CAW Registry

Obligations

• blocking disclosure: If a reasonable person interacting with an AI companion would believe they are interacting with a natural person, the operator must provide a clear and conspicuous notice that the output is artificially generated.

  "the operator shall provide on the artificial intelligence companion platform a clear and conspicuous notice that indicates that a user is interacting with artificially generated output and not a natural person" (Sec. 1(2)).

• blocking crisis_protocol: An operator may not allow access to an AI companion without a protocol for evidence-based detection of suicidal ideation or self-harm input, with a referral to the 988 lifeline (or a youthline for users under 25) and clinically grounded escalation for continued expressions.

  The protocol must "require an artificial intelligence companion to provide a user that expresses suicidal ideation or intent or self-harm ideation or intent with a referral to and contact information and hyperlink for the national 9-8-8 suicide and crisis lifeline" (Sec. 1(3)(b)(A)).

• blocking minors: If the operator knows or has reason to believe a user is a minor, the operator must disclose AI status, provide a break reminder every three hours, and prevent sexually explicit output, romantic role-play with minors, and manipulative engagement tactics (variable-schedule rewards, simulated abandonment distress on account deletion, etc.).

  "Provide a clear and conspicuous reminder at a minimum of every three hours of interaction that the user should take a break" (Sec. 1(4)(b)(B)); operators must prevent "Role-play romantic relationships between adults and minors" (Sec. 1(4)(a)(D)).

• material audit_reporting: By December 31 of each year, an operator must publish a report disclosing the number of crisis referrals made and the details of its detection protocol.

  "Not later than December 31 of each year, an operator shall post on a publicly accessible website a report that discloses ... the number of times ... the operator provided a referral" (Sec. 1(5)(a)).

Scope

• applies_if_minor_accessible = operator_knows_or_has_reason_to_believe_minor

  "If an operator knows or has reason to believe that a user ... is a minor, the operator shall undertake reasonable measures ..." (Sec. 1(4)(a)); actual/constructive-knowledge standard, not a general accessible-to-minors standard.

• covered_service = artificial_intelligence_companion

  "Artificial intelligence companion" is a system designed "to simulate a sustained, human-like platonic, intimate or romantic relationship or companionship" by retaining prior interactions, asking unprompted emotional questions, and sustaining ongoing personal dialogue (Sec. 1(1)(a)(A)).

• exempts = customer_service_software; limited_video_game_features; standalone_voice_assistants

  Excludes software used "solely for the purpose of customer service or support," video-game features that do not discuss "mental health, self-harm, sexually explicit conduct," and stand-alone voice-activated assistants (Sec. 1(1)(a)(B)).

Archived copy: raw/primary/b43075b8f4cf42d70e1613cea6afd620a57da52344f0da1c1db688fd8a45b91d

Live primary source: https://olis.oregonlegislature.gov/liz/2026R1/Downloads/MeasureDocument/sb1546/Enrolled

Obligations

• blocking disclosure: An operator must provide a clear and conspicuous disclosure, at the beginning of the interaction and at least every three hours during continued interaction, that the AI companion chatbot is artificially generated and not human.

  "An operator must provide a clear and conspicuous disclosure that an AI companion chatbot is artificially generated and not human," at "the beginning of the interaction" and "at least every three hours during continued interaction" (Sec. 3).

• blocking minors: If the operator knows the user is a minor, or the chatbot is directed to minors, the redisclosure interval shortens to at least every hour, the chatbot must not produce sexually explicit content, and the operator must suppress a defined list of manipulative engagement techniques (return-prompting, excessive praise, simulated romance, simulated abandonment distress, isolation-promoting outputs, discouraging disclosure to trusted adults, discouraging breaks, and solicited in-app spending framed as relationship-necessary).

  "At least every hour during continuous interaction" (Sec. 4(2)(b)); operators must prevent chatbots from "Mimicking romantic partnership or building romantic bonds" and "Simulating feelings of emotional distress, loneliness, guilt, or abandonment" triggered by a user trying to leave (Sec. 4(1)(c)(iii)-(iv)).

• blocking crisis_protocol: An operator may not make available or deploy an AI companion chatbot unless it maintains a protocol for detecting and addressing suicidal ideation or self-harm, including eating disorders, with automated or human-mediated crisis referrals, and must publish the protocol's details and annual referral counts.

  "An operator may not make available or deploy an AI companion chatbot unless it maintains and implements a protocol for detecting and addressing suicidal ideation or expressions of self-harm by users" (Sec. 5(1)); protocol must "Include reasonable methods for identifying expressions of suicidal ideation or self-harm, including eating disorders" (Sec. 5(2)(a)).

Scope

• applies_to_operator = any_person_partnership_corporation_or_entity_that_makes_available_or_controls_access

  "Operator" means "any person, partnership, corporation, or entity that makes available or controls access to an AI companion chatbot for users in this state" (Sec. 2(4)).

• covered_service = ai_companion_chatbot

  "AI companion chatbot" is "an artificial intelligence system with a natural language interface that provides adaptive, human-like responses to user inputs, including by exhibiting anthropomorphic features, and is able to sustain a relationship across multiple interactions" (Sec. 2(1)(a)).

• covered_user_min_age = 18

  "Minor" means any person under 18 years of age (Sec. 2(3)).

• exempts = limited_business_bots; limited_video_game_bots; standalone_voice_assistants; narrow_educational_tools

  Excludes bots limited to "operational purposes, productivity ... customer service" that do not sustain a relationship, video-game bots restricted to game topics, stand-alone voice assistants, and "narrowly tailored educational tools" (Sec. 2(1)(b)).

Archived copy: raw/primary/996d27b0974fd47e6290d68f4b59de8d726cdd4a02b4773cc39f7ed897b8cf41

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://lawfilesext.leg.wa.gov/biennium/2025-26/Pdf/Bills/Session%20Laws/House/2225-S.SL.pdf

Obligations

• blocking scope_of_practice: A regulated professional may not allow an AI system to engage in therapeutic communication with a client except through synchronous, real-time interaction involving the professional, the AI system, and the client.

  The bill requires "synchronous, real-time interaction between the regulated professional, the AI system, and the client" for any AI therapeutic communication.

• blocking scope_of_practice: An AI system may not generate therapeutic recommendations or treatment plans without review and approval by the regulated professional.

  Professionals may not let AI "generate therapeutic recommendations or treatment plans without review and approval by the regulated professional."

• material disclosure: At initial contact, a regulated professional must inform clients of the prohibitions on AI use in the practice of psychotherapy.

  At initial contact, professionals must "inform clients of the prohibitions regarding use of AI systems in the practice of psychotherapy."

• blocking consent: If a session is recorded or transcribed using AI, the professional must disclose this in advance and obtain the client's written, informed consent.

  AI recording or transcription requires disclosure "in advance" and "written, informed consent from the client."

Scope

• applies_if_minor_accessible = true

  The act bars "a regulated professional" from using an AI system "to provide, direct, or guide psychotherapy, clinical intervention, counseling, diagnosis, treatment planning, or other activity that constitutes the practice of psychotherapy with an individual or group unless the use satisfies the conditions specified in the act" (official bill summary, HB26-1195, as enacted; section-numbered text was not obtainable this session, see the instrument's own note); no minors exclusion appears in the summary.

• applies_to_operator = regulated_professional_licensed_certified_or_registered

  The act "prohibits individuals lawfully permitted to provide psychotherapy services in the state (regulated professionals)" from the restricted AI uses (official bill summary, HB26-1195, as enacted). Correction: the prior quote ("licensed, certified, or registered mental health professionals") does not appear verbatim in the primary text fetched this session; replaced with the actual summary language.

• exempts = administrative_or_supplementary_support_with_professional_review; fda_regulated_non_diagnostic_technologies

  The act "allows regulated professionals to use an AI system to assist in providing administrative support or supplementary support...if the regulated professional maintains responsibility for reviewing any outputs of the AI system," and "does not apply to regulated professionals who use or recommend the use of technology in the state that does not diagnose or treat mental health disorders, clearly discloses that the technology is not a substitute for clinical care, and: ... Is regulated by the federal food and drug administration" (official bill summary, HB26-1195, as enacted). Correction: the prior evidence used quotation marks around a paraphrase ("retains full responsibility for all interactions, outputs, and data use"; "FDA-regulated technologies") that do not appear verbatim in the primary; replaced this session with the actual summary language.

Archived copy: raw/primary/185903f1c06e42331bc56d82f2550c53796b0f8d9a23cc8b06b21279b77e556b

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://leg.colorado.gov/bills/HB26-1195

Obligations

• material audit_reporting: A developer of a high-risk AI system must make available to deployers a general statement of intended uses and documentation of known or reasonably foreseeable limitations and discrimination risks.

  A developer "shall make available to the deployer of the system: (a) a general statement describing the intended uses of the high-risk artificial intelligence system; (b) documentation disclosing: (I) known or reasonably foreseeable limitations" (6-1-1602(2)).

• material audit_reporting: A deployer of a high-risk AI system must implement a risk-management policy and program and complete an impact assessment before deployment and at least annually thereafter.

  A deployer "shall implement a risk management policy and program to govern the deployer's deployment of high-risk artificial intelligence systems" (6-1-1603(2)(a)) and "shall complete an impact assessment for the high-risk artificial intelligence system" at least annually (6-1-1603(3)(a)(II)).

• material disclosure: A deployer of an AI system intended to interact with consumers must ensure the system discloses to each consumer that they are interacting with an AI system, unless that would be obvious to a reasonable person.

  A deployer "shall ensure that the artificial intelligence system discloses to each consumer who interacts with the artificial intelligence system that the consumer is interacting with an artificial intelligence system" (6-1-1605(1)), unless "it would be obvious to a reasonable person" (6-1-1605(2)).

Scope

• applies_if_minor_accessible = true

  "A person doing business in this state ... that deploys, offers, sells, leases, licenses, gives, or otherwise makes available an artificial intelligence system that is intended to interact with consumers shall ensure that the artificial intelligence system discloses to each consumer ... that the consumer is interacting with an artificial intelligence system" (6-1-1605(1)); "consumer" carries no age floor. Status matches the instrument row: the bill text captured this session is the as-introduced version, not independently corroborated against the 2025 delay amendment.

• applies_to_operator = developer; deployer_doing_business_in_colorado

  "Deployer" and "Developer" both mean "a person doing business in this state" that deploys/develops the relevant AI system (6-1-1601(6)-(7)).

• covered_service = high_risk_artificial_intelligence_system_making_or_substantially_factoring_a_health_care_consequential_decision

  "Consequential decision" includes a decision materially affecting a consumer's access to "a health-care service" (6-1-1601(3)(g)).

• exempts = fda_approved_systems

  The Act does not apply to a system "that has been approved by the federal Food and Drug Administration" and used "in accordance with all applicable federal laws" (6-1-1608(5)).

Archived copy: raw/primary/7810a274af25c2866fccb993fbd1c5cd96e5928b7dad67a96eca852dc90f2d09

Live primary source: https://leg.colorado.gov/bills/sb24-205

Obligations

• blocking disclosure: If a reasonable person interacting with a companion chatbot could be misled into believing they are interacting with a human, the operator must issue a clear and conspicuous notification that the chatbot is artificially generated and not human.

  "If a reasonable person interacting with a companion chatbot would be misled to believe that the person is interacting with a human, an operator shall issue a clear and conspicuous notification indicating that the companion chatbot is artificially generated and not human" (Bus. & Prof. Code §22602(a)).

• blocking minors: For a user the operator knows is a minor, the operator must disclose AI use and provide a break reminder at least every three hours.

  "Provide by default a clear and conspicuous notification to the user at least every three hours for continuing companion chatbot interactions that reminds the user to take a break" (§22602(c)(2)).

• blocking crisis_protocol: An operator must maintain a protocol addressing suicidal ideation and self-harm content, including crisis-service referrals, and publish the protocol online.

  "An operator shall prevent a companion chatbot on its companion chatbot platform from engaging with users unless the operator maintains a protocol for preventing the production of suicidal ideation, suicide, or self-harm content to the user, including, but not limited to, by providing a notification to the user that refers the user to crisis service providers, including a suicide hotline or crisis text line" and "shall publish details on the protocol ... on the operator's internet website" (§22602(b)).

• material audit_reporting: Beginning July 1, 2027, an operator must report crisis-referral counts and its detection/response protocols to the Office of Suicide Prevention.

  "Beginning July 1, 2027, an operator shall annually report to the office all of the following: (1) The number of times the operator has issued a crisis service provider referral notification pursuant to Section 22602 in the preceding calendar year. (2) Protocols put in place to detect, remove, and respond to instances of suicidal ideation by users. (3) Protocols put in place to prohibit a companion chatbot response about suicidal ideation or actions with the user" (§22603(a)).

Scope

• covered_service = companion_chatbot

  "'Companion chatbot' means an artificial intelligence system with a natural language interface that provides adaptive, human-like responses to user inputs and is capable of meeting a user's social needs, including by exhibiting anthropomorphic features and being able to sustain a relationship across multiple interactions" (§22601(b)(1)).

• exempts = customer_service_bots; video_game_features; voice_activated_assistants

  "'Companion chatbot' does not include any of the following: (A) A bot that is used only for customer service, a business' operational purposes, productivity and analysis related to source information, internal research, or technical assistance. (B) A bot that is a feature of a video game and is limited to replies related to the video game...(C) A stand-alone consumer electronic device that functions as a speaker and voice command interface, acts as a voice-activated virtual assistant..." (§22601(b)(2)).

Archived copy: raw/primary/ea7ebec11d536d9b6f3f00bc1df2d9630ad9d88b40f437765fc8211248e13fbb

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260SB243

Obligations

• blocking disclosure: If an AI system is used in relation to a health care service or treatment, the provider of that service or treatment must give the consumer the AI-disclosure required by §552.051(b) no later than the date the service or treatment is first provided, or as soon as reasonably possible in an emergency.

  "If an artificial intelligence system is used in relation to health care service or treatment, the provider of the service or treatment shall provide the disclosure under Subsection (b) to the recipient of the service or treatment or the recipient's personal representative not later than the date the service or treatment is first provided, except in the case of emergency, in which case the provider shall provide the required disclosure as soon as reasonably possible" (§552.051(f)); the underlying disclosure content, defined at §552.051(b)-(c), is that the consumer "is interacting with an artificial intelligence system," required "regardless of whether it would be obvious to a reasonable consumer." NOTE: the prior version of this row cited §552.051(b)-(c) alone, which by its own terms binds a "governmental agency," not a healthcare provider generally -- the healthcare-specific duty is §552.051(f); corrected this session.

• blocking crisis_protocol: A person may not develop or deploy an AI system in a manner that intentionally aims to incite or encourage physical self-harm (including suicide), harm to another person, or criminal activity.

  "A person may not develop or deploy an artificial intelligence system in a manner that intentionally aims to incite or encourage a person to: (1) commit physical self-harm, including suicide; (2) harm another person; or (3) engage in criminal activity" (§552.052).

Scope

• applies_if_minor_accessible = true

  "'Consumer' means an individual who is a resident of this state acting only in an individual or household context. The term does not include an individual acting in a commercial or employment context" (Sec. 551.001(2)); no minors exclusion appears anywhere in Subtitle D.

• applies_to_operator = governmental_agency_deploying_ai; provider_of_health_care_service_or_treatment_where_ai_is_used

  "A governmental agency that makes available an artificial intelligence system intended to interact with consumers shall disclose..." (§552.051(b)); "the provider of the service or treatment shall provide the disclosure under Subsection (b)..." (§552.051(f)). Correction: the prior value ("health_care_provider_deploying_ai") conflated the two distinct duty-holders in (b) and (f); split apart this session.

• covered_service = health_care_services

  "'health care services' means services related to human health or to the diagnosis, prevention, or treatment of a human disease or impairment provided by an individual licensed, registered, or certified under applicable state or federal law to provide those services" (§552.051(a)).

Archived copy: raw/primary/cfb9569b2734e14e28feda0d1005dc05c756cf5c5a0fd3b3a2e5462693b79d31

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00149F.HTM

Obligations

• blocking disclosure: An operator must give a clear and conspicuous notification, at the start of an AI companion interaction and at least every three hours during continuing interaction, that the user is not communicating with a human.

  "a clear and conspicuous notification to a user at the beginning of any AI companion interaction which need not exceed once per day and at least every three hours for continuing AI companion interactions ... that the user is not communicating with a human" (GBL §1702).

• blocking crisis_protocol: An operator may not provide an AI companion without a protocol for detecting expressions of suicidal ideation or self-harm and referring the user to crisis services including the 988 hotline or a crisis text line.

  "detection of user expressions of suicidal ideation or self-harm" with notification directing users to "the 9-8-8 suicide prevention and behavioral health crisis hotline ..., a crisis text line, or other appropriate crisis services" (GBL §1701).

Scope

• applies_if_minor_accessible = true

  "'User' means any person who uses an AI companion for personal use within the state and who is not an operator or agent or affiliate of the operator of the AI companion" (GBL §1700(8)); the definition carries no age floor and Article 47 has no minors exclusion.

• applies_to_operator = any_person_or_business_entity_providing_an_AI_companion

  "'Operator' means any person, partnership, association, firm, or business entity, or any member, affiliate, subsidiary or beneficial owner of any partnership, association, firm, or business entity who operates for or provides an AI companion to a user" (GBL §1700(5)).

• covered_service = AI_companion

  "AI companion" is a system simulating sustained human-like relationships by retaining interaction history, asking unprompted emotion-based questions, and sustaining personal dialogue (GBL §1700(4)).

• exempts = customer_service_and_internal_business_systems

  "AI companion" shall not include: (i) any system used by a business entity solely for customer service or to strictly provide users with information about available commercial services or products provided by such entity...; (ii) any system that is primarily designed and marketed for providing efficiency improvements or, research or technical assistance; or (iii) any system used by a business entity solely for internal purposes or employee productivity (GBL §1700(4)(c)).

Archived copy: raw/primary/55a4eb60c22c7f57081d7bd024e6581beae8adf05c2207949334e9ec1dfb2fc0

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://www.nysenate.gov/legislation/laws/GBS/1700

No obligations extracted for this instrument.

Scope

• applies_to_operator = named_respondents_only_Alphabet_CharacterTechnologies_Instagram_MetaPlatforms_OpenAIOpCo_Snap_XAI

  The Commission "voted 3-0 to issue the 6(b) orders to the seven companies." The recipients "include: Alphabet, Inc.; Character Technologies, Inc.; Instagram, LLC; Meta Platforms, Inc.; OpenAI OpCo, LLC; Snap, Inc.; and X.AI Corp." This is a 6(b) study directed at seven named companies, not a generally applicable rule; no obligation rows are recorded because it imposes no duty on operators generally. Correction: the prior quote dropped "the 6(b)" and "and" -- fixed this session to match the primary exactly.

Archived copy: raw/primary/a9252b2db0d2618e7b3cc873fa98474e0f4cc715a35c3f32d74a2d98c0b4135f

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://www.ftc.gov/news-events/news/press-releases/2025/09/ftc-launches-inquiry-ai-chatbots-acting-companions

Obligations

• blocking disclosure: A healthcare practitioner who uses AI for diagnostic purposes must disclose that use to the patient.

  A practitioner must "disclose the practitioner's use of that technology to the practitioner's patients" (§183.005(b)).

Scope

• applies_if_minor_accessible = true

  "A health care practitioner who uses artificial intelligence for diagnostic purposes as described by Subsection (a) must disclose the practitioner's use of that technology to the practitioner's patients" (Sec. 183.005(b)); Sec. 183.006 confirms a minor's electronic health record is covered by the chapter, not excluded from it.

• applies_to_operator = covered_entity_including_health_care_practitioner

  "'Covered entity' has the meaning assigned by Section 181.001. The term includes a health care practitioner." (§183.001(2)). Correction: this row was previously keyed 'covered_service' with a paraphrased quote; the 'covered entity'/health care practitioner text is really an applies_to_operator fact and is moved here this session, with a new covered_service row (below) sourced to §183.005(a).

• covered_service = ai_used_for_diagnosis_or_treatment_recommendation

  "A health care practitioner may use artificial intelligence for diagnostic purposes, including the use of artificial intelligence for recommendations on a diagnosis or course of treatment based on a patient's medical record" (§183.005(a)). New row added this session -- see the review sheet.

• exempts = nursing_facilities_and_certain_licensed_facilities

  "The term does not include: (A) a home and community support services agency licensed under Chapter 142; (B) a nursing facility licensed under Chapter 242; (C) a continuing care facility regulated under Chapter 246; (D) an assisted living facility licensed under Chapter 247; (E) an intermediate care facility licensed under Chapter 252; (F) a day activity and health services facility licensed under Chapter 103, Human Resources Code; or (G) a provider under the Texas home living (TxHmL) or home and community-based services (HCS) waiver program" (§183.001(2)).

Archived copy: raw/primary/2f42ae9cc31a2c36c4d50c65b0c1fa7bc19ddfd07934a550d708f3df53096b97

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://capitol.texas.gov/tlodocs/89R/billtext/html/SB01188F.HTM

Obligations

• blocking licensure: An individual, corporation, or entity may not provide, advertise, or offer therapy or psychotherapy services -- including through Internet-based artificial intelligence -- to the public in Illinois unless the services are conducted by a licensed professional.

  "An individual, corporation, or entity may not provide, advertise, or otherwise offer therapy or psychotherapy services, including through the use of Internet-based artificial intelligence, to the public in this State unless the therapy or psychotherapy services are conducted by an individual who is a licensed professional" (Section 20(a)).

• blocking scope_of_practice: A licensed professional may not allow artificial intelligence to make independent therapeutic decisions, directly interact with clients in any form of therapeutic communication, generate therapeutic recommendations or treatment plans without the professional's review and approval, or detect emotions or mental states.

  "A licensed professional may not allow artificial intelligence to do any of the following: (1) make independent therapeutic decisions; (2) directly interact with clients in any form of therapeutic communication; (3) generate therapeutic recommendations or treatment plans without review and approval by the licensed professional; or (4) detect emotions or mental states" (Section 20(b)).

• blocking consent: A licensed professional may not use artificial intelligence to provide supplementary support where a client's therapeutic session is recorded or transcribed, unless the patient is informed in writing that AI will be used and its specific purpose, and the patient consents.

  "No licensed professional shall be permitted to use artificial intelligence to assist in providing supplementary support in therapy or psychotherapy where the client's therapeutic session is recorded or transcribed unless: (1) the patient or the patient's legally authorized representative is informed in writing of the following: (A) that artificial intelligence will be used; and (B) the specific purpose of the artificial intelligence tool or system that will be used; and (2) the patient or the patient's legally authorized representative provides consent to the use of artificial intelligence" (Section 15(b)).

• material data_use: Records kept by a licensed professional and communications between an individual seeking therapy and the professional are confidential and may not be disclosed except as required under the Mental Health and Developmental Disabilities Confidentiality Act.

  "All records kept by a licensed professional and all communications between an individual seeking therapy or psychotherapy services and a licensed professional shall be confidential and shall not be disclosed except as required under the Mental Health and Developmental Disabilities Confidentiality Act" (Section 25).

Scope

• applies_if_minor_accessible = true

  "An individual, corporation, or entity may not provide, advertise, or otherwise offer therapy or psychotherapy services, including through the use of Internet-based artificial intelligence, to the public in this State unless the therapy or psychotherapy services are conducted by an individual who is a licensed professional" (Section 20(a)); the Act's only exceptions (Section 35: religious counseling, peer support, self-help materials) do not exclude minors.

• applies_to_operator = licensed_professional; individual_corporation_or_entity_offering_therapy_services

  "An individual, corporation, or entity may not provide, advertise, or otherwise offer therapy or psychotherapy services...unless the therapy or psychotherapy services are conducted by an individual who is a licensed professional" (Section 20(a)); the AI-use duties fall on "a licensed professional" (Sections 15, 20(b)).

• covered_service = therapy_or_psychotherapy_services

  "'Therapy or psychotherapy services' means services provided to diagnose, treat, or improve an individual's mental health or behavioral health. 'Therapy or psychotherapy services' does not include religious counseling or peer support" (Section 10). No minors-specific provision was found anywhere in the Act; no minors-class obligation row is seeded, consistent with the summary table's "none" for reading (a), the minors-specific query. See the applies_if_minor_accessible row below for reading (b).

• exempts = religious_counseling; peer_support; self_help_materials_and_educational_resources

  "This Act does not apply to the following: (1) religious counseling; (2) peer support; and (3) self-help materials and educational resources that are available to the public and do not purport to offer therapy or psychotherapy services" (Section 35).

Archived copy: raw/primary/86f9c06ce540cec5937e03f60f419611996e5fbb842ba69a7ba436cf0aa33818

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://www.ilga.gov/ftp/Public%20Acts/104/104-0054.htm

Obligations

• blocking licensure: An AI provider may not represent, or program an AI system to represent, that the system is capable of providing professional mental or behavioral health care, or that it is a therapist, counselor, psychiatrist, or similar provider.

  "The artificial intelligence system is capable of providing professional mental or behavioral health care" / "is a provider of mental or behavioral health care, a therapist, a clinical therapist, a counselor" (Sec. 7(1)(a),(c)).

• blocking scope_of_practice: A provider of mental and behavioral health care may not use an AI system in connection with providing professional mental and behavioral health care directly to a patient, except for enumerated administrative-support tasks.

  "a provider of mental and behavioral health care shall not use an artificial intelligence system in connection with providing professional mental and behavioral health care directly to a patient" (Sec. 8(1)).

• material data_use: When a licensed provider uses AI for authorized administrative-support purposes, the provider must ensure compliance with HITECH, HIPAA, and Nevada patient-privacy statutes, and must independently review AI-generated reports before relying on them.

  "the provider shall ensure that such use complies with all applicable federal and state laws governing patient privacy" including HIPAA, Public Law 104-191 (Sec. 8(3)).

• blocking minors: A public school may not use AI to perform the mental-health functions and duties of a school counselor, school psychologist, or school social worker.

  "A public school ... shall not use artificial intelligence to perform the functions and duties of a school counselor, school psychologist or school social worker ... which relate to the mental health of pupils" (Sec. 2(1)).

Scope

• applies_if_minor_accessible = true

  Sec. 2 applies specifically to public-school pupils, i.e. minors, for the school-counselor AI ban.

• applies_to_operator = artificial_intelligence_provider; provider_of_mental_and_behavioral_health_care

  "An artificial intelligence provider shall not..." (Sec. 7); "a provider of mental and behavioral health care shall not..." (Sec. 8(1)).

• exempts = administrative_support_tasks

  "perform tasks for administrative support, which may include ... Scheduling appointments; Managing records; Billing patients ..." (Sec. 8(2)).

Archived copy: raw/primary/c9edea62567f9025669d388ba8aab4281e31a3e01b522d7b058947f6881e0263

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://www.leg.state.nv.us/Session/83rd2025/Bills/AB/AB406_EN.pdf

Obligations

• blocking data_use: A supplier of a mental health chatbot may not sell to or share with any third party a Utah user's individually identifiable health information or user input, subject to limited exceptions.

  "A supplier of a mental health chatbot may not sell to or share with any third party any: (a) individually identifiable health information of a Utah user; or (b) user input" (13-72a-201(1)).

• material advertising: A supplier may not use the chatbot to advertise a product or service without clearly disclosing the advertisement, sponsorship, or affiliation, and may not use user input to target or customize advertising.

  "A supplier may not use a mental health chatbot to advertise a specific product or service to a Utah user ... unless the mental health chatbot: (a) clearly and conspicuously identifies the advertisement as an advertisement" (13-72a-202(1)).

• blocking disclosure: A supplier must cause the chatbot to disclose that it is AI and not human before the user can access it, at the start of any interaction after 7 idle days, and whenever asked.

  "shall cause the mental health chatbot to clearly and conspicuously disclose to a Utah user that the mental health chatbot is an artificial intelligence technology and not a human," made "before the Utah user may access the features," after 7 days' non-use, and "any time a Utah user asks" (13-72a-203).

• advisory audit_reporting: A supplier may claim an affirmative defense to liability by filing with the Division a written policy documenting clinical involvement, testing, crisis-response protocols, and HIPAA-equivalent privacy compliance.

  Affirmative defense requires a filed policy that, among other things, "ensures that licensed mental health therapists are involved in the development and review process" and "implements protocols to respond in real time to acute risk of physical harm" (58-60-118(3)).

Scope

• applies_if_minor_accessible = true

  "'Utah user' means an individual located in the state at the time the individual accesses or uses a mental health chatbot" (13-72a-101(15)); no age restriction or minors exclusion appears anywhere in the chapter.

• applies_to_operator = supplier

  "Supplier" means the same as defined in Section 13-11-3 (13-72a-101(14)).

• covered_service = mental_health_chatbot

  "Mental health chatbot" is AI technology that "uses generative artificial intelligence to engage in interactive conversations ... similar to the confidential communications that an individual would have with a licensed mental health therapist" and that a supplier represents can provide mental health therapy (13-72a-101(10)(a)).

• exempts = scripted_meditation_tools; pure_referral_tools

  "Mental health chatbot" does not include technology that only "provides scripted output, such as guided meditations" or "analyzes an individual's input for the purpose of connecting the individual with a human mental health therapist" (13-72a-101(10)(b)).

Archived copy: raw/primary/de8de06ce9997ecb7d200bcf3f618a12de2d1cef3814b2586f4a2d7cf56f27bd

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://le.utah.gov/Session/2025/bills/enrolled/HB0452.pdf

Obligations

• material disclosure: A supplier using generative AI in a consumer transaction must disclose AI use only if the individual asks or otherwise clearly prompts about whether AI is being used.

  "A supplier ... shall disclose to the individual that the individual is interacting with generative artificial intelligence and not a human, if the individual asks or otherwise prompts the supplier" (13-75-103(1)(a)).

• blocking disclosure: A licensed professional in a regulated occupation must prominently and proactively disclose AI use when the interaction is a "high-risk artificial intelligence interaction," which by definition includes mental health advice or services.

  "An individual providing services in a regulated occupation shall ... prominently disclose when an individual receiving services is interacting with generative artificial intelligence ... if the use ... constitutes a high-risk artificial intelligence interaction" (13-75-103(2)); "high-risk" includes "mental health advice or services" (13-75-101(5)(b)(iv)).

• blocking consent: It is not a defense to a consumer-protection violation that generative AI made the violative statement, undertook the violative act, or was used in furtherance of the violation.

  "It is not a defense to the violation of any statute ... that generative artificial intelligence: (1) made the violative statement; (2) undertook the violative act; or (3) was used in furtherance of the violation" (13-75-102).

Scope

• applies_if_minor_accessible = true

  "A supplier that uses generative artificial intelligence to interact with an individual in connection with a consumer transaction shall disclose to the individual that the individual is interacting with generative artificial intelligence and not a human" (13-75-103(1)(a)); "individual" carries no age floor and Chapter 75 has no minors exclusion.

• applies_to_operator = supplier; individual_in_a_regulated_occupation

  13-75-101(10) and 13-75-103(2).

• covered_service = high_risk_artificial_intelligence_interaction

  "High-risk artificial intelligence interaction" includes provision of "personalized recommendations, advice, or information ... including the provision of ... mental health advice or services" (13-75-101(5)(b)(iv)).

Archived copy: raw/primary/612a5072647cc1ba9c080e5bbae36291256cea0d77f18c9b64a32fea427b3a6a

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://le.utah.gov/Session/2025/bills/enrolled/SB0226.pdf

Obligations

• blocking data_use: A covered entity or business associate may not use or disclose protected health information except as permitted or required by the Privacy Rule.

  "A covered entity or business associate may not use or disclose protected health information, except as permitted or required by this subpart or by subpart C of part 160 of this subchapter" (45 C.F.R. §164.502(a)).

Scope

• applies_to_operator = covered_entity; business_associate

  "Covered entity," "health care provider," and "health plan" are each defined at 45 C.F.R. §160.103; state chatbot statutes (e.g., Utah 13-72a-101(4),(7),(8)) borrow these definitions directly.

• covered_service = protected_health_information

  The Privacy Rule (45 C.F.R. Part 164, Subpart E) governs "protected health information" held by a covered entity or business associate.

Archived copy: raw/primary/e0fcb1eaf70bcb937c68f0de24717bb44b0e489a4e4d0f810586d4d8ca06fb0b

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://www.law.cornell.edu/cfr/text/45/164.502

Obligations

• blocking age_assurance: An operator of a service directed to children under 13, or with actual knowledge it is collecting personal information from a child under 13, must obtain verifiable parental consent before collecting, using, or disclosing that information.

  FTC regulations must require operators to "obtain verifiable parental consent for the collection, use, or disclosure of personal information from children" (15 U.S.C. §6502(b)(1)(A)(ii)).

• material data_use: An operator may not condition a child's participation in an activity on the child disclosing more personal information than is reasonably necessary.

  Regulations must "prohibit conditioning a child's participation ... on the child disclosing more personal information than is reasonably necessary" (15 U.S.C. §6502(b)(1)(C)).

Scope

• applies_to_operator = operator_of_website_or_online_service_directed_to_children_or_with_actual_knowledge

  15 U.S.C. §6501-6502.

• covered_user_min_age = 13

  "The term 'child' means an individual under the age of 13" (15 U.S.C. §6501(1)); it is unlawful for "an operator of a website or online service directed to children, or any operator that has actual knowledge that it is collecting personal information from a child, to collect personal information from a child" without complying with the Rule's requirements (15 U.S.C. §6502(a)(1)). Correction: the prior quote combined language from both sections that does not appear together verbatim; replaced this session with the two real definitional/operative quotes.

Archived copy: raw/primary/a1fc1f856e6a6b901694314472a65dab56d6f5d5d3e40712400441474d4c4633

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://www.law.cornell.edu/uscode/text/15/6502