Iowa Conversational AI Chatbot Safety Act (SF 2417)
Iowa · Iowa Code ch. 554J (SF 2417, approved May 2, 2026) · effective 2027-07-01 · The act says it applies July 1, 2027. The Attorney General must adopt rules.
Summary
Covers public AI services whose primary purpose is simulating human conversation. If a reasonable person would believe they are talking to a human, the operator must show a persistent disclaimer or one after every three hours of continuous interaction. Known minors get a persistent disclaimer, or one at the start of each interaction and every three hours, plus limits on sexual content and random rewards. Operators must keep a suicide and self-harm protocol and must not suggest the service provides licensed psychology or behavioral health care.
Who must comply
People who develop a conversational AI service and make it available to the public in Iowa.
What you must disclose
Clear and conspicuous disclosure that the service is artificial intelligence.
When: If a reasonable person would believe it is human: a persistent disclaimer, or one after every three hours of continuous interaction. For minor account holders: a persistent disclaimer, or at the start of each interaction and at least every three hours.
Other duties
- Keep a protocol that refers users who mention suicide or self-harm to crisis services.
- For minors: no points or rewards at unpredictable intervals meant to increase engagement.
- Reasonable measures against statements that make people believe it is human, including simulated emotional dependence and romantic role-play with minors.
- Offer privacy and account tools to minor account holders and, as the act sets out, their parents or guardians.
Exemptions
- Services primarily designed for commercial use by businesses to help customers get services or buy goods from them.
- Services used by a business solely for internal purposes.
- A feature within another application without that primary purpose, and tools limited to a narrow and discrete topic.
- Research and development tools, and voice assistants on consumer devices.
Penalties
The greater of actual damages or $1,000 per violation, up to $500,000 per operator, plus an injunction.