Not human, not optional: The new wave of state AI chatbot laws
March 17, 2026
Not human, not optional: The new wave of state AI chatbot lawsMarch 17, 2026 State lawmakers are moving quickly from “AI transparency” talk to chatbot-specific rules that can force product changes—recurring “not human” notices, self-harm escalation protocols, safeguards for minors, audits, and even public reporting. For companies offering customer-facing chat, companion-style features, or AI that influences employment, credit, housing, healthcare, or education decisions, the risk is no longer theoretical: Requirements are emerging on a state-by-state timeline, with potential exposure ranging from investigations and reputational harm to private lawsuits and injunctions. The practical takeaway is urgent: Treat chatbot compliance like a product-safety and governance program now before a fast-moving patchwork hardens into your operating reality. What’s changing and why it mattersWhat’s new is not the concept of transparency; it’s the operational burden. States are drafting chatbot laws that reach into the product: how you disclose AI identity, how you handle high-risk conversations, what you log, and what you can prove after an incident. That’s a meaningful shift and it matters now because the first states to move are creating a copy and paste playbook, turning compliance from a single memo into a cross-functional project spanning product decisions, engineering work, vendor management, and executive risk calls. Most proposals fall into three buckets, and each bucket drives a different set of build decisions: 1) Companion/emotionally responsive chatbots: Safety plus recurring disclosures This bucket is about chatbots that feel personal. Legislatures are focusing on emotionally responsive “companion” features because they can keep users engaged, influence behavior, and reach minors. Recent Pacific Northwest proposals (including Oregon SB 1546 and Washington HB 2225) point in the same direction: Make it obvious it’s AI (and keep reminding users during long sessions), add guardrails for minors, and build a real self-harm escalation path (not just a disclaimer). The business risk here is direct: These proposals can create obligations either you engineered into the product or you didn’t. And where private lawsuits or injunctive relief are on the table, gaps can turn into emergency fixes, unhappy customers, and reputational damage. 2) High-impact decision chatbots: Governance when AI influences outcomes This bucket is about when chat starts steering outcomes. If a chatbot meaningfully influences eligibility, ranking, access, or pricing in areas like employment, credit, housing, healthcare, or education, expect regulators to ask the hard questions: What is it supposed to do? How was it tested? How do you monitor drift? What happens when it’s wrong? Colorado’s SB 24 205 is one early model, but the larger trend is governance—documentation, monitoring, and escalation paths that are credible in the real world. 3) Employment use cases: Bias audits plus notices Employment deserves its own callout because it’s where AI rules have already become operational. NYC Local Law 144 put bias audits and notices on the map for automated hiring tools, and similar expectations are spreading through customer diligence and regulator attention. If your chatbot is used for screening, interviewing, scoring, or recommendations, assume you’ll need to explain how it works, how it was assessed, and how people can challenge outcomes. What this means for your product teamA recurring theme is proof. It won’t be enough to say you have a policy; you’ll need to show what you shipped, what you tested, what you monitored, and what you did when something went wrong. That means logging decisions, clarifying ownership, and keeping the kind of documentation that customers (and regulators) actually ask for. Actionable takeaways
__________ If you have any questions about this Legal Briefing, please feel free to contact any of the attorneys listed or the Eversheds Sutherland attorney with whom you regularly work. Key contacts
Melissa L. Fox Partner Atlanta, United States Rachel M. Reid Partner Atlanta, United States Brandi A. Taylor Partner San Francisco, United States | San Diego, United States Luisa Domenichini Senior Associate New York, United States Tanvi Shah Senior Associate San Diego, United States | San Francisco, United States Latest Insights
Latest News
Latest Events
legal updates June 25, 2026 UK: FCA consults on changes to its penalty and decision-making policies legal updates June 25, 2026 Investing in All of America Act increases SBIC leverage and institutional c... legal updates June 24, 2026 Cast a wider net: Notice 2026-36 previews new era for the Section 4960 exci... legal updates June 23, 2026 Implementation of the EU Pay Transparency Directive - The latest developmen... client news June 18, 2026 Eversheds Sutherland Advises Official Committee of Unsecured Creditors as P... client news June 17, 2026 Advising Trane Technologies on the acquisition of Transport-Kälte-Vertrieb ... firm news June 15, 2026 Eversheds Sutherland continues European expansion with further strategic pa... client news June 09, 2026 Eversheds Sutherland powers 12 key deals for Gresham House Energy Storage F... virtual Energy Transition Series - Project Financing BESS: Comparing the UK market ... July 08, 2026 10:00 ET | 15:00 BST | 16:00 CET virtual UAE - Employment law in the Dubai International Financial Centre September 10, 2026 9.30am - 1.30pm (GMT) Virtual in-person Managing AI use in the workplace: what every UK HR team needs to know September 10, 2026 9.30am - 1.00pm (BST) London, United Kingdom in-person Basic foundations of US employment law September 17, 2026 9.30am - 4.30pm (GMT) London, United Kingdom |