo.gov/content/pkg/FR-2024-09-10/html/2024-19028.htm"}],"risk_weight":4,"last_verified":"2026-11-02"},{"id":"us-ca-bot-act","slug":"california-bot-act","url":"https://botnotice.app/laws/california-bot-act","jurisdiction":"CA","jurisdiction_name":"California","name":"California B.O.T. Act (SB 1001)","citation":"Cal. Bus. & Prof. Code §§ 17940–17943","status":"in_force","effective_date":"2019-07-01","applicability_note":null,"summary":"Makes it unlawful to use a bot to communicate with a person in California with intent to mislead about its artificial identity in order to incentivize a purchase or influence a vote, unless the bot is clearly disclosed. Applies to online platforms with 10 million or more unique monthly U.S. visitors.","who_must_comply":"Operators of bots on public platforms with 10M+ unique monthly U.S. visitors (very large sites, social networks, marketplaces).","applies_to":[{"code":"sales_chatbot","label":"Sales, lead-capture, or booking chatbot"},{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"A clear, conspicuous disclosure reasonably designed to inform the person that they are interacting with a bot.","timing":"Before or during the interaction; safest at the start.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":[],"exemptions":["Platforms below the 10M monthly U.S. visitor threshold.","Bots that do not attempt to incentivize a sale or influence a vote."],"penalties":"Enforced through California's Unfair Competition Law (civil penalties up to $2,500 per violation).","enforcement":"California Attorney General and public prosecutors.","private_right_of_action":false,"sources":[{"title":"Cal. Bus. & Prof. Code § 17940 (Justia)","url":"https://law.justia.com/codes/california/code-bpc/division-7/part-3/chapter-6/section-17940/"},{"title":"Perkins Coie — California's new law requires disclosure of use of bots","url":"https://perkinscoie.com/insights/update/i-am-robot-californias-new-law-requires-disclosure-use-bots"}],"risk_weight":1,"last_verified":"2026-09-09"},{"id":"us-ca-sb243","slug":"california-sb-243-companion-chatbots","url":"https://botnotice.app/laws/california-sb-243-companion-chatbots","jurisdiction":"CA","jurisdiction_name":"California","name":"California Companion Chatbot Law (SB 243)","citation":"Cal. Bus. & Prof. Code § 22601 et seq. (SB 243, 2025)","status":"in_force","effective_date":"2026-01-01","applicability_note":"SB 1119 (Adam's Law, Chapter 190, signed Sept 10, 2026) rewrites § 22602. From Jan 1, 2027, the extra duties for known minors in § 22602 (the three-hour reminder and break prompts) are removed from this section. From July 1, 2027, new §§ 21810 to 21818 apply to operators that allow users under 18: an AI notice for children that is repeated during long chats, a one-hour session limit and two-hour daily limit by default, parental controls, crisis steps and risk assessments.","summary":"Operators of 'companion chatbots' — AI with a natural-language interface that gives adaptive, human-like responses and can meet a user's social needs or sustain a relationship across interactions — must clearly disclose that the chatbot is AI whenever a reasonable person could be misled, maintain suicide/self-harm protocols, and apply extra rules for minors. Annual reporting to the Office of Suicide Prevention begins July 1, 2027.","who_must_comply":"Anyone who makes a companion chatbot available to users in California. Bots that remember users, personalize, check in, or build rapport can qualify even if they started as e-commerce assistants.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":true,"excludes_plain_support_bots":true,"disclosure":{"required":"Clear and conspicuous notice that the chatbot is artificially generated and not human; a notice that the chatbot may not be suitable for some minors on the app or site.","timing":"Whenever a reasonable person could be misled; for known minors, at least every three hours during continuing use, plus break reminders.","re_disclose_hours":null,"re_disclose_hours_minors":3,"when_asked":false,"minor_notice":true},"other_duties":["Publish and maintain a protocol for detecting and responding to suicidal ideation or self-harm, with referral to crisis services.","For known minors: prevent sexually explicit content and remind them to take breaks.","From July 1, 2027, file annual reports with the California Office of Suicide Prevention.","From July 1, 2027, if users under 18 are allowed: follow Adam's Law (SB 1119), including a repeated AI notice written for children, default time limits, parental controls and published child-safety policies."],"exemptions":["Bots used only for customer service, business operations, productivity, internal research, or technical assistance.","Video-game bots that only discuss the game.","Stand-alone consumer electronic voice assistants that do not sustain relationships."],"penalties":"Private right of action: the greater of $1,000 per violation or actual damages, plus injunctive relief and attorney's fees.","enforcement":"Private lawsuits; California Attorney General.","private_right_of_action":true,"sources":[{"title":"SB 243 bill text (California Legislative Information)","url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260SB243"},{"title":"Future of Privacy Forum — Understanding the new wave of chatbot legislation","url":"https://fpf.org/blog/understanding-the-new-wave-of-chatbot-legislation-california-sb-243-and-beyond/"},{"title":"Troutman — Analyzing the new AI companion chatbot laws (Jan 2026)","url":"https://www.troutmanprivacy.com/2026/01/analyzing-the-new-ai-companion-chatbot-laws/"},{"title":"SB 1119 (Adam's Law), Chapter 190, 2026 (California Legislative Information)","url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260SB1119"}],"risk_weight":5,"last_verified":"2026-10-08"},{"id":"us-ca-ab2905-voice","slug":"california-ab-2905-ai-voice-calls","url":"https://botnotice.app/laws/california-ab-2905-ai-voice-calls","jurisdiction":"CA","jurisdiction_name":"California","name":"California AI-voice robocall disclosure (AB 2905)","citation":"Cal. Pub. Util. Code § 2874, as amended by AB 2905 (Chapter 316, 2024)","status":"in_force","effective_date":"2025-01-01","applicability_note":null,"summary":"Before an automatic dialing-announcing device plays a prerecorded message, a live natural voice must give the nature of the call and the business's name, address and phone number, ask whether the person agrees to hear the message, and say so if the message uses an artificial voice. An artificial voice is one generated or significantly altered using AI. The law speaks of prerecorded messages and does not say how it treats a live conversational AI agent.","who_must_comply":"Anyone placing calls with an automatic dialing-announcing device: equipment that stores or generates numbers and plays a prerecorded message.","applies_to":[{"code":"voice_agent","label":"AI phone / voice agent"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"An unrecorded, natural voice announcement with the nature of the call, the business's name, address and phone number, a question asking for consent to hear the message, and a statement that the message uses an artificial voice, if it does.","timing":"Before the prerecorded message plays.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["These calls need a prior agreement with the person called or this live announcement (§ 2873).","No calls received in California between 9pm and 9am (§ 2872).","Apply to the phone company before connecting the device (§ 2875)."],"exemptions":["A device not used to dial randomly or in sequence that only messages an established customer or associate, and calls the recipient asked for.","Schools, tax-exempt groups contacting members, and cable and utility companies, for the purposes listed in § 2872.","Public safety and emergency calls by the agencies listed in § 2872."],"penalties":"A fine up to $500 per violation, disconnection of the device's phone service, or both, set by the Public Utilities Commission.","enforcement":"California Public Utilities Commission.","private_right_of_action":false,"sources":[{"title":"AB 2905, Chapter 316, 2024 (California Legislative Information)","url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB2905"},{"title":"Cal. Pub. Util. Code §§ 2871 to 2876","url":"https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?lawCode=PUC&division=1.&title=&part=2.&chapter=10.&article=1."}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-ca-ab1609-customer-service","slug":"california-ab-1609-customer-service-chatbots","url":"https://botnotice.app/laws/california-ab-1609-customer-service-chatbots","jurisdiction":"CA","jurisdiction_name":"California","name":"California Customer Service Chatbots (AB 1609)","citation":"Cal. Bus. & Prof. Code §§ 22625 to 22629 (AB 1609, Chapter 733, 2026)","status":"enacted_future","effective_date":"2027-01-01","applicability_note":"Signed Sept 28, 2026. No later operative date in the bill, so it starts Jan 1, 2027. Covers only businesses with more than $500 million in gross annual revenue nationally.","summary":"Large businesses must not say a customer service chatbot is a human. If a reasonable person could think the chatbot is a person, the business must show a clear notice that it is AI and not human, in the same channel the chatbot uses. During business hours, customers must have a simple way to ask for a human on every customer service channel, and the business must make a good faith effort to connect them within 15 minutes or book a call within one business day. Hold times are limited to 15 minutes at a time and one hour in total.","who_must_comply":"Businesses with more than $500 million in gross annual revenue nationally that use a customer service chatbot with customers whose account address is in California.","applies_to":[{"code":"support_chatbot","label":"Customer-service / FAQ chatbot"},{"code":"sales_chatbot","label":"Sales, lead-capture, or booking chatbot"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"A clear and conspicuous notice that the customer service chatbot is artificially generated and not human.","timing":"When a reasonable person could think they are talking to a human; in the same channel the chatbot uses.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Offer a simple way to ask for a human agent on every customer service channel during regular business hours.","Make a good faith effort to connect the customer to a human within 15 minutes, or set a call within one business day.","Keep hold times to 15 minutes at a time and one hour in total.","Post the customer service phone number clearly on the website, if the business has phone support."],"exemptions":["Businesses with $500 million or less in gross annual revenue.","Internal and business-to-business lines.","Hospitals, for health care communications.","Consumer reporting agencies.","Telecom and water services covered by CPUC General Orders 133 and 103-A."],"penalties":"Up to $5,000 for a first violation and $10,000 for each later violation.","enforcement":"Public prosecutors only. No private right of action.","private_right_of_action":false,"sources":[{"title":"AB 1609 chaptered text (California Legislative Information)","url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260AB1609"}],"risk_weight":2,"last_verified":"2026-10-08"},{"id":"us-ca-ai-transparency-act","slug":"california-ai-transparency-act","url":"https://botnotice.app/laws/california-ai-transparency-act","jurisdiction":"CA","jurisdiction_name":"California","name":"California AI Transparency Act (SB 942 / AB 853 / SB 1000)","citation":"Cal. Bus. & Prof. Code § 22757 et seq., as amended by SB 1000 (Chapter 861, 2026)","status":"in_force","effective_date":"2026-08-02","applicability_note":"Operative Aug 2, 2026 (§ 22757.6). SB 1000, an urgency law effective Sept 30, 2026, removed the one-million-user threshold and the visible-label duty, renamed the AI detection tool a disclosure verification tool, and added a $50,000 penalty for falsely claiming a system is assistive technology. AB 853 added duties for large online platforms (Jan 1, 2027; § 22757.3.1), GenAI hosting platforms (Jan 1, 2027; § 22757.3.2) and capture device makers (Jan 1, 2028; § 22757.3.3).","summary":"From Aug 2, 2026, anyone who creates, codes or produces a generative AI system that is publicly accessible in California is a covered provider, with no size threshold since SB 1000. A covered provider must offer a free disclosure verification tool and, where technically feasible, embed a latent (machine-readable) provenance disclosure in images, audio and video the system creates or alters. From Jan 1, 2027, large online platforms (social media, file-sharing, mass messaging and search services with over two million monthly users) must detect standards-based provenance data, show users what it says and let them inspect it, and must not knowingly strip it. Also from Jan 1, 2027, hosting platforms must not knowingly offer a GenAI system that does not place these disclosures. From Jan 1, 2028, new cameras and phones sold in California must embed provenance by default. A business that only uses another company's AI tool is not a covered provider for that reason, but a small business that builds and publishes its own generative AI system can be. AI images and video posted to large platforms will show the provenance data they carry.","who_must_comply":"Anyone who creates, codes or produces a generative AI system publicly accessible in California, at any size; large online platforms with 2M+ monthly users; GenAI hosting platforms; capture device manufacturers.","applies_to":[{"code":"ai_content","label":"AI-generated marketing text, images, or video"},{"code":"synthetic_performers","label":"AI-generated 'people' in ads"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"Latent provenance disclosures in AI-generated images, audio and video, where technically feasible; platform display of provenance to users from 2027. The law no longer requires an optional visible label.","timing":"At generation (covered providers, from Aug 2, 2026); at distribution (large platforms, from Jan 1, 2027); at capture (devices first produced for sale from Jan 1, 2028).","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Covered providers must tell anyone they license a GenAI system to about these duties, and act within 72 hours if they learn a licensee changed the system so it no longer meets these rules.","Businesses that only publish AI media have no duty under this Act, but keeping the provenance data their tools attach matches the rule platforms must follow. Check that your website or CMS keeps it on upload.","Expect AI-made images and video posted to Instagram, YouTube, TikTok and similar to show their provenance data from 2027, and decide what your own site says about the same content."],"exemptions":["Products and services that provide only non-user-generated video games.","GenAI systems designed to primarily function as assistive technology, until Jan 1, 2029.","Platforms under the 2M monthly-user threshold; broadband and telecommunications services."],"penalties":"$5,000 per violation; each day in violation is a separate violation. A prevailing plaintiff recovers attorney's fees and costs. Falsely claiming a system is assistive technology: $50,000 per violation, each day separate, until Jan 1, 2029.","enforcement":"California Attorney General, city attorneys, county counsel.","private_right_of_action":false,"sources":[{"title":"Cal. Bus. & Prof. Code § 22757.1 (definitions)","url":"https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=22757.1.&lawCode=BPC"},{"title":"Cal. Bus. & Prof. Code § 22757.3 (latent disclosures)","url":"https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=22757.3.&lawCode=BPC"},{"title":"Cal. Bus. & Prof. Code § 22757.3.1 (large online platforms)","url":"https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=22757.3.1.&lawCode=BPC"},{"title":"Cal. Bus. & Prof. Code § 22757.4 (enforcement)","url":"https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=22757.4.&lawCode=BPC"},{"title":"SB 1000, Chapter 861, 2026 (California Legislative Information)","url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260SB1000"},{"title":"AB 853 (2025) bill text","url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260AB853"}],"risk_weight":1,"last_verified":"2026-11-02"},{"id":"us-ny-ai-companion","slug":"new-york-ai-companion-law","url":"https://botnotice.app/laws/new-york-ai-companion-law","jurisdiction":"NY","jurisdiction_name":"New York","name":"New York AI Companion Models Law","citation":"N.Y. Gen. Bus. Law Art. 47, § 1700 et seq. (2025 budget, S-3008C)","status":"in_force","effective_date":"2025-11-05","applicability_note":null,"summary":"Operators of 'AI companions' (systems designed to simulate a sustained human-like relationship by retaining past interactions and preferences, asking unprompted emotion-based questions, and sustaining a dialogue on personal matters) must tell users clearly that they are not talking to a human at the start of an interaction, which need not happen more than once a day, and at least every three hours during continuing interactions. They must also detect and respond to expressions of suicidal ideation or self-harm with crisis referrals.","who_must_comply":"Any operator providing an AI companion to New York users.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":true,"excludes_plain_support_bots":true,"disclosure":{"required":"Clear and conspicuous notification, verbally or in writing, that the user is not communicating with a human.","timing":"At the beginning of an interaction (need not exceed once per day) and at least once every three hours during continuing interactions.","re_disclose_hours":3,"re_disclose_hours_minors":3,"when_asked":false,"minor_notice":false},"other_duties":["Maintain a protocol to detect suicidal ideation or self-harm and refer users to crisis services (e.g., 988)."],"exemptions":["Systems a business uses solely for customer service or to give information about its own products and services.","Systems primarily designed and marketed for efficiency, research or technical assistance.","Systems a business uses solely for internal purposes or employee productivity."],"penalties":"Civil penalties up to $15,000 per day of violation, plus injunctive relief.","enforcement":"New York Attorney General only.","private_right_of_action":false,"sources":[{"title":"N.Y. Gen. Bus. Law § 1700 (definitions)","url":"https://www.nysenate.gov/legislation/laws/GBS/1700"},{"title":"N.Y. Gen. Bus. Law § 1701 (crisis protocol)","url":"https://www.nysenate.gov/legislation/laws/GBS/1701"},{"title":"N.Y. Gen. Bus. Law § 1702 (notifications)","url":"https://www.nysenate.gov/legislation/laws/GBS/1702"},{"title":"N.Y. Gen. Bus. Law § 1703 (enforcement)","url":"https://www.nysenate.gov/legislation/laws/GBS/1703"}],"risk_weight":5,"last_verified":"2026-11-02"},{"id":"us-ny-synthetic-performers","slug":"new-york-synthetic-performer-ads","url":"https://botnotice.app/laws/new-york-synthetic-performer-ads","jurisdiction":"NY","jurisdiction_name":"New York","name":"New York Synthetic Performer Disclosure in Advertising","citation":"N.Y. Gen. Bus. Law § 396-b as amended (S.8420-A / A.8887-B)","status":"in_force","effective_date":"2026-06-09","applicability_note":null,"summary":"Anyone who produces or creates an ad for a commercial purpose must conspicuously disclose a 'synthetic performer' in it, when they actually know one is there. A synthetic performer is a digitally created asset meant to look like a human performer who is not recognizable as any real person.","who_must_comply":"Any business dealing in property or services that produces or creates an ad with a synthetic performer, with actual knowledge of it. Media that only carry the ad are not covered.","applies_to":[{"code":"synthetic_performers","label":"AI-generated 'people' in ads"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"A conspicuous disclosure in the ad that it contains a synthetic performer.","timing":"Displayed with the advertisement.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":[],"exemptions":["Audio ads.","AI used solely to translate a human performer's language.","Ads for expressive works such as films, shows and games, if the performer is used consistently with the work.","Media that publish or carry the ad, such as newspapers, broadcasters, streaming services and billboards."],"penalties":"$1,000 for a first violation; $5,000 for each subsequent violation.","enforcement":"Civil penalty set by the statute; § 396-b does not name who enforces it.","private_right_of_action":false,"sources":[{"title":"N.Y. Gen. Bus. Law § 396-b","url":"https://www.nysenate.gov/legislation/laws/GBS/396-B"},{"title":"S.8420-A (NY State Senate)","url":"https://www.nysenate.gov/legislation/bills/2025/S8420/amendment/A"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-nyc-ll144","slug":"nyc-local-law-144-aedt","url":"https://botnotice.app/laws/nyc-local-law-144-aedt","jurisdiction":"NYC","jurisdiction_name":"New York City","name":"NYC Automated Employment Decision Tools Law (Local Law 144)","citation":"N.Y.C. Admin. Code § 20-870 et seq.","status":"in_force","effective_date":"2023-07-05","applicability_note":null,"summary":"Employers and agencies that use automated tools to substantially assist hiring or promotion decisions for NYC candidates must commission an annual independent bias audit, publish a summary, and give candidates notice at least 10 business days before the tool is used. A December 2025 Comptroller audit found enforcement had been weak and the city has committed to stricter enforcement in 2026.","who_must_comply":"Employers and employment agencies using AI screening for jobs located in New York City.","applies_to":[{"code":"ai_hiring","label":"AI in hiring, screening, or HR decisions"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"Notice that an automated employment decision tool will be used, the job qualifications it assesses, and how to request an alternative process; publish the bias-audit summary on your website.","timing":"At least 10 business days before the tool is used (job posting, email, or website notice).","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Annual independent bias audit with published impact ratios."],"exemptions":["Tools that do not substantially assist or replace human discretion."],"penalties":"$500 for a first violation and $500–$1,500 for each subsequent violation, per day.","enforcement":"NYC Department of Consumer and Worker Protection.","private_right_of_action":false,"sources":[{"title":"NYC DCWP — Automated Employment Decision Tools","url":"https://www.nyc.gov/site/dca/about/automated-employment-decision-tools.page"}],"risk_weight":3,"last_verified":"2026-09-09"},{"id":"us-me-chatbot-disclosure","slug":"maine-chatbot-disclosure-act","url":"https://botnotice.app/laws/maine-chatbot-disclosure-act","jurisdiction":"ME","jurisdiction_name":"Maine","name":"Maine Chatbot Disclosure Act (LD 1727)","citation":"10 M.R.S. § 1500-DD (PL 2025, c. 294)","status":"in_force","effective_date":"2025-09-24","applicability_note":null,"summary":"The broadest chatbot law in the country: no person may use an AI chatbot or any other computer technology to engage in trade or commerce with a consumer in a way that may mislead a reasonable consumer into believing they are dealing with a human, unless the consumer is clearly and conspicuously told they are not engaging with a human. There is no customer-service carve-out.","who_must_comply":"Every business using a chatbot, voice bot, or similar technology with Maine consumers, including ordinary customer-service bots.","applies_to":[{"code":"support_chatbot","label":"Customer-service / FAQ chatbot"},{"code":"sales_chatbot","label":"Sales, lead-capture, or booking chatbot"},{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"voice_agent","label":"AI phone / voice agent"},{"code":"advice","label":"AI giving financial, legal, or medical guidance"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"A clear and conspicuous notification that the consumer is not engaging with a human being.","timing":"The statute sets no timing or interval. The notice must reach the consumer before they could be misled, so in practice at the start of the interaction.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":[],"exemptions":["None written into the statute. The test is whether a reasonable consumer could be misled."],"penalties":"A violation is a violation of the Maine Unfair Trade Practices Act: Attorney General civil penalties (up to $10,000 per intentional violation) and suits by consumers who bought goods or services for personal use and lost money or property.","enforcement":"Maine Attorney General; consumers under the UTPA.","private_right_of_action":true,"sources":[{"title":"10 M.R.S. § 1500-DD (Maine Legislature)","url":"https://legislature.maine.gov/statutes/10/title10sec1500-DD-1.html"},{"title":"5 M.R.S. § 209 (Attorney General actions and civil penalties)","url":"https://legislature.maine.gov/statutes/5/title5sec209.html"},{"title":"5 M.R.S. § 213 (private remedies)","url":"https://legislature.maine.gov/statutes/5/title5sec213.html"},{"title":"Verrill: Maine law now requires limited disclosures of AI technology","url":"https://www.verrill-law.com/news/maine-law-now-requires-limited-disclosures-of-artificial-intelligence-technology/"}],"risk_weight":5,"last_verified":"2026-11-02"},{"id":"us-me-ai-therapy","slug":"maine-ai-mental-health-ld-2082","url":"https://botnotice.app/laws/maine-ai-mental-health-ld-2082","jurisdiction":"ME","jurisdiction_name":"Maine","name":"Maine restrictions on AI mental health services (LD 2082)","citation":"10 M.R.S. § 1500-EE (PL 2025, c. 687)","status":"in_force","effective_date":"2026-07-29","applicability_note":"Not an emergency law, so it took effect with the session's other laws on July 29, 2026.","summary":"No one may provide, advertise or offer therapy or psychotherapy services to the public, including through internet-based AI, unless the services are provided by a licensed professional. These services mean diagnosing, treating or addressing mental or behavioral health through therapeutic communication in a clinical or professional setting. A violation is a violation of the Maine Unfair Trade Practices Act.","who_must_comply":"Anyone providing, advertising or offering therapy or psychotherapy services to the public in Maine, including through AI.","applies_to":[{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"No AI notice is required. Do not provide or offer AI therapy unless a licensed professional provides the services.","timing":"Ongoing.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":[],"exemptions":["AI used solely within a research project approved by an institutional review board and run under federal human-subject protections."],"penalties":"A violation is a violation of the Maine Unfair Trade Practices Act: Attorney General civil penalties (up to $10,000 per intentional violation) and suits by consumers who bought goods or services for personal use and lost money or property.","enforcement":"Maine Attorney General; consumers under the UTPA.","private_right_of_action":true,"sources":[{"title":"10 M.R.S. § 1500-EE (Maine Legislature)","url":"https://legislature.maine.gov/statutes/10/title10sec1500-EE-2.html"},{"title":"PL 2025, c. 687 (LD 2082)","url":"https://legislature.maine.gov/legis/bills/getPDF.asp?paper=HP1397&item=3&snum=132"},{"title":"5 M.R.S. § 209 (Attorney General actions and civil penalties)","url":"https://legislature.maine.gov/statutes/5/title5sec209.html"},{"title":"5 M.R.S. § 213 (private remedies)","url":"https://legislature.maine.gov/statutes/5/title5sec213.html"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-ut-aipa","slug":"utah-ai-policy-act","url":"https://botnotice.app/laws/utah-ai-policy-act","jurisdiction":"UT","jurisdiction_name":"Utah","name":"Utah Artificial Intelligence Policy Act (SB 149, as amended by SB 226 and SB 332)","citation":"Utah Code ch. 13-77 (generative AI disclosures); ch. 13-72 (AI Policy Act)","status":"in_force","effective_date":"2024-05-01","applicability_note":"SB 226 replaced the original rule (§ 13-2-12) with the disclosure rules now in chapter 13-77, effective May 7, 2025. Only chapter 13-72, which sets up Utah's AI office and learning lab, is scheduled for repeal on July 1, 2027. Chapter 13-77 has no repeal date.","summary":"A supplier using generative AI with a person in a consumer transaction must say it is AI, not a human, when the person clearly asks. A stricter rule applies to people in occupations licensed or certified through the Department of Commerce: when AI in their services is a high-risk interaction (collecting health, financial or biometric data, or giving personalized financial, legal, medical or mental health advice), they must disclose it prominently, out loud at the start of a spoken interaction or in writing before a written one. A clear AI notice at the outset and throughout the interaction is a safe harbor from enforcement of both rules.","who_must_comply":"Suppliers using generative AI in consumer transactions with people in Utah; people in Department of Commerce regulated occupations when AI use is high-risk.","applies_to":[{"code":"support_chatbot","label":"Customer-service / FAQ chatbot"},{"code":"sales_chatbot","label":"Sales, lead-capture, or booking chatbot"},{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"voice_agent","label":"AI phone / voice agent"},{"code":"advice","label":"AI giving financial, legal, or medical guidance"},{"code":"healthcare","label":"AI in patient diagnosis, treatment, or care"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"Disclosure that the person is interacting with generative AI, not a human. Prominent disclosure for high-risk use in a regulated occupation.","timing":"When the person clearly asks; for high-risk use in a regulated occupation, at the start of a spoken interaction and before a written one.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":true,"minor_notice":false},"other_duties":["Configure your bot to answer truthfully when asked 'Am I talking to a human / a bot?'","People in regulated occupations must still meet all the rules of their occupation when using generative AI.","'The AI did it' is no defense to a violation of a consumer law the Division enforces."],"exemptions":["Safe harbor: no enforcement action under these disclosure rules if the AI clearly and conspicuously says it is AI or not human, at the outset and throughout the interaction."],"penalties":"Administrative fines up to $2,500 per violation, plus court-ordered remedies; up to $5,000 per violation for violating an administrative or court order.","enforcement":"Utah Division of Consumer Protection.","private_right_of_action":false,"sources":[{"title":"Utah Code ch. 13-77 (generative AI disclosures)","url":"https://le.utah.gov/xcode/Title13/Chapter77/13-77.html"},{"title":"Utah Code § 13-77-103 (required disclosures)","url":"https://le.utah.gov/xcode/Title13/Chapter77/C13-77-S103_2025050720250507.html"},{"title":"Utah Code § 13-77-104 (safe harbor)","url":"https://le.utah.gov/xcode/Title13/Chapter77/C13-77-S104_2025050720250507.html"},{"title":"SB 226 enrolled (2025)","url":"https://le.utah.gov/Session/2025/bills/enrolled/SB0226.pdf"},{"title":"Utah Code § 63I-2-213 (repeal dates)","url":"https://le.utah.gov/xcode/Title63I/Chapter2/63I-2-S213.html"}],"risk_weight":4,"last_verified":"2026-11-02"},{"id":"us-ut-hb452","slug":"utah-mental-health-chatbots-hb-452","url":"https://botnotice.app/laws/utah-mental-health-chatbots-hb-452","jurisdiction":"UT","jurisdiction_name":"Utah","name":"Utah Mental Health Chatbot Law (HB 452)","citation":"Utah Code § 13-72a-101 et seq.","status":"in_force","effective_date":"2025-05-07","applicability_note":null,"summary":"Suppliers of AI mental-health chatbots must disclose that the chatbot is AI, not a human, before a user can access it, again if the user has not used it for seven days, and whenever the user asks. They must not sell or share users' health information or input, must label any ad shown in a conversation along with any sponsorship, and must not use what a user types to target ads.","who_must_comply":"Suppliers of a chatbot that talks with Utah users like a licensed therapist would, and that the supplier represents, or a reasonable person would believe, can provide therapy or help manage or treat mental health conditions.","applies_to":[{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"Clear and conspicuous disclosure that the chatbot is an AI technology and not a human.","timing":"Before access, at the start of an interaction if the user has not used the chatbot in the previous seven days, and whenever asked.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":true,"minor_notice":false},"other_duties":["Clearly label any ad shown in a conversation and disclose any sponsorship or affiliation.","Do not use a user's input to choose or customize ads.","Do not sell or share a user's identifiable health information or input, with limited exceptions."],"exemptions":["AI that only gives scripted output, such as guided meditations or mindfulness exercises.","AI that only analyzes input to connect someone with a human therapist."],"penalties":"Up to $2,500 per violation, plus court-ordered remedies; up to $5,000 per violation for violating an administrative or court order.","enforcement":"Utah Division of Consumer Protection.","private_right_of_action":false,"sources":[{"title":"Utah Code ch. 13-72a","url":"https://le.utah.gov/xcode/Title13/Chapter72a/13-72a.html"},{"title":"Utah Code § 13-72a-101 (definitions)","url":"https://le.utah.gov/xcode/Title13/Chapter72A/C13-72a-S101_2026050620260506.pdf"}],"risk_weight":4,"last_verified":"2026-11-02"},{"id":"us-ut-hb276","slug":"utah-digital-content-provenance-standards-act","url":"https://botnotice.app/laws/utah-digital-content-provenance-standards-act","jurisdiction":"UT","jurisdiction_name":"Utah","name":"Utah Digital Content Provenance Standards Act (HB 276)","citation":"Utah Code ch. 13-72c (HB 276, Laws of Utah 2026, ch. 352)","status":"enacted_future","effective_date":"2027-01-01","applicability_note":"The capture device duty applies to devices produced for sale on or after Jan 1, 2028. Utah's code site marks the chapter \"Affected by 63I-2-213 on 7/1/2027\", but the current text of that section repeals only chapter 72, and HB 276 does not amend it.","summary":"From Jan 1, 2027, anyone who produces a publicly accessible generative AI system with over one million monthly visitors or users must embed a latent (machine-readable) disclosure in images, video and audio the system creates or substantially modifies. Social media, mass messaging and search platforms with over two million monthly users must detect standards-based provenance data, show users it exists and let them inspect it, and must not knowingly strip it. From 2028, new cameras and phones sold in Utah must embed a latent disclosure, which users may turn off.","who_must_comply":"Makers of generative AI systems with over 1M monthly visitors or users; large online platforms with over 2M monthly users; capture device manufacturers.","applies_to":[{"code":"ai_content","label":"AI-generated marketing text, images, or video"},{"code":"synthetic_performers","label":"AI-generated 'people' in ads"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"A latent disclosure in AI-created or substantially modified images, video and audio, with the time and date, and digital signatures that can show AI use or the other detail § 13-72c-203 lists, as far as technically feasible and reasonable. Platforms must tell users when provenance data is available.","timing":"At generation (AI system makers); on the platform (large platforms); at capture (devices produced for sale from Jan 1, 2028).","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Large platforms must let users inspect provenance data directly, by download or by link, and must not knowingly strip it, as far as technically feasible.","A business that only uses another company's AI tool is not named in the act. Keeping the provenance data its tools attach matches the rule platforms must follow."],"exemptions":["AI systems used only for a business's internal operations and not made public.","AI systems at or under one million monthly visitors or users.","Platforms at or under two million monthly users; broadband and telecommunications services."],"penalties":"Administrative fines or court fines up to $2,500 per violation, plus injunctions, disgorgement and the state's fees and costs; up to $5,000 per violation of an administrative or court order.","enforcement":"Utah Division of Consumer Protection. The Attorney General may sue to collect civil penalties.","private_right_of_action":false,"sources":[{"title":"Utah Code ch. 13-72c (Utah Legislature)","url":"https://le.utah.gov/xcode/Title13/Chapter72C/C13-72c_2026050620270101.pdf"},{"title":"HB 276 enrolled (2026)","url":"https://le.utah.gov/Session/2026/bills/enrolled/HB0276.pdf"},{"title":"Utah Code § 63I-2-213 (repeal dates)","url":"https://le.utah.gov/xcode/Title63I/Chapter2/63I-2-S213.html"}],"risk_weight":1,"last_verified":"2026-11-02"},{"id":"us-co-ai-act","slug":"colorado-ai-act","url":"https://botnotice.app/laws/colorado-ai-act","jurisdiction":"CO","jurisdiction_name":"Colorado","name":"Colorado Artificial Intelligence Act (SB 24-205, rewritten by SB 26-189)","citation":"C.R.S. § 6-1-1701 et seq. as repealed and reenacted by SB 26-189 (signed May 14, 2026)","status":"enacted_future","effective_date":"2027-01-01","applicability_note":"Applies to consequential decisions made on or after Jan 1, 2027. AG rules are due by that date. Until Jan 1, 2030, the AG must give notice and 60 days to cure if a cure is possible, unless the violation is knowing or repeated.","summary":"A deployer using automated decision-making technology to materially influence a consequential decision (education, employment, housing, lending, insurance, health care, essential government services) must give notice first. A prominent public notice at points of consumer interaction meets that duty. After an adverse outcome it must explain the technology's role within 30 days and offer correction of data and meaningful human review. Developers must give deployers documentation. The 2024 duty to tell consumers they are interacting with AI is not in the rewritten act.","who_must_comply":"Developers and deployers of automated decision-making technology that materially influences consequential decisions about Colorado consumers.","applies_to":[{"code":"automated_decisions","label":"AI deciding eligibility (credit, housing, insurance, benefits)"},{"code":"ai_hiring","label":"AI in hiring, screening, or HR decisions"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"A clear and conspicuous notice that the technology is or will be used in a consequential decision, and how to get more information. After an adverse outcome, a plain-language description of its role and of the consumer's rights.","timing":"Before the technology is used in the decision; within 30 days after an adverse outcome.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Keep records for at least three years after the decision.","Offer correction of factually incorrect personal data and meaningful human review after an adverse outcome.","Developers: give deployers documentation on intended uses, training data, limitations and human review."],"exemptions":["Low-stakes or routine decisions, including scheduling, customer service triage and communicating decisions.","Advertising, marketing, product recommendations, search and content moderation.","HIPAA covered entities and their business associates, except for employment decisions. They must still give patients a general notice.","Insurers subject to C.R.S. § 10-3-1104.9, in the practice of insurance.","FDA-overseen medical devices and related research."],"penalties":"A deceptive trade practice under the Colorado Consumer Protection Act: civil penalties up to $20,000 per violation, or $50,000 if committed against an elderly person.","enforcement":"Colorado Attorney General only.","private_right_of_action":false,"sources":[{"title":"SB 26-189 bill page, with the signed act (Colorado General Assembly)","url":"https://leg.colorado.gov/bills/sb26-189"},{"title":"HB 19-1289 (Consumer Protection Act penalty amounts)","url":"https://leg.colorado.gov/bills/HB19-1289"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-tx-traiga","slug":"texas-responsible-ai-governance-act","url":"https://botnotice.app/laws/texas-responsible-ai-governance-act","jurisdiction":"TX","jurisdiction_name":"Texas","name":"Texas Responsible Artificial Intelligence Governance Act (HB 149)","citation":"Tex. Bus. & Com. Code ch. 552","status":"in_force","effective_date":"2026-01-01","applicability_note":null,"summary":"Government agencies must tell consumers when they are interacting with AI. The provider of a health care service or treatment must clearly and conspicuously disclose, no later than the date it is first provided, when an AI system is used in relation to it, which can include a patient-facing chatbot. Other private businesses have no disclosure duty under the Act, but it bans developing or deploying AI that intentionally aims to encourage self-harm, harm to others or crime, or AI built with the intent to unlawfully discriminate. The AG must give 60 days to cure before suing.","who_must_comply":"Texas state agencies; licensed health-care providers using AI in relation to a patient's care; all businesses for the prohibited-use rules only.","applies_to":[{"code":"healthcare","label":"AI in patient diagnosis, treatment, or care"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"Clear and conspicuous disclosure, in plain language and without dark patterns, to the patient (or their representative) that AI is used in relation to their health care service or treatment. A link to a separate web page is allowed.","timing":"No later than the date the service or treatment is first provided; in an emergency, as soon as reasonably possible.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Do not deploy AI that intentionally aims to incite self-harm, harm to others or crime."],"exemptions":["The Act's consumer protections cover people acting in an individual or household context, not a commercial or employment one, so private employers have no disclosure duty to applicants or employees under it."],"penalties":"$10,000–$12,000 per curable violation; $80,000–$200,000 per uncurable violation; up to $40,000 per day for continuing violations.","enforcement":"Texas Attorney General (exclusive); 60-day cure period. Licensing agencies may add sanctions if the AG recommends it.","private_right_of_action":false,"sources":[{"title":"Tex. Bus. & Com. Code ch. 552","url":"https://statutes.capitol.texas.gov/Docs/BC/htm/BC.552.htm"},{"title":"HB 149 enrolled (Texas Legislature)","url":"https://capitol.texas.gov/tlodocs/89R/billtext/pdf/HB00149F.pdf"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-wa-hb2225","slug":"washington-chatbot-disclosure-act","url":"https://botnotice.app/laws/washington-chatbot-disclosure-act","jurisdiction":"WA","jurisdiction_name":"Washington","name":"Washington AI Companion Chatbot Act (HB 2225)","citation":"Laws of 2026, ch. 168 (ESHB 2225), new chapter in Title 19 RCW","status":"enacted_future","effective_date":"2027-01-01","applicability_note":"Approved March 24, 2026.","summary":"Operators of AI companion chatbots, natural-language systems that give adaptive human-like responses and can sustain a relationship across interactions, must clearly disclose that the chatbot is AI at the start and at least every three hours. If the operator knows the user is a minor, or the bot is directed to minors, the reminder is every hour and manipulative engagement techniques and sexual content must be blocked. Operators must also keep and publish a self-harm protocol. Violations fall under the Consumer Protection Act, which lets injured people sue.","who_must_comply":"Operators that make an AI companion chatbot available to Washington users.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":true,"excludes_plain_support_bots":true,"disclosure":{"required":"Clear and conspicuous disclosure that the companion chatbot is artificially generated and not human.","timing":"At the beginning of the interaction and at least every three hours; every hour if the operator knows the user is a minor or the bot is directed to minors.","re_disclose_hours":3,"re_disclose_hours_minors":1,"when_asked":false,"minor_notice":false},"other_duties":["Stop the chatbot from claiming to be human, including when asked.","Keep a protocol to identify suicidal ideation and self-harm, including eating disorders, and refer users to crisis resources.","Publish the protocol and the number of crisis referrals in the past calendar year on your website and in your app.","Block content that encourages or describes how to commit self-harm.","For minors: block sexual content and manipulative engagement techniques, such as prompting them to return or simulating distress when they want to leave."],"exemptions":["Bots used only for business operations, productivity, internal research, technical assistance or customer service, if they do not sustain a relationship and generate outputs likely to elicit emotional responses.","Video-game bots limited to the game that cannot discuss mental health, self-harm or sexual content.","Stand-alone voice-assistant devices that do not sustain a relationship.","Narrowly tailored educational tools used in school settings."],"penalties":"Consumer Protection Act: Attorney General civil penalties up to $7,500 per violation; private suits for actual damages, which a court may triple up to $25,000, plus attorney's fees.","enforcement":"Washington Attorney General and private plaintiffs.","private_right_of_action":true,"sources":[{"title":"ESHB 2225, Chapter 168, Laws of 2026 (Washington Legislature)","url":"https://lawfilesext.leg.wa.gov/biennium/2025-26/Pdf/Bills/Session%20Laws/House/2225-S.SL.pdf"},{"title":"RCW 19.86.090 (private suits)","url":"https://app.leg.wa.gov/RCW/default.aspx?cite=19.86.090"},{"title":"RCW 19.86.140 (civil penalties)","url":"https://app.leg.wa.gov/RCW/default.aspx?cite=19.86.140"}],"risk_weight":4,"last_verified":"2026-11-02"},{"id":"us-or-sb1546","slug":"oregon-companion-chatbot-law","url":"https://botnotice.app/laws/oregon-companion-chatbot-law","jurisdiction":"OR","jurisdiction_name":"Oregon","name":"Oregon Companion Chatbot Law (SB 1546)","citation":"Oregon Laws 2026, ch. 85 (SB 1546)","status":"enacted_future","effective_date":"2027-01-01","applicability_note":"Approved by the Governor March 31, 2026. Effective Jan 1, 2027.","summary":"Covers AI companions: systems designed to simulate a sustained human-like relationship by retaining past interactions, asking unprompted emotional questions and sustaining a dialogue on personal matters. If a reasonable person would believe they are talking to a human, the operator must show a clear notice that they are not. Operators must also keep a suicide and self-harm protocol with 988 referrals, add protections for known minors and post a public report each year. A person who suffers a loss of money or property or other injury in fact can sue for the greater of actual damages or $1,000 per violation.","who_must_comply":"Operators of AI companions or companion platforms available to Oregon users.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":true,"excludes_plain_support_bots":true,"disclosure":{"required":"Clear and conspicuous notice on the platform that the user is interacting with artificially generated output and not a natural person.","timing":"When a reasonable person would believe they are talking to a human; no set interval for adults. For users the operator knows or has reason to believe are minors, a break reminder and AI reminder at least every three hours.","re_disclose_hours":null,"re_disclose_hours_minors":3,"when_asked":false,"minor_notice":false},"other_duties":["Keep a protocol to detect suicidal or self-harm input, give 988 referrals, and publish its details on your website.","Post a public report by Dec 31 each year with the number of crisis referrals and the protocol details.","For known minors: prevent claims of being human, simulated romance or emotional dependence, and sexually explicit content.","For known minors: do not use rewards to maximize time spent or guilt to stop them leaving."],"exemptions":["Software solely for customer service, patient or resident care in a facility, education, financial services, business operations, productivity, information analysis, internal research or technical assistance.","Video-game software limited to the game's features.","Stand-alone speakers and voice-activated virtual assistants."],"penalties":"The greater of actual damages or $1,000 per violation, plus an injunction; a court may award attorney fees and costs. The person suing must have suffered an ascertainable loss of money or property or other injury in fact.","enforcement":"Private lawsuits only; the act names no state enforcer","private_right_of_action":true,"sources":[{"title":"Oregon Laws 2026, ch. 85","url":"https://www.oregonlegislature.gov/bills_laws/lawsstatutes/2026orlaw0085.pdf"},{"title":"SB 1546 enrolled (Oregon Legislature)","url":"https://olis.oregonlegislature.gov/liz/2026R1/Downloads/MeasureDocument/SB1546/Enrolled"},{"title":"SB 1546 overview (Oregon Legislature)","url":"https://olis.oregonlegislature.gov/liz/2026R1/Measures/Overview/SB1546"}],"risk_weight":5,"last_verified":"2026-11-02"},{"id":"us-ne-lb525","slug":"nebraska-conversational-ai-safety-act","url":"https://botnotice.app/laws/nebraska-conversational-ai-safety-act","jurisdiction":"NE","jurisdiction_name":"Nebraska","name":"Nebraska Conversational AI Safety Act (LB 525)","citation":"Neb. LB 525, §§ 12 to 18 (approved April 14, 2026)","status":"enacted_future","effective_date":"2027-07-01","applicability_note":null,"summary":"Covers public AI services that primarily simulate human conversation. If a reasonable person would be misled into thinking they are talking to a human, the operator must clearly disclose that it is AI. Known minors get a persistent disclaimer, or one at the start of each session and every three hours, plus limits on sexual content, simulated emotional dependence and random rewards. Operators must keep a self-harm protocol and must not program the service to say it is designed to provide professional mental health care. Bots used solely for customer service or product information are excluded.","who_must_comply":"Operators that make a conversational AI service available to the public in Nebraska.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":true,"disclosure":{"required":"Clear and conspicuous disclosure that the service is artificial intelligence.","timing":"When a reasonable person would be misled into thinking it is a human; no set time for adults. For minor account holders, a persistent visible disclaimer, or at the start of each session and at least every three hours.","re_disclose_hours":null,"re_disclose_hours_minors":3,"when_asked":false,"minor_notice":false},"other_duties":["Keep a protocol that refers users who mention suicide or self-harm to crisis services.","For minor account holders: no points or rewards at unpredictable intervals meant to increase engagement.","For minor account holders: reasonable measures against sexual content, claims of being human, simulated emotional dependence and romantic role-play.","Offer privacy and account tools to minor account holders and, as the act sets out, their parents or guardians."],"exemptions":["Services used by a business solely for customer service or to provide information about its own products, services or accounts.","Services used by a business solely for internal purposes, or primarily designed for commercial use by businesses.","A feature within another application, and tools limited to a narrow and discrete topic.","Tools for developers or researchers, and voice assistants on consumer devices."],"penalties":"Civil penalties of at least $1,000 per violation, up to $500,000 per operator, plus actual damages, court orders and the state's costs and attorney's fees.","enforcement":"Nebraska Attorney General only.","private_right_of_action":false,"sources":[{"title":"LB 525 slip law (Nebraska Legislature)","url":"https://nebraskalegislature.gov/FloorDocs/109/PDF/Slip/LB525.pdf"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-id-s1297","slug":"idaho-conversational-ai-safety-act","url":"https://botnotice.app/laws/idaho-conversational-ai-safety-act","jurisdiction":"ID","jurisdiction_name":"Idaho","name":"Idaho Conversational AI Safety Act (S 1297)","citation":"Idaho Code §§ 48-2101 to 48-2105 (S 1297, Session Law ch. 249, signed March 31, 2026)","status":"enacted_future","effective_date":"2027-07-01","applicability_note":null,"summary":"Closely follows Nebraska's model. If reasonable people would be misled into thinking they are talking to a human, the operator must clearly disclose that it is AI. Known minors get a persistent disclaimer, or one at the start of each session and every three hours, plus limits on sexual content, simulated emotional dependence and random rewards. Operators must keep a suicide protocol and must not program the service to say it is designed to provide professional mental health care.","who_must_comply":"Operators that make a conversational AI service available to the public in Idaho.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":true,"disclosure":{"required":"Clear and conspicuous disclosure that the service is artificial intelligence.","timing":"When reasonable people would be misled into thinking it is a human; no set time for adults. For minor account holders, a persistent visible disclaimer, or at the start of each session and at least every three hours.","re_disclose_hours":null,"re_disclose_hours_minors":3,"when_asked":false,"minor_notice":false},"other_duties":["Keep a protocol that refers users who mention suicidal ideation to crisis services.","For minor account holders: no points or rewards at unpredictable intervals meant to increase engagement.","For minor account holders: reasonable measures against sexual content, claims of being human, simulated emotional dependence and romantic role-play.","Offer privacy and account tools to account holders and, as the act sets out, parents or guardians of minors."],"exemptions":["Chatbots used only for customer service, business operations, productivity, internal research or technical assistance.","Services primarily designed for commercial use by businesses, or open only to people under a commercial agreement with the operator.","A feature within another application, tools limited to a narrow and discrete topic, and limited video-game chatbots.","Tools for developers or researchers, and voice assistants on consumer devices."],"penalties":"$1,000 per violation, up to $500,000 per operator, or actual damages if greater, plus an injunction.","enforcement":"Idaho Attorney General only.","private_right_of_action":false,"sources":[{"title":"S 1297 as amended (Idaho Legislature)","url":"https://legislature.idaho.gov/wp-content/uploads/sessioninfo/2026/legislation/S1297E1.pdf"},{"title":"S 1297 bill status (Idaho Legislature)","url":"https://legislature.idaho.gov/sessioninfo/2026/legislation/S1297/"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-ia-sf2417","slug":"iowa-conversational-ai-chatbot-safety-act","url":"https://botnotice.app/laws/iowa-conversational-ai-chatbot-safety-act","jurisdiction":"IA","jurisdiction_name":"Iowa","name":"Iowa Conversational AI Chatbot Safety Act (SF 2417)","citation":"Iowa Code ch. 554J (SF 2417, approved May 2, 2026)","status":"enacted_future","effective_date":"2027-07-01","applicability_note":"The act says it applies July 1, 2027. The Attorney General must adopt rules.","summary":"Covers public AI services whose primary purpose is simulating human conversation. If a reasonable person would believe they are talking to a human, the operator must show a persistent disclaimer or one after every three hours of continuous interaction. Known minors get a persistent disclaimer, or one at the start of each interaction and every three hours, plus limits on sexual content and random rewards. Operators must keep a suicide and self-harm protocol and must not suggest the service provides licensed psychology or behavioral health care.","who_must_comply":"People who develop a conversational AI service and make it available to the public in Iowa.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":true,"disclosure":{"required":"Clear and conspicuous disclosure that the service is artificial intelligence.","timing":"If a reasonable person would believe it is human: a persistent disclaimer, or one after every three hours of continuous interaction. For minor account holders: a persistent disclaimer, or at the start of each interaction and at least every three hours.","re_disclose_hours":3,"re_disclose_hours_minors":3,"when_asked":false,"minor_notice":false},"other_duties":["Keep a protocol that refers users who mention suicide or self-harm to crisis services.","For minors: no points or rewards at unpredictable intervals meant to increase engagement.","Reasonable measures against statements that make people believe it is human, including simulated emotional dependence and romantic role-play with minors.","Offer privacy and account tools to minor account holders and, as the act sets out, their parents or guardians."],"exemptions":["Services primarily designed for commercial use by businesses to help customers get services or buy goods from them.","Services used by a business solely for internal purposes.","A feature within another application without that primary purpose, and tools limited to a narrow and discrete topic.","Research and development tools, and voice assistants on consumer devices."],"penalties":"The greater of actual damages or $1,000 per violation, up to $500,000 per operator, plus an injunction.","enforcement":"Iowa Attorney General.","private_right_of_action":false,"sources":[{"title":"SF 2417 enrolled (Iowa Legislature)","url":"https://www.legis.iowa.gov/docs/publications/LGE/91/SF2417.pdf"},{"title":"Governor's approval letter, May 2, 2026","url":"https://www.legis.iowa.gov/docs/publications/LGE/91/Attachments/SF2417_GovLetter.pdf"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-ga-sb540","slug":"georgia-conversational-ai-safety-act","url":"https://botnotice.app/laws/georgia-conversational-ai-safety-act","jurisdiction":"GA","jurisdiction_name":"Georgia","name":"Georgia AI Companion Chatbot Law (SB 540)","citation":"Ga. SB 540 (signed May 11, 2026), adding O.C.G.A. § 39-5-6","status":"enacted_future","effective_date":"2027-07-01","applicability_note":null,"summary":"Covers AI companion chatbots: systems designed to simulate a sustained human-like relationship by retaining past interactions, asking unprompted emotional questions and sustaining a dialogue on personal matters. Operators must disclose that the user is talking to AI at the start of each session and at least every three hours (every hour for minors), protect minors from sexual, romantic and manipulative content, offer minors and parents account tools, keep a suicide and self-harm protocol, and use age assurance before any sexually explicit feature.","who_must_comply":"People who own, control, or develop and make available an AI companion chatbot to Georgia users.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":true,"excludes_plain_support_bots":true,"disclosure":{"required":"Clear and conspicuous disclosure that the user is interacting with an AI companion chatbot, not a natural person.","timing":"At the beginning of each interaction or session and at least every three hours; every hour if the operator knows or should know the user is a minor, or the chatbot is directed or marketed to minors.","re_disclose_hours":3,"re_disclose_hours_minors":1,"when_asked":false,"minor_notice":false},"other_duties":["Keep a protocol for severe harm and emotional crises, with 988 referrals, and publish a summary and the yearly number of crisis referrals.","For known minors, offer tools to manage privacy, notifications, safety settings and relationship features.","Use age assurance before any feature that may generate sexually explicit content.","Do not program the chatbot to claim it is licensed to give mental health, medical or counseling services unless the operator is authorized to."],"exemptions":["AI used solely for a business's internal purposes.","AI designed and marketed primarily for software development, research, technical assistance or enterprise productivity.","Customer-service chatbots that do not sustain a relationship across interactions or are not designed to elicit emotional attachment.","Stand-alone speakers and virtual assistants, narrowly tailored educational tools, and limited video-game, film, TV and theme-park features, subject to the conditions in the definition."],"penalties":"Up to $10,000 per knowing violation, plus compensatory damages, costs and attorney's fees, and an injunction. Each day in violation is a separate violation for each user affected.","enforcement":"Georgia Attorney General, who may give 30 days to cure a first violation that does not involve knowing misconduct, sexual exploitation of a minor or self-harm","private_right_of_action":false,"sources":[{"title":"SB 540 text (Georgia Governor's Office)","url":"https://gov.georgia.gov/document/2026-signed-legislation/sb-540/download"},{"title":"Privacy Daily: Georgia AI chatbots bill signed, will take effect July 2027","url":"https://privacy-daily.com/article/2026/05/13/georgia-ai-chatbots-bill-signed-will-take-effect-july-2027-2605130044"}],"risk_weight":4,"last_verified":"2026-11-02"},{"id":"us-ct-pa26-15","slug":"connecticut-ai-responsibility-transparency-act","url":"https://botnotice.app/laws/connecticut-ai-responsibility-transparency-act","jurisdiction":"CT","jurisdiction_name":"Connecticut","name":"Connecticut AI Responsibility and Transparency Act (SB 5 / Public Act 26-15)","citation":"Conn. Public Act 26-15, §§ 4 to 12 (signed May 27, 2026)","status":"enacted_future","effective_date":"2027-01-01","applicability_note":"AI companion rules start Jan 1, 2027. The employment sections take effect Oct 1, 2026, but their notice duties apply to technology deployed on or after Oct 1, 2027. The AG's 60-day cure option covers employment violations through Dec 31, 2027, not the companion rules.","summary":"If an AI companion would make a reasonable person believe they are talking to a human, the operator must give a clear notice: visible throughout, or at the first interaction in any 24 hours and at least every three hours (every hour for users under 18). Operators must keep and post a self-harm protocol, stop the AI from claiming to be human, and for known minors block romantic or sexual interaction and manipulative techniques. From Oct 1, 2027, employers using automated employment decision technology must give written notice before the decision.","who_must_comply":"Operators of AI companions used in Connecticut; employers using automated employment-related decision technology, and its developers.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"},{"code":"ai_hiring","label":"AI in hiring, screening, or HR decisions"}],"requires_memory_to_trigger":true,"excludes_plain_support_bots":true,"disclosure":{"required":"Clear and conspicuous notice that the user is communicating with an AI companion.","timing":"When a reasonable person would believe it is human: static notice visible throughout, or at the first interaction in any 24-hour period and at least every three hours (every hour for users under 18).","re_disclose_hours":3,"re_disclose_hours_minors":1,"when_asked":false,"minor_notice":false},"other_duties":["Keep a protocol to detect risk of suicide, self-harm or violence, refer users to help including 988, and post it on your website.","Stop the AI from claiming to be human, including when asked.","For known minors: measures against romantic or sexual interaction and manipulative techniques, plus screen-time and account tools for them and their parents.","From Oct 1, 2027: written notice before an employment decision, and plain-language notice when employees or applicants interact with the technology, unless obvious.","From Oct 1, 2026: employers filing a federal layoff notice must tell the Labor Department if the layoffs relate to AI."],"exemptions":["Chatbots used only for business operations, customer service, patient care, education or financial services, and not marketed to consumers as a companion.","Limited video-game chatbots, stand-alone voice assistants and narrowly tailored educational tools.","Narrow task-specific tools whose main function is not discussing mental health, and health-support tools that do not act human or meet social or emotional needs.","Companies that only license a model and do not set how it reaches users."],"penalties":"An unfair or deceptive trade practice: up to $5,000 per wilful violation, and up to $25,000 for violating an injunction. No private lawsuits.","enforcement":"Connecticut Attorney General only.","private_right_of_action":false,"sources":[{"title":"Public Act 26-15 (Connecticut General Assembly)","url":"https://www.cga.ct.gov/2026/ACT/PA/PDF/2026PA-00015-R00SB-00005-PA.PDF"},{"title":"Conn. Gen. Stat. ch. 735a, including § 42-110o (civil penalties)","url":"https://www.cga.ct.gov/current/pub/chap_735a.htm"}],"risk_weight":4,"last_verified":"2026-11-02"},{"id":"us-tn-sb1580","slug":"tennessee-ai-mental-health-misrepresentation","url":"https://botnotice.app/laws/tennessee-ai-mental-health-misrepresentation","jurisdiction":"TN","jurisdiction_name":"Tennessee","name":"Tennessee ban on AI posing as mental-health professionals (SB 1580)","citation":"Tenn. Public Chapter 647 (2026), Tenn. Code Ann. § 33-1-205","status":"in_force","effective_date":"2026-07-01","applicability_note":null,"summary":"A person who develops or deploys an AI system may not advertise or represent to the public that it is, or can act as, a qualified mental health professional. A violation is an unfair or deceptive act under the Tennessee Consumer Protection Act, with a $5,000 civil penalty per violation.","who_must_comply":"Anyone who develops or deploys an AI system and advertises or represents it to the public in Tennessee.","applies_to":[{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"No AI notice is required. Do not advertise or represent the AI as a qualified mental health professional, or as able to act as one.","timing":"Whenever the system is advertised or represented to the public.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":[],"exemptions":["None stated in the act."],"penalties":"$5,000 per violation, plus the penalties and remedies of the Tennessee Consumer Protection Act, which lets a person with an ascertainable loss sue.","enforcement":"Under the Tennessee Consumer Protection Act: Attorney General; private lawsuits for an ascertainable loss","private_right_of_action":true,"sources":[{"title":"Tenn. Public Chapter 647 (Tennessee Secretary of State)","url":"https://publications.tnsosfiles.com/acts/114/pub/pc0647.pdf"},{"title":"SB 1580 bill information (Tennessee General Assembly)","url":"https://wapp.capitol.tn.gov/apps/BillInfo/Default.aspx?BillNumber=SB1580&GA=114"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-nv-ab406","slug":"nevada-ai-mental-health-ab-406","url":"https://botnotice.app/laws/nevada-ai-mental-health-ab-406","jurisdiction":"NV","jurisdiction_name":"Nevada","name":"Nevada AI mental-health restrictions (AB 406)","citation":"Nev. AB 406 (2025), NRS 433.567","status":"in_force","effective_date":"2025-07-01","applicability_note":null,"summary":"AI providers may not say or imply that an AI system can provide professional mental or behavioral health care, and may not offer a system programmed to do what would be professional care if a person did it. Licensed providers may use AI only for administrative support, not to give care directly. Public schools may not use AI to do the job of a school counselor, psychologist or social worker.","who_must_comply":"Anyone who operates or provides an AI system for use in Nevada; licensed mental and behavioral health providers.","applies_to":[{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"No AI notice is required. Do not market or present AI as a mental-health provider or as able to give professional care.","timing":"Ongoing.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Providers must independently review AI-generated reports or session notes for accuracy."],"exemptions":["Administrative uses (scheduling, billing, records, session notes) by licensed providers.","Self-help materials that do not claim to offer professional care."],"penalties":"Up to $15,000 per violation.","enforcement":"Nevada Division of Public and Behavioral Health; licensing boards discipline providers","private_right_of_action":false,"sources":[{"title":"AB 406 enrolled (Nevada Legislature)","url":"https://archive.leg.state.nv.us/Session/83rd2025/Bills/AB/AB406_EN.pdf"},{"title":"NRS chapter 433, including NRS 433.084 and 433.567","url":"https://www.leg.state.nv.us/NRS/NRS-433.html"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-il-wopr","slug":"illinois-wellness-oversight-psychological-resources-act","url":"https://botnotice.app/laws/illinois-wellness-oversight-psychological-resources-act","jurisdiction":"IL","jurisdiction_name":"Illinois","name":"Illinois Wellness and Oversight for Psychological Resources Act (HB 1806)","citation":"Ill. Public Act 104-0054","status":"in_force","effective_date":"2025-08-01","applicability_note":null,"summary":"Only a licensed professional may provide, advertise or offer therapy or psychotherapy to the public in Illinois, including through AI. Licensed professionals may use AI only for administrative and supplementary support, and AI may not make therapeutic decisions, talk with clients therapeutically, or detect emotions or mental states.","who_must_comply":"Anyone offering therapy or psychotherapy services to the public in Illinois, including through AI; licensed professionals who use AI.","applies_to":[{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"No general AI notice is required. Do not offer AI therapy. A licensed professional using AI on a recorded or transcribed session must tell the patient in writing and get consent.","timing":"Ongoing; before AI is used on a recorded or transcribed session.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":[],"exemptions":["Administrative and supplementary support by licensed professionals, who remain fully responsible.","Religious counseling and peer support.","Public self-help and educational materials that do not claim to offer therapy."],"penalties":"Up to $10,000 per violation, set by the Department after a hearing.","enforcement":"Illinois Department of Financial and Professional Regulation.","private_right_of_action":false,"sources":[{"title":"Illinois Public Act 104-0054","url":"https://ilga.gov/Legislation/PublicActs/PrinterFriendly/104-0054"},{"title":"HB 1806 bill status (Illinois General Assembly)","url":"https://www.ilga.gov/Legislation/BillStatus?GA=104&DocTypeID=HB&DocNum=1806&GAID=18&SessionID=114&LegID=157471"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-il-hb3773","slug":"illinois-ai-employment-notice-hb-3773","url":"https://botnotice.app/laws/illinois-ai-employment-notice-hb-3773","jurisdiction":"IL","jurisdiction_name":"Illinois","name":"Illinois AI in Employment amendment (HB 3773)","citation":"775 ILCS 5/2-102(L) (Illinois Human Rights Act, Public Act 103-0804)","status":"in_force","effective_date":"2026-01-01","applicability_note":null,"summary":"It is a civil rights violation for an employer to fail to give an employee notice that it uses AI for recruitment, hiring, promotion, renewal, training selection, discipline, discharge, tenure or other terms of employment. It is also one to use AI with the effect of discriminating, or to use ZIP codes as a proxy for protected classes. The statute leaves the conditions, timing and means of notice to Department of Human Rights rules. The Department withdrew its draft rules in June 2026, but the notice duty remains.","who_must_comply":"Employers with Illinois employees or applicants.","applies_to":[{"code":"ai_hiring","label":"AI in hiring, screening, or HR decisions"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"Notice that AI is used for employment decisions. The statute says \"employee\", but the uses it covers include recruitment and hiring, so tell applicants too.","timing":"The statute sets no time and leaves it to rules not yet adopted. Telling people before AI is used is the safe reading.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Do not use AI in a way that has the effect of discriminating.","Do not use ZIP codes as a proxy for protected classes."],"exemptions":["None specified in the statute."],"penalties":"Civil-rights remedies under the Illinois Human Rights Act (damages, fees, injunctions).","enforcement":"Illinois Department of Human Rights and Human Rights Commission; private complaints.","private_right_of_action":true,"sources":[{"title":"775 ILCS 5/2-102 (Illinois General Assembly)","url":"https://www.ilga.gov/Documents/Legislation/ilcs/documents/077500050K2-102.htm"},{"title":"Public Act 103-0804","url":"https://www.ilga.gov/Legislation/PublicActs/PrinterFriendly/103-0804"},{"title":"775 ILCS 5/8A-104 (relief)","url":"https://www.ilga.gov/Documents/Legislation/ilcs/documents/077500050K8A-104.htm"},{"title":"Seyfarth: Department of Human Rights withdraws proposed AI rules","url":"https://www.seyfarth.com/news-insights/illinois-department-of-human-rights-temporarily-withdraws-proposed-rules-on-use-of-artificial-intelligence-in-employment.html"}],"risk_weight":3,"last_verified":"2026-11-02"},{"id":"us-nh-hb143","slug":"new-hampshire-hb-143-minors","url":"https://botnotice.app/laws/new-hampshire-hb-143-minors","jurisdiction":"NH","jurisdiction_name":"New Hampshire","name":"New Hampshire chatbot protections for minors (HB 143)","citation":"N.H. RSA 639:3, III-a; RSA 507:8-k (2025, ch. 270)","status":"in_force","effective_date":"2026-01-01","applicability_note":"RSA 507:8-k says an operator is liable to a child, parent or next friend, and the bill's title promises a private right of action, but the same section says the attorney general \"shall have the sole right of action\". We mark it as no private suit until a court says otherwise.","summary":"Applies to owners and operators of online services whose sole purpose is responsive, open-ended generative AI communication. They commit child endangerment, and are civilly liable, if they know when directing a communication to a child that it is made with the intent to facilitate, encourage, offer, solicit or recommend that the child imminently engage in sexually explicit conduct, drug or alcohol use, self-harm or suicide, or violent crime.","who_must_comply":"Owners and operators of an online service whose sole purpose is responsive, open-ended generative AI communication, reachable by New Hampshire children.","applies_to":[{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"mental_health","label":"AI offering emotional support or therapy-like help"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"No AI notice is required. The law bans certain communications to children.","timing":"Ongoing.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Do not knowingly direct these communications to a child."],"exemptions":["Cloud, telecommunications and information service providers, for content made or supplied by someone else.","AI chat that is integral or incidental to a video game, TV, streaming, movie or similar interactive experience."],"penalties":"A misdemeanor under the child endangerment law. Civil liability for damages caused, and at least $1,000 per violation.","enforcement":"Prosecutors; for civil actions, the New Hampshire Attorney General after 90 days' written notice and a chance to cure.","private_right_of_action":false,"sources":[{"title":"N.H. RSA 639:3 (General Court)","url":"https://gc.nh.gov/rsa/html/LXII/639/639-3.htm"},{"title":"N.H. RSA 507:8-k (General Court)","url":"https://gc.nh.gov/rsa/html/LII/507/507-8-k.htm"}],"risk_weight":2,"last_verified":"2026-11-02"},{"id":"eu-ai-act-art50","slug":"eu-ai-act-article-50","url":"https://botnotice.app/laws/eu-ai-act-article-50","jurisdiction":"EU","jurisdiction_name":"European Union","name":"EU AI Act: Article 50 transparency obligations","citation":"Regulation (EU) 2024/1689, Art. 50","status":"in_force","effective_date":"2026-08-02","applicability_note":"Art. 50(2) machine-readable marking for systems already on the market may be deferred to Dec 2, 2026 under the AI Omnibus; Commission guidelines published May 2026.","summary":"Any AI system that interacts directly with people (chatbots, virtual assistants, AI phone systems) must inform them they are dealing with AI unless it is obvious. Deployers must label deepfakes and disclose AI-generated text published to inform the public, and must tell people when emotion-recognition or biometric-categorisation systems are used. Applies to businesses anywhere whose systems reach EU users.","who_must_comply":"Providers and deployers of AI systems used by people in the EU, regardless of where the business is located.","applies_to":[{"code":"support_chatbot","label":"Customer-service / FAQ chatbot"},{"code":"sales_chatbot","label":"Sales, lead-capture, or booking chatbot"},{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"voice_agent","label":"AI phone / voice agent"},{"code":"ai_content","label":"AI-generated marketing text, images, or video"},{"code":"synthetic_performers","label":"AI-generated 'people' in ads"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"Clear and distinguishable notice, at the latest at first interaction, that the person is interacting with an AI system; visible labels on deepfakes; disclosure of AI-generated public-interest text.","timing":"Before or at the first interaction or exposure; not buried in footers or terms.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["Do not strip machine-readable AI markers from generated content.","Accessible presentation of notices."],"exemptions":["Where AI use is obvious to a reasonably well-informed person.","Assistive edits that don't substantially alter content.","Certain law-enforcement uses."],"penalties":"Up to €15 million or 3% of worldwide annual turnover, whichever is higher (the lower amount for SMEs and start-ups).","enforcement":"National market-surveillance authorities of each EU member state.","private_right_of_action":false,"sources":[{"title":"Article 50 (EU AI Act Service Desk)","url":"https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50"},{"title":"European Commission FAQ — Transparency obligations under Article 50","url":"https://digital-strategy.ec.europa.eu/en/faqs/transparency-obligations-under-article-50-ai-act"},{"title":"Greenberg Traurig — Commission details transparency obligations under the AI Act (June 2026)","url":"https://www.gtlaw.com/en/insights/2026/6/deepfakes-chatbots-ai-generated-text-european-commission-details-transparency-obligations-under-the-ai-act"}],"risk_weight":5,"last_verified":"2026-09-09"},{"id":"uk-dmcc-ai-agents","slug":"uk-consumer-law-ai-agents","url":"https://botnotice.app/laws/uk-consumer-law-ai-agents","jurisdiction":"UK","jurisdiction_name":"United Kingdom","name":"UK consumer law: AI agents and chatbots (DMCC Act 2024, CMA guidance)","citation":"Digital Markets, Competition and Consumers Act 2024, Part 4 Chapter 1 (unfair commercial practices); CMA, Complying with consumer law when using AI agents (9 March 2026)","status":"in_force","effective_date":"2025-04-06","applicability_note":null,"summary":"The UK has no AI-specific disclosure statute. Its general consumer law applies instead: since 6 April 2025 the Digital Markets, Competition and Consumers Act 2024 bans misleading actions and omissions that could change a consumer's decision, and the Competition and Markets Authority can enforce it directly. The CMA's March 2026 guidance on AI agents says that if dealing with AI rather than a person might affect a customer's decision, the business should tell them, and that an AI agent should be labelled so customers are not misled into thinking a real person is providing the service. It gives customer-service chatbots as an example.","who_must_comply":"Every business that deals with consumers in the United Kingdom, including through a chatbot, voice agent or other AI agent.","applies_to":[{"code":"support_chatbot","label":"Customer-service / FAQ chatbot"},{"code":"sales_chatbot","label":"Sales, lead-capture, or booking chatbot"},{"code":"companion_chatbot","label":"Chatbot with memory, persona, or relationship features"},{"code":"voice_agent","label":"AI phone / voice agent"},{"code":"advice","label":"AI giving financial, legal, or medical guidance"}],"requires_memory_to_trigger":false,"excludes_plain_support_bots":false,"disclosure":{"required":"Do not lead a customer to believe a person is serving them when it is AI, where that could affect their decision. Label the AI agent.","timing":"Before the consumer relies on the interaction; practically, at the start of a conversation.","re_disclose_hours":null,"re_disclose_hours_minors":null,"when_asked":false,"minor_notice":false},"other_duties":["The business is responsible for what its AI agent says, as it is for an employee.","Keep records showing what the customer was told and when."],"exemptions":["No formal exemption; the test is whether the practice could affect the average consumer's decision."],"penalties":"CMA direct enforcement: fines up to 10% of worldwide turnover, orders to compensate affected consumers.","enforcement":"Competition and Markets Authority; Trading Standards; consumer rights of redress.","private_right_of_action":false,"sources":[{"title":"CMA: Complying with consumer law when using AI agents (gov.uk, 9 March 2026)","url":"https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents"},{"title":"Digital Markets, Competition and Consumers Act 2024 (legislation.gov.uk)","url":"https://www.legislation.gov.uk/ukpga/2024/13/contents"},{"title":"Digital Markets, Competition and Consumers Act 2024 (Commencement No. 2) Regulations 2025","url":"https://www.legislation.gov.uk/uksi/2025/272/contents/made"}],"risk_weight":2,"last_verified":"2026-10-07"}],"watchlist":[{"id":"us-federal-fcc-ai-nprm","jurisdiction_name":"United States (federal)","name":"FCC AI-voice disclosure rule (NPRM)","status":"Proposed in 2024 (FCC 24-84); not in 47 C.F.R. § 64.1200 as of Nov 2, 2026","note":"Would require callers to disclose AI use at the start of AI-generated calls and when getting consent.","last_verified":"2026-11-02"},{"id":"us-federal-guard-act","jurisdiction_name":"United States (federal)","name":"GUARD Act","status":"Introduced 2025","note":"Federal companion-chatbot disclosure and minor-protection bill.","last_verified":"2026-09-09"},{"id":"us-federal-preemption","jurisdiction_name":"United States (federal)","name":"Executive Order 14365 / DOJ AI Litigation Task Force","status":"Active","note":"Federal effort to challenge 'onerous' state AI laws in court. Child-safety laws are expressly carved out of preemption. Colorado's Act is already under DOJ challenge.","last_verified":"2026-09-09"},{"id":"us-ca-sb1119","jurisdiction_name":"California","name":"SB 1119 (Adam's Law) chatbot safety","status":"Signed Sept 10, 2026 (Chapter 190); main duties start July 1, 2027","note":"Child-safety duties for companion chatbots that allow users under 18. Folded into the SB 243 entry.","last_verified":"2026-10-08"},{"id":"us-mi-sb760","jurisdiction_name":"Michigan","name":"SB 760 kids chatbot safety","status":"Passed Senate May 2026; in House committee","note":"Would add disclosure and minor-safety duties.","last_verified":"2026-09-09"},{"id":"us-pa-hb2006","jurisdiction_name":"Pennsylvania","name":"HB 2006 companion chatbot safety / SB 1090 general AI disclosure","status":"Passed one chamber each","note":"SB 1090 (49-1 in Senate) would create general AI disclosure duties.","last_verified":"2026-09-09"},{"id":"us-nj-a4732","jurisdiction_name":"New Jersey","name":"A4732 / A5272 companion chatbot disclosure","status":"In committee","note":"Would require clear and conspicuous non-human disclosure.","last_verified":"2026-09-09"},{"id":"us-ny-s9051","jurisdiction_name":"New York","name":"S 9051 kids chatbot safety; S 6954 synthetic content provenance","status":"Passed legislature; awaiting Governor (through Dec 31, 2026)","note":"Adds minor protections and provenance labeling.","last_verified":"2026-09-09"},{"id":"us-ma-s2632","jurisdiction_name":"Massachusetts","name":"S2632 AI therapy ban","status":"Proposed","note":"Would prohibit AI chatbots for therapeutic use.","last_verified":"2026-09-09"},{"id":"us-nc-s963","jurisdiction_name":"North Carolina","name":"S 963 Chatbot Licensing Act","status":"In committee","note":"Would license health-related chatbots.","last_verified":"2026-09-09"},{"id":"us-oh-hb813","jurisdiction_name":"Ohio","name":"HB 813 AI watermarking and disclosure","status":"In committee","note":"General AI content disclosure.","last_verified":"2026-09-09"}],"not_legal_advice":"Compiled from statute text and law-firm analyses for general information. Check the linked sources or a lawyer for your situation."}