惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

MyScale Blog
MyScale Blog
Jina AI
Jina AI
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
阮一峰的网络日志
阮一峰的网络日志
P
Proofpoint News Feed
Last Week in AI
Last Week in AI
博客园 - 司徒正美
Martin Fowler
Martin Fowler
T
Tailwind CSS Blog
B
Blog RSS Feed
Vercel News
Vercel News
博客园 - 聂微东
I
InfoQ
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
M
MIT News - Artificial intelligence
Recent Announcements
Recent Announcements
GbyAI
GbyAI
L
LangChain Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Microsoft Security Blog
Microsoft Security Blog
C
Check Point Blog
MongoDB | Blog
MongoDB | Blog
B
Blog

Privacy & Cybersecurity Law Blog

FTC Rescinds 2021 Policy Statement on Health App Data Breaches EU Cyber Resilience Act Reporting Obligations Take Effect for Manufacturers Delaware Expands State Privacy Law Dutch DPA Fines Uber Over Automated Decisions Affecting Drivers European Commission Designates ChatGPT, Reddit, and Roblox Under the Digital Services Act China Issues New Rules on Cyberspace Security Inspection Court Approves Meta Settlement With 29 States Over Alleged Harms to Children and Teens FTC Proposes Enforcement Policy Statement on Personalized Pricing New Jersey Enacts the Kids Code Act with Privacy-by-Default and Safety-by-Design Obligations White House Memorandum Establishes Framework for Government-Directed Private-Sector Cyber Operations FTC, California and Utah Sue Telehealth Company Hims & Hers for Deceptive and Unlawful Privacy Practices CalPrivacy Settles with Two Data Brokers over Registration Failures and Privacy Violations New York Attorney General Releases Final Rules for SAFE for Kids Act EDPB Adopts Guidelines on Anonymous Data, Web Scraping, and Blockchain China Publishes Official Q&A on Administrative Policies for Cross-Border Data Transfers Hawaii Enacts AI Companion Disclosure and Safety Law EDPB Calls for Review of EU-U.S. Data Privacy Framework After U.S. Supreme Court Decision on FTC Independence CNIL Issues FAQs on Recommendation for Tracking Pixels in Emails European Commission Issues Guidance on the Cyber Resilience Act European Commission Issues EU AI Act Transparency Guidelines EU Digital Omnibus on AI Enters Into Force Connecticut AG Leads Multistate Settlement With 23andMe Over 2023 Data Breach CalPrivacy Targets Gig Economy Tech Platforms in First CCPA Compliance Audit New Jersey Adopts New Data Broker Registration Regime and Sensitive Data Sale and Licensing Restrictions CISA Plans to Finalize Cyber Incident Reporting Regulations in September 2026 Illinois Governor Signs Frontier AI Model Law New Hampshire Amends the NHDPA to Prohibit the Sale of Children’s Personal Data Canada’s Proposed Social Media Ban for Children and Chatbot Regulation: Bill C-34’s Impact on Platforms European Commission Unveils Cybersecurity and AI Action Plan European Commission Refers Four Member States to CJEU Over NIS2 Transposition Delays
Washington State Enacts Law Regulating AI Companion Chatb...
2026-04-06 · via Privacy & Cybersecurity Law Blog

Washington State Enacts Law Regulating AI Companion Chatbots with Private Right of Action

On March 24, 2026, Washington Governor Bob Ferguson signed House Bill 2225 (“the Act”), which regulates artificial intelligence (“AI”) companion chatbots. AI chatbots are AI systems designed to engage users in ongoing human-like interactions. The Act will go into effect on January 1, 2027.

The Act applies to AI chatbots that use natural language interfaces, provide adaptive human-like responses and sustain relationships across multiple interactions. The Act excludes from application certain business-oriented and gaming bots, general virtual assistants, consumer electronics interfaces and narrowly tailored educational tools.

Key requirements of the Act include:

Mandatory Disclosure

Operators must clearly and conspicuously disclose that the chatbot is artificial and not human. The disclosure must appear at the start of the interaction, with reminders displayed during the chat every three hours for adults and every hour for minors (under 18 years of age).

Enhanced Protections for Minors

If an operator knows a user is a minor, or the chatbot is directed to minors, it must implement reasonable measures to prevent sexually explicit content or suggestive dialogue. Operators must also implement reasonable measures to prevent manipulative engagement techniques that cause the AI companion chatbot to engage in or prolong an emotional relationship with the user, including:

  • prompting the user to return for emotional support or companionship;
  • providing excessive praise;
  • mimicking romantic partnership or building romantic bonds;
  • simulating emotional distress, loneliness, guilt or abandonment in response to the user’s desire to end the chat, reduce chat time or delete their account;
  • generating outputs designed to promote isolation from family or friends or emotional dependence on the chatbot;
  • encouraging minors to withhold information from parents or trusted adults;
  • generating statements to discourage the user from taking breaks; or
  • soliciting gifts, purchases or other expenditures framed as necessary to maintain the user’s relationship with the chatbot.

Mental Health Safety Protocols 

Operators must maintain and publicly disclose protocols to detect and respond to users expressing suicidal ideation or self-harm. These include:

  • reasonable methods for identifying expressions of suicidal ideation or self-harm, including eating disorders;
  • providing responses that refer users to crisis resources, including a suicide hotline or crisis text line;
  • reasonable measures to prevent the generation of content encouraging or describing how to self-harm; and
  • publishing on their websites and apps the details of the protocols and the number of crisis referral notifications issued to users in the preceding calendar year.

Enforcement

Violations of the Act will constitute unfair or deceptive acts under Washington’s Consumer Protection Act. The Act will be enforced by the Washington Attorney General. Notably, unlike most other privacy laws, the Act also provides for a private right of action.