Knowing a user is a minor, or finding out
Chatbot laws use two approaches. Some apply extra duties only when the company knows a user is a minor. Others require the company to take steps to determine or estimate each user’s age, often called age assurance. The second approach reaches more users, because a company cannot avoid the duties by not asking.
Age signals from phones and app stores
California’s Digital Age Assurance Act requires app developers to request a user’s age bracket from the device’s operating system or app store when the app is downloaded and launched. California SB 1119 gives companion chatbot operators a choice: determine users’ ages under that act, or apply its child protections to every user. Other states take different routes, so read each law’s method.
What to check in each law
Look at who counts as a minor, what method of age checking the law accepts, what the company must do once it knows a user’s age, and what limits apply to data collected for age checks. The table below lists the age provisions recorded here, with the section that imposes each one.
Enacted laws
- California SB 1119Adam's LawTakes effect Jan. 1, 2027
- Colorado HB 26-1263Conversational AI service operatorsIn effect since Aug. 12, 2026; more from Jan. 1, 2027
- Georgia SB 540AI companion chatbotsTakes effect July 1, 2027
- New York A 10008-C / S 9008-CSafe by Design ActTakes effect Jan. 1, 2027
How the laws compare
| Law | What it requires | Section |
|---|---|---|
| California SB 1119 | Operators must either determine each user's age (using age signals under the Digital Age Assurance Act, Civ. Code § 1798.500 et seq., or, if that fails, the age determination made under Health & Safety Code § 27001) or apply the child protections to all users. In the second case, parent-only defaults cannot be changed unless the operator has actual knowledge the user is not a child. | § 21811 |
| Colorado HB 26-1263 | Operator must use commercially reasonable or generally accepted methods to estimate the age of account holders and users, and may not willfully disregard clear and convincing information that a user is a minor. The estimated age counts as knowledge. | § 6-1-1708(2) |
| Georgia SB 540 | Before allowing a feature or mode that may produce sexually explicit synthetic content, the operator must use a commercially reasonable age assurance method proportionate to the risk (age estimation, account-based assurance or identity-based verification where necessary). | § 39-5-6(j) |
| New York A 10008-C / S 9008-C | An operator may not offer a user an integrated AI companion until it has used age assurance to learn whether the user is under 18. Until Attorney General rules take effect, self-declared age or minor status may not be used. | § 1540(1), (7)(a) |
Bills, vetoes and actions
- Arizona HB 2311AI service disclosuresVetoed
- Pending
- Pending
- Pending
- Pending
- Pending
- Michigan SB 760Leading Ethical AI Development for Kids ActPending
- New York S 9051-B / A 10379-CAI companion features unsafe for minorsPassed both chambers
- Pennsylvania HB 2006AI Companion Safety ActPassed the House