AI Regulation

State AI Companion Bot Laws: What 12 States Require in 2026

Twelve states regulate companion bots through differing disclosure, minor-safety, crisis-response, and other requirements. This analysis separates recurring governance patterns from state-specific rules in California, Colorado, and beyond.

💡

TL;DR:
Twelve states have enacted companion-bot laws, but the requirements are not uniform. Organizations should map recurring controls such as AI disclosure, minor safeguards, and crisis protocols to state-specific rules as key 2027 compliance dates approach.

What you need to know

The change: Twelve states have enacted companion-bot laws with recurring themes but materially different coverage and obligations. Separate state rules also govern specified uses of automated decision-making in employment and other significant decisions.
Who is affected: AI providers, employers using AI in employment processes, general counsel, compliance teams, HR leaders, privacy teams, product teams, and trust-and-safety functions.
Why it matters: A model inventory alone may not capture the relevant compliance questions. Requirements can depend on how AI is used, whom it affects, and the jurisdiction involved.
What to do first: Inventory consequential AI uses, then distinguish reusable internal controls from state-specific legal requirements.
Key dates: Colorado's conversational-AI requirements and California's ADMT-specific requirements begin January 1, 2027. California's principal SB 1119 child-safety provisions become operative July 1, 2027. (leg.colorado.gov) (Leginfo)

Want the full decision layer?

Paid members receive deeper analysis, early-warning signals, and scenario breakdowns on how AI and policy shifts play out in practice.

Access the PolicyEdge AI Intelligence Terminal

CSBS AI Supervisory Framework visual with layered data paths converging through a central review structure.

CSBS AI Supervisory Framework: What State Examiners May Ask

The CSBS AI Supervisory Framework gives state examiners a clearer approach to AI oversight. See what it covers, how it differs from federal model-risk guidance, and what financial institutions should review.

DOJ AI regulation by prosecution visualized as data signals meeting a fixed legal boundary in a dark policy grid.

DOJ AI Regulation by Prosecution: What Blanche’s Line Means

Attorney General Todd Blanche says DOJ will not pursue “regulation by prosecution” against AI companies absent a statutory violation. Existing employment and consumer-protection laws can still apply when AI is involved.

ChatGPT Health and HIPAA visualized as health-data streams crossing regulatory boundaries into consumer AI.

ChatGPT Health and HIPAA: What Changes When Health Data Moves to Consumer AI

ChatGPT Health can receive patient-directed health data outside HIPAA’s framework. Here’s what HHS, FTC rules, and state privacy laws mean for governance teams.

AI securities litigation visual with converging signal lines moving through layered governance controls.

AI Securities Litigation: What H1 2026 Data Actually Shows

AI-related cases were a minority of H1 2026 securities filings but accounted for 73% of two major market-loss measures. Here’s what the numbers mean for boards, GCs, disclosure teams, IR, and AI leaders.