| California SB 867 | 'Toy' means a physical product designed, marketed or manufactured for use in play by children under 16 years of age. | § 22601(g) |
| California SB 1119 | Before offering a new or substantially modified chatbot, operators must document a child-safety risk assessment and mitigation, and publish a child safety policy. Defaults changeable only by a parent: persistent conversational memory off, push notifications off, one continuous session capped at one hour, and two hours of daily chatting; parental controls must include the ability to disable access for children under 16, and operators must promote them. | § 21812(a), (c), (d)(2)-(3); operative July 1, 2027 per § 21812(e) |
| California SB 243 | For users the operator knows are minors, it must disclose they are talking to AI, give a break reminder by default at least every three hours (also stating the chatbot is not human), and take reasonable measures to stop sexually explicit visual material or direct prompts to engage in sexually explicit conduct. All operators must also disclose that companion chatbots may not be suitable for some minors; SB 1119 deletes the known-minor duties from Jan 1, 2027 but not that disclosure. | § 22602(c) (deleted by SB 1119 from 2027-01-01); § 22604 |
| Colorado HB 26-1263 | If the operator knows a user is a minor (under 18), it must give the AI notice (persistent on-screen, intermittent audio, or at the start and every 3 hours), not give points or rewards at unpredictable intervals, take technically feasible measures against sexually explicit output and intimate digital depictions, take reasonable measures against simulated emotional dependence or isolation, implement protocols on sexual conduct with a minor, comply with the state's minor privacy rules, and offer privacy and account tools to the minor and a parent or guardian. | § 6-1-1701(15.3); § 6-1-1708(2)(a)-(h) |
| Connecticut SB 5 | For users the operator knows or has reason to believe are under 18, the companion must be kept from encouraging self-harm, violence or substance use, discouraging help from professionals or adults, romantic or sexual interaction, and manipulative engagement tactics. Parents get screen-time and account tools. | § 6(a)-(b) |
| Georgia SB 540 | If the operator knows or should know a user is a minor, or the bot is directed at minors, it must use reasonable measures to block sexual images, sexual statements, romantic or sexual role-play, secrecy from parents, isolation, guilt when the user tries to leave, and statements encouraging self-harm. For accounts known to belong to minors, operators must offer minors or parents tools to manage privacy, notifications and engagement features, safety settings, and relationship-simulation features. | § 39-5-6(d), (e), (i) |
| Hawaii SB 3001 | If the operator has actual knowledge or reasonable certainty a user is a minor (under 18), it must show a persistent AI disclaimer, or a notice at the start of each session and at least hourly with a break reminder; may not give unpredictable points or rewards or outputs that discourage disengagement; must take reasonable measures against sexually explicit visuals, statements urging sexual conduct and sexual objectification; and must offer tools for the user and parents to manage screen time and account settings. | § 481B-__(b), (d) |
| Idaho S 1297 | For minor account holders, operators must use reasonable measures to prevent sexually explicit visual material, statements urging sexually explicit conduct, and sexually objectifying statements. Operators must offer privacy and account-setting tools to account holders, and to parents of users under 13, with related tools for parents of minors 13 and older. | § 48-2104(3), (5) |
| Iowa SF 2417 | Operators may not give minor users points or similar rewards at unpredictable intervals meant to boost engagement, must use reasonable measures to stop the service from producing sexually explicit visual depictions, telling the minor to engage in sexually explicit conduct, or sexually objectifying the minor, and must offer privacy and account-setting tools to minors and, for minors under 13 (and otherwise as appropriate to relevant risks), to their parents or guardians. | § 554J.2(2), (3), (5) |
| Nebraska LB 525 | Operators may not give minor account holders points or similar rewards at unpredictable intervals to encourage engagement, must use reasonable measures to stop the service from producing visual depictions of sexually explicit conduct, directly telling the minor to engage in sexually explicit conduct, or sexually objectifying the minor, and must offer privacy and account-setting tools to minors, to parents or guardians of those under 13, and as appropriate to relevant risks to parents or guardians of those 13 and older. | § 86-1803(2), (3), (5) (LB 525 Sec. 14) |
| New Hampshire HB 143 | Operator is liable when, at the time it directs a communication to a child, it knows the communication is meant to push the child to imminently engage in sexually explicit conduct, making a sexual depiction, illegal drug or alcohol use, self-harm or suicide, or a violent crime. The offense statute covers children under 18; the civil section sets no age. | RSA 639:3, III-a; RSA 507:8-k, I |
| New York A 10008-C / S 9008-C | For a covered minor (a New York user reasonably determined through age assurance to be under 18), the operator must disable access to an integrated AI companion by default; a parent may override. If the minor asks for consent to change the default, the operator must notify the parent. | § 1540(7)(b)-(d) |
| Oregon SB 1546 | When the operator knows or has reason to believe a user is a minor, it must disclose AI status, remind the user at least every 3 hours to take a break, take reasonable measures against sexually explicit imagery and suggestions, and prevent claims of sentience, simulated romantic interest and engagement-maximizing rewards. 'Minor' is not defined in the Act. | Sec. 1(4) |
| Washington HB 2225 | If the operator knows the user is a minor (under 18) or the chatbot is directed to minors, it must repeat the not-human notice hourly, prevent sexually explicit content and suggestive dialogue, and prevent eight listed manipulative engagement techniques (e.g., mimicking romantic partnership, simulated distress when the user leaves, soliciting purchases to keep the relationship). | RCW 19.440.020(3), 19.440.040 (Secs. 2(3), 4) |