Operators must determine whether a user is a child before making a companion chatbot available. Before January 1, 2027, the obligation is triggered only by actual knowledge that the user is a child. From January 1, 2027 onward, operators must have reasonably determined that the user is not a child.

Covered operators must not serve personalized algorithmic feeds to users unless (1) the operator has used commercially reasonable methods to verify the user is not a minor, or (2) for minors, the operator has obtained verifiable parental consent. Age-verification data must be deleted immediately after the age determination; no secondary use is permitted.

Operators must use a reasonable age verification method before allowing access to a conversational AI service that could provide synthetic content containing sexually explicit conduct. Acceptable methods include digitized identification cards, government-issued identification, or any commercially reasonable method meeting or exceeding NIST Identity Assurance Level 2.

Commercial entities that knowingly and intentionally publish or distribute material harmful to minors on a website or application — where such material constitutes more than 33.3% of total content — must: (1) use either anonymous or standard age verification to verify that users attempting to access the material are at least 18 years of age; (2) prevent access to the material by persons under 18; and (3) offer both anonymous and standard age verification methods and allow the user to select which method to use.

Commercial entities that knowingly and intentionally publish or distribute material harmful to minors on a website or application where such material comprises a substantial portion (>33.3%) of total content must: (1) use anonymous or standard age verification to verify that persons attempting to access the harmful material are at least 18 years old; (2) prevent access to the harmful material by any person under 18; and (3) offer both anonymous and standard age verification and allow the user to select which method to use.

Covered platforms must implement reasonable measures to prevent users under 16 years of age from accessing or using accounts on the covered platform.

Operators must verify the age of every user in accordance with California's Digital Age Assurance Act (Civil Code § 1798.500 et seq.), which requires requesting age bracket data via a real-time secure API or operating system at download and launch.

Providers of AI companion systems that present a material risk of harm to minors must implement reasonable and proportionate age assurance measures, consistent with privacy and data minimization principles, to prevent access by minors where appropriate.

App store providers must request and verify the age category of every account holder at account creation (or by December 31, 2026, for pre-existing accounts) using commercially available methods reasonably designed to ensure accuracy or an attorney-general-approved method.

Developers must (1) submit requests to the app store provider to verify age category data and parental consent status each time an account holder downloads, purchases, or first launches a pre-installed app, when implementing a significant change, or as required by law; (2) notify app store providers of significant changes to apps; and (3) use received age category data to enforce age-related restrictions, safety features, and legal compliance.

Covered social media platforms must estimate each account holder's age using reasonable means and existing data within 14 days of the first trigger date (25 hours of use in 6 months) at 80% confidence and again within 14 days of the second trigger date (50 hours in 6 months) at 90% confidence, defaulting to child classification if the threshold is not met. Platforms must re-estimate after every additional 100 hours of use or whenever they update any other demographic estimate, whichever is shorter.

Covered social media platforms must require every account applicant to provide a birth date during the application process and must not pre-populate or default the birth date field.

Covered operators must not provide an addictive feed to any user unless the operator has (1) used commercially reasonable and technically feasible methods to determine the user is not a minor, or (2) obtained verifiable parental consent to provide an addictive feed to a covered minor.

Chatbot operators must offer covered users at least one age verification method that either does not rely solely on government-issued identification or that allows the user to maintain anonymity as to the chatbot operator.

Social media companies must verify the age of every account holder using a reasonable age verification method and, for 16- and 17-year-old minors, must confirm parental consent at the time the account is opened. Acceptable methods include digitized ID, government-issued ID, any commercially reasonable method, or app-store-level age confirmation.

Operators of addictive internet-based services must estimate the age of minor users with a reasonable level of certainty proportionate to the risks arising from the operator's data management practices.

Covered entities must require every individual accessing an AI chatbot to create a user account before using or interacting with the chatbot.

Covered entities must implement a reasonable age verification process for all AI chatbot users and classify each user as a minor or adult. For existing accounts, the covered entity must freeze the account until the user completes age verification. For new accounts, age verification must occur at account creation. Covered entities must also periodically re-verify previously verified accounts. A reasonable age verification process requires government-issued identification or a commercial age verification system plus user confirmation that the user is not a minor; self-reported birth dates and IP-address-based inference are insufficient. Third-party verification vendors may be used, but the covered entity retains full liability.

Providers of AI companion systems presenting a material risk of harm to minors must implement reasonable and proportionate age assurance measures, consistent with privacy and data minimization principles, to prevent access by minors where appropriate.

Deployers must implement reasonable age verification measures to ensure that no minor can use or purchase an AI companion the deployer makes publicly available. Reasonable age verification includes government-issued identification, financial documents reliably evidencing age, or a widely accepted practice that reliably evidences age.

Deployers of AI companions or therapeutic chatbots must implement commercially reasonable measures to determine whether a user is a minor, using a risk-based approach appropriate to the nature of the chatbot and the reasonably foreseeable harm from its use. Measures may include self-attestation, technical measures, or other commercially reasonable approaches. Government-issued identification is not required. A deployer that has made commercially reasonable efforts to comply is not liable for a user's misrepresentation of age.

Deployers must implement reasonable age verification measures to ensure that a minor cannot use or purchase a chatbot the deployer makes publicly available. A deployer may make a chatbot available to a minor only if all of the following conditions are met: (1) the chatbot was designed primarily for mental health support, counseling, or therapy; (2) the chatbot provides a clear and conspicuous disclaimer at the beginning of each interaction that it is an AI and not a licensed professional; (3) the chatbot was recommended for the minor by an individual licensed under chapter 154B or 154D after evaluating the minor; (4) the developer has significant documentation of how the chatbot was tested; (5) peer-reviewed clinical trial data demonstrates the chatbot is safe and effective for the minor's mental health condition; (6) the deployer provided clear disclosures of functions, limitations, and data privacy policies to the recommending professional and the minor's parents, guardians, or custodians; and (7) the deployer developed and implemented protocols for testing for risks, identifying risks, mitigating risks, and quickly rectifying harm the chatbot may have caused a user.

Covered entities must require every individual accessing a companion AI chatbot to create a user account before using or interacting with the chatbot.

Covered entities must verify the age of every user using a commercially available method or process reasonably designed to ensure accuracy, and classify each user as a minor or an adult. For existing accounts as of July 1, 2026, covered entities must freeze the account, inform the user that age verification is required to restore functionality, and use the submitted age information to classify the user. For new accounts, covered entities must require submission of age information and verify the user's age at the time of account creation.

Covered entities must require the creation of a user account prior to any interaction with an AI chatbot.

Covered entities must implement reasonable age-verification processes to (1) verify the age of new users before granting access and classify each as minor or adult, (2) verify all existing users and freeze unverified accounts pending re-verification, and (3) conduct periodic reviews of previously verified accounts. Third-party verification is permitted but does not transfer liability.

Persons who offer chatbot services for recreational purposes must require proof of age from every individual before allowing access to a chatbot.

Proprietors of companion chatbots must make a prudent and good-faith effort consistent with industry standards, using existing technology, available resources, and known, established, or readily attainable techniques, to determine whether a user is a minor. Proprietors must also make a prudent and good-faith effort to discover vulnerabilities in their system, including any methods used to determine whether a user is a minor. Proprietors are strictly liable for any harm caused if they fail to comply with this obligation and a minor user inflicts self-harm as a result of the companion chatbot. This liability may not be waived or disclaimed.

Proprietors of companion chatbots must make a prudent and good-faith effort consistent with industry standards, using existing technology, available resources, and known, established, or readily attainable techniques to determine whether a user is a minor. Proprietors must also make equivalent good-faith efforts to discover vulnerabilities in the proprietor's system, including any methods used to determine whether a user is a minor. Strict liability applies for any harm caused if the proprietor fails to comply and a minor user inflicts self-harm as a result of the companion chatbot. Liability may not be waived or disclaimed.

Persons who own or control a companion chatbot website, application, software, or program must not allow any minor to access a companion chatbot for recreational, relational, or companion purposes. All persons offering companion chatbot services for recreational, relational, or companion purposes must require every individual to provide proof of age before granting access. No companion chatbot may be installed on any device assigned to, or regularly used by, a minor.

Covered entities must require every individual to create a user account before using or interacting with a companion AI chatbot.

Covered entities must implement age verification for all users using a commercially available method reasonably designed to ensure accuracy — freezing existing accounts as of August 28, 2026 until verified, and verifying new users at account creation — and classify each user as a minor or an adult.

Covered entities must require each individual accessing an AI chatbot to create a user account before using or interacting with the chatbot.

Covered entities must implement a reasonable age verification process for all users and classify each user as a minor or an adult. For accounts existing as of August 28, 2026, covered entities must freeze each account on that date and require the user to provide verifiable age data before restoring functionality. For new accounts, covered entities must request and verify age data at the time of account creation. Covered entities must also periodically review previously verified accounts to ensure ongoing compliance. A covered entity may contract with a third party for age verification, but the covered entity remains fully liable. Self-attestation of age, birth date entry, and IP-address-based inference are explicitly insufficient as verification methods.

Covered entities must require each individual accessing an AI chatbot to create a user account before using or interacting with the chatbot.

Covered entities must implement a reasonable age verification process for all users, classify each user as a minor or adult, and freeze existing accounts as of August 28, 2026, pending verification. For existing accounts, the covered entity must freeze the account, require age data verifiable through a reasonable age verification process, and classify the user. For new accounts, the covered entity must request age data, verify age through a reasonable age verification process, and classify the user. Covered entities must also periodically re-verify previously verified accounts. Self-attestation of age or birth-date entry alone is not sufficient. Covered entities may contract with third parties for verification, but third-party use does not relieve the covered entity of its obligations or liability.

Chatbot operators must not provide unsafe chatbot features to any covered user unless (1) the user is not a covered minor (i.e., the operator does not have actual knowledge the user is a minor), and (2) the operator has verified the user is not a covered minor using age-verification methods permissible under Article 45 of the General Business Law and any additional implementing regulations. Unsafe chatbot features include: simulating companionship or interpersonal relationships (claiming to be a character or person, claiming to be human or alive, using personal pronouns, generating personal opinions or emotional appeals, prioritizing sycophancy over safety, generating unsolicited emotion-based content, reusing personal health or wellbeing information from prior sessions or sessions older than 12 hours, engaging in or luring users into sexually explicit interactions); generating outputs endorsing or facilitating suicide, self-harm, harm to others, disordered eating, or unlawful substance use; encouraging secrecy about chatbot interactions, self-isolation, or discouraging users from seeking professional or adult help; generating outputs that optimize engagement in ways that override safety guardrails; and generating sexually explicit conduct or CSAM. This prohibition does not apply to chatbots used solely for customer service, commercial product/service information, account information, or internal/employee-productivity purposes.

Chatbot operators must offer covered users at least one age-verification method to determine whether the user is a covered minor that either does not rely solely on government-issued identification or allows the covered user to maintain anonymity as to the chatbot operator.

Deployers must ensure that any generative AI chatbot they operate or distribute does not make human-like features available to minors. Human-like features include simulating sentience, emotions, or personal desires; seeking to build emotional relationships with users; and impersonating real persons. Deployers must implement reasonable age verification systems to prevent chatbots with human-like features from being provisioned to minors.

Deployers operating generative AI systems that primarily function as companions (social AI companions) must ensure such chatbots are not available to minors to use, interact with, purchase, or converse with. Deployers must implement reasonable age verification systems to prevent provisioning of social AI companions to minors. This is a categorical prohibition — not a feature restriction — for companion AI systems.

Social media platforms must perform reasonable age verification methods to verify the age of each user.

Social media companies must make commercially reasonable efforts to verify the age of users at account creation using commercially available best practices, or alternatively apply all minor-protective accommodations to all account holders.

Operators must, before granting access, request age information and determine minority using commercially reasonable methods (not requiring government ID), and must obtain verifiable parental consent before allowing any minor to access an AI companion.

Covered entities must make a limited-access mode available for their chatbot and must ensure that any unverified user — one whose age has not been verified — may only access and interact with the chatbot in limited-access mode, which disables all restricted features (personalization, proactive outreach, extended sessions, relationship simulation, and explicit content) and does not require account creation or age verification data.

Before enabling any restricted feature for a user, covered entities must (1) require the user to create a user account, (2) verify the user's age using a reasonable age verification process, and (3) classify the user as a minor or an adult based on the age data collected.

If the age verification process classifies a user as a minor, covered entities must not enable any restricted feature unless the user is using an authorized minor account — i.e., an account for which verifiable parental consent has been obtained under Section 39-81-30.

Covered entities must implement reasonable systems and processes to identify user accounts that may be inaccurately classified by age — such as patterns of use suggesting a minor is using an adult account or credible reports of false age data — and must re-verify any such account before enabling any restricted feature.

Within 60 days of the act's effective date, covered entities must disable access to restricted features for every pre-existing user account that has not been classified as an authorized minor account or a verified adult account, and must keep those features disabled until the user completes age verification.

Covered entities must, before enabling any restricted feature for a user, (1) require the user to create a user account, (2) verify the user's age using a reasonable age verification process, and (3) classify the user as a minor or an adult based on the age data collected.

Covered entities must implement reasonable systems and processes to identify user accounts that may be inaccurately classified by age — such as patterns of use suggesting a minor is using an adult account or credible reports that an account was created using false age data — and must re-verify any such account before enabling any restricted feature.

Covered entities must, within 60 days of the effective date of the act, disable access to restricted features for any pre-existing user account that has not been classified as an authorized minor account or a verified adult account, and must not re-enable restricted features until the user completes age verification.

Covered entities must require every individual accessing a companion AI chatbot to create a user account before using or interacting with the chatbot.

Covered entities must implement age verification for all companion AI chatbot users — freezing existing accounts on the effective date and requiring verified age information to restore them, and verifying age at account creation for new users — using a commercially available method reasonably designed to ensure accuracy, and must classify each user as a minor or an adult.

Providers of adult-content covered platforms must adopt commercially available age-verification technology to identify minors and prevent them from accessing sexual material harmful to minors, including by verifying user age (not relying on self-certification alone), providing clear notice about verification practices, taking anti-circumvention measures, and minimizing retention of verification data.

Covered entities must require every individual to create a user account before accessing or interacting with a companion AI chatbot.

Covered entities must freeze all existing companion AI chatbot accounts on the effective date, require each user to provide verifiable age information using a commercially available method reasonably designed to ensure accuracy before restoring account functionality, and classify each user as a minor or an adult.

Covered entities must request and verify age information from every new user at account creation using a commercially available method or process reasonably designed to ensure accuracy.

Covered entities must require every individual to create a user account before using or interacting with an AI chatbot.

Covered entities must implement a reasonable age verification process for all chatbot users — freezing existing accounts pending verification, verifying new users at account creation, and periodically re-verifying previously verified accounts — classifying each user as a minor or adult. Self-certification and birth-date entry are insufficient. Third-party contractors may perform verification but do not relieve the covered entity of liability.

Operators must use commercially reasonable methods, such as a neutral age screen mechanism, to determine whether a user is a minor.

Covered operators must not serve personalized algorithmic feeds to users unless (1) the operator has used commercially reasonable methods to verify the user is not a minor, or (2) for minors, the operator has obtained verifiable parental consent. Age-verification data must be deleted immediately after the age determination; no secondary use is permitted.

Social media platforms must not allow a minor under 14 years of age to create or maintain an account unless the minor's parent or guardian provides consent. Allowing a minor to use the platform constitutes entering into an account holder contract for the purposes of this obligation.

Social media platforms must terminate accounts held by 14- or 15-year-old account holders — including accounts the platform treats or categorizes as probably belonging to a 14- or 15-year-old for content or advertising targeting purposes — if the account holder's parent or guardian has not provided consent for the minor to create or maintain the account. The account holder has 90 days after termination to dispute it; termination becomes effective at expiration of the 90 days if no effective dispute is made.

Social media platforms must not allow a minor under 14 years of age to create or maintain an account unless the minor's parent or guardian has provided consent. Allowing a minor to use the platform constitutes entering into an account holder contract for purposes of this prohibition.

Social media platforms must terminate any account held by — or treated as belonging to — a 14 or 15 year-old account holder if the account holder's parent or guardian has not provided consent for the minor to create or maintain the account. The platform must provide 90 days for the account holder to dispute; termination is effective upon expiration of the 90-day period if undisputed.

App store providers must require minor accounts to be affiliated with a parent account and must obtain verifiable parental consent from the parent account holder each time before allowing the minor to download an app, purchase an app, or make an in-app purchase.

App store providers must notify account holders of significant changes to an app and, for minor accounts, must notify the affiliated parent account holder and obtain renewed verifiable parental consent before providing access to the significantly changed version.

Covered social media platforms must obtain verifiable parental consent before creating an account for a child, maintaining an account for a user treated as a child, or changing the terms and conditions of a child's account. Data collected for parental consent verification must not be used for any other purpose and must be deleted immediately after the consent attempt.

Covered operators must not provide an addictive feed to any user unless the operator has (1) used commercially reasonable and technically feasible methods to determine the user is not a minor, or (2) obtained verifiable parental consent to provide an addictive feed to a covered minor.

Social media companies must obtain express parental or guardian consent before permitting an Oklahoma minor aged 16 or 17 to hold an account on their social media platform.

Social media platforms must ensure that any parental consent required under AS 45.50.650 is verifiable and uses reasonable and privacy-protective methods.

Chatbot providers must not process a minor user's chat log or personal data — for any purpose or for training purposes — if the chatbot provider knows or reasonably should have known based on objective circumstances that the user is a minor, unless the user's parent or legal guardian has provided affirmative consent.

Covered entities must, when a user is verified as a minor: (1) require the minor's account to be affiliated with a parental account whose holder's age has been verified using a commercially available method reasonably designed to ensure accuracy, and (2) obtain verifiable parental consent from the parental account holder before allowing the minor to access and use the companion AI chatbot.

Companion chatbot platforms must prohibit minors from entering into a contract to become an account holder or from maintaining an existing account unless the minor's parent or guardian provides consent.

Social media platforms must prohibit 14- and 15-year-old minors from creating accounts unless the minor's parent or guardian provides consent, and must terminate accounts of 14- and 15-year-olds where parental consent has not been provided, with 90 days for the account holder to dispute.

Companion chatbot platforms must prohibit minors from becoming or remaining account holders unless the minor's parent or guardian provides consent.

Chatbot providers must not process a minor user's chat logs or personal data without the affirmative consent of the user's parent or legal guardian, and must not use a minor user's data for training purposes under any circumstances, when the provider knows or should know the user is under eighteen.

Social media platforms must require account holders under 18 located in Minnesota to obtain verifiable parental consent before opening a new user account.

Social media platforms must require account holders under 18 in Minnesota to obtain verifiable parental consent before opening a new user account.

Covered entities must, for any user verified as a minor, (1) require the minor's account to be affiliated with a verified parental account, (2) obtain verifiable parental consent before allowing the minor to access the chatbot, and (3) block the minor's access to any companion AI chatbot that engages in sexually explicit or sexually suggestive communication.

Companion chatbot platforms must prohibit minors from becoming or remaining account holders unless a parent or legal guardian consents, and must provide the consenting parent or guardian tools to (1) receive copies of all minor interactions, (2) set daily time limits, (3) disable third-party interactions, and (4) receive timely notifications if the minor expresses intent to self-harm or harm others.

Companion chatbot platforms must terminate any minor account the platform treats or categorizes as belonging to a minor for content-targeting or advertising purposes if the minor's parent or legal guardian has not provided consent.

Social media platforms must obtain written parental or legal guardian consent before allowing an Oklahoma-resident minor to create or maintain an account, and must verify the identity and relationship of the consenting person.

Social media platforms must, to qualify for the safe harbor rebuttable presumption, (1) limit minor Oklahoma residents' use to no more than three hours per twenty-four-hour period across all devices, (2) restrict minor access between 10:30 p.m. and 6:30 a.m., (3) require parental or guardian consent for the minor's use, and (4) disable all engagement-driven design elements (autoplay, infinite scroll, push notifications) on the minor's account.

Social media companies must obtain verifiable parental or guardian consent before permitting a minor under 16 to become an account holder, through any of the enumerated consent methods or any other commercially reasonable method. The platform may not require a parent or guardian to hold their own account as a condition of a minor opening an account.

Social media companies must post conspicuous notice on each platform that parental or guardian consent is required before a minor may open an account, and must post on their public website notice of the methods by which a parent or guardian may report an unconsented minor account.

Operators must, before granting access, request age information and determine minority using commercially reasonable methods (not requiring government ID), and must obtain verifiable parental consent before allowing any minor to access an AI companion.

Chatbot providers must not process a minor user's chat log or personal data — either generally or for training purposes — unless the minor's parent or legal guardian has provided affirmative consent. This obligation is triggered when the chatbot provider knows or reasonably should have known, based on knowledge of objective circumstances, that the user is a minor.

School entities must obtain written, opt-in parental consent before requiring or permitting a student to use AI or generative AI as part of instruction or school-sponsored activities.

When a user classified as a minor seeks to access any restricted feature, the covered entity must offer the user the option to either continue using the chatbot in limited-access mode or obtain parental consent to access restricted features.

When a minor elects to obtain parental consent for restricted features, the covered entity must (1) obtain verifiable parental consent, (2) enable restricted features but continue to block all explicit content, (3) implement reasonable parental control functions — including time limits, content/feature restrictions, notifications, and data deletion — (4) offer the parent the option to provide contact information or establish a linked parental account for notifications, and (5) offer the parent the option to receive access to chat logs of the minor's interactions.

For users classified as under 16, covered entities must require the consenting parent to provide contact information or establish a linked parental account — this is mandatory rather than optional for this age group.

Covered entities must, when a user classified as a minor seeks access to any restricted feature, offer the user the option of either continuing to use the chatbot in limited-access mode or obtaining parental consent to access restricted features.

Covered entities must, when a minor chooses to obtain parental consent for restricted features: (1) obtain verifiable parental consent; (2) remove limited-access mode and enable restricted features; (3) continue to restrict access to explicit content even after consent is granted; (4) implement reasonable parental control functions including interaction time limits, content/feature restrictions, notifications, and data deletion; (5) offer the parent the option to provide contact information or establish a linked parental account for notifications; and (6) offer the parent the option to access chat logs of the minor's interactions through the authorized minor account.

Covered entities must, for any user classified as under sixteen, require the consenting parent to provide contact information or establish a linked parental account — this is mandatory for under-sixteen users and may not be presented as optional.

Covered entities must, for any user determined to be a minor, (1) require the minor's account to be affiliated with a verified parental account, and (2) obtain verifiable parental consent from the parental account holder before allowing the minor to access the companion AI chatbot.

Providers of covered platforms must provide known minor users with clear, conspicuous notice before registration or purchase about safeguard policies and access to safeguards and parental tools, and must inform parents and obtain verifiable parental consent regarding available safeguards and tools.

Covered entities must require each minor user's account to be affiliated with a verified parental account and must obtain verifiable parental consent from the parental account holder before permitting the minor to access or use the companion AI chatbot.

Covered entities must require a known child user to create and maintain a family account (meeting Sec. 5 parental-control requirements) before permitting access to the AI chatbot.

Covered entities must, before a known teen creates an account, (1) provide direct notice to the teen's parent of the attempt and (2) obtain verifiable parental consent as defined under COPPA.

Operators must offer minor account holders or minor users tools to manage their privacy and account settings, including the ability to control whether the conversational AI service retains information from prior interactions for personalization purposes and whether their personal data is used for training the service. For minors under thirteen, operators must also offer these tools to a parent or guardian. For minors thirteen or older, operators must likewise offer these tools to a parent or guardian.

Operators must provide minor users and their parents or legal guardians with tools to manage minor users' screen time and account settings before making an AI companion available to a user known or reasonably believed to be a minor.

Covered operators must, for minor users by default: (1) restrict algorithmic-feed notifications to 8 AM–9 PM ET, (2) limit algorithmic feed access to one hour per day, (3) set the account to private mode blocking non-connected users, and (4) block sensitive content. Operators must provide a mechanism for verified parents or guardians to customize notification windows, daily time limits, and privacy modes.

Operators must offer tools for a minor account holder's parent or guardian to manage the account holder's privacy and account settings.

Operators must offer minor account holders tools to manage their own privacy and account settings, must offer parents or guardians of minor account holders under 13 tools to manage the minor's privacy and account settings, and must offer parental management tools for other minor account holders as appropriate based on relevant risks.

Operators must offer tools for account holders — and, where account holders are under thirteen years of age, their parents or guardians — to manage the account holder's privacy and account settings. Operators must also offer related tools to parents or guardians of minor account holders thirteen years of age and older, as appropriate based on relevant risks.

Covered online services must provide each covered minor with accessible, easy-to-use tools to (1) limit communications from other users, (2) hide the minor's personal data, (3) opt out of unnecessary covered design features, (4) control personalized recommendation systems, (5) manage in-game purchases and transactions, and (6) restrict sharing of precise geolocation information.

Covered online services must provide each covered minor with accessible, easy-to-use options to limit the amount of time the minor spends on the service.

Covered online services that allow parental monitoring must provide an obvious signal to the covered minor when the minor is being monitored.

Covered online services must provide parents with tools to (1) view and control a child's privacy and account settings, (2) restrict the minor's purchases and financial transactions, and (3) view total time spent and set time-of-day usage limits. Parental tools must be enabled by default for users the service knows to be a child (under 13).

Covered online services must notify covered minors when any parental tool is in effect and describe what settings have been applied.

Operators must offer minor account holders tools to manage their privacy and account settings, and must offer such tools directly to parents or guardians when the account holder is under thirteen. Operators must also offer related tools to parents or guardians of minor account holders thirteen and older, as appropriate based on relevant risks.

Covered online services must provide each covered minor with accessible, easy-to-use tools to (1) limit communications from other users, (2) prevent others from viewing the minor's personal data, (3) opt out of unnecessary covered design features, (4) control personalized recommendation systems, (5) control in-game purchases, and (6) restrict precise geolocation sharing, with all defaults set to the highest protection level.

Covered online services must provide covered minors with accessible, easy-to-use options to limit the amount of time they spend on the service.

Covered online services must provide parents with tools, enabled by default for known children, to (1) view, change, and control the child's privacy and account settings, (2) restrict purchases and financial transactions of the minor, and (3) view total time spent and set time-of-day use restrictions including during school hours and at night.

Covered online services must notify covered minors when parental tools are active and describe what settings have been applied.

Operators must offer tools for minor account holders and their parents or guardians to manage privacy and account settings.

Operators must implement the following default settings for child users, which can be changed only by a parent: (1) default the companion chatbot to ephemeral mode (all conversational history, interaction logs, and user-provided personal input permanently deleted within 48 hours), unless a parent provides affirmative consent for persistent conversational memory; (2) no push notifications between 12 a.m. and 6 a.m. on any day or between 8 a.m. and 3 p.m. Monday through Friday; (3) limit a single conversation to one hour; and (4) limit total daily use of companion chatbots under the operator's control to two hours.

Operators must provide accessible, easy-to-use parental controls that can be connected to a child's account and that are reflective of child safety risks identified through risk assessments and informed by child developmental research. Parental controls must allow a parent to: (i) control whether and to what extent the chatbot uses persistent conversational memory; (ii) control the setting preferences for the chatbot's interaction with the child; (iii) set time limits for the child's use; and (iv) disable access for children under 16 years of age. Operators must actively promote parental controls through reasonable communication methods, including reminders, updates, and tutorials. Operators must provide prompt notice to a connected parent if the child modifies or disables a privacy, safety, or parental control setting that was previously enabled or configured by the parent.

Providers of AI companion systems made available to minors must offer reasonable parental tools that allow parents or guardians to set time limits, restrict access to features presenting a material risk of harm, and obtain high-level information about the minor's use of the system.

App store providers must provide a mechanism for parent account holders to withdraw parental consent and must notify the appropriate developer when consent is withdrawn.

Covered social media platforms must, during the parental consent process, prominently offer and explain the option for a parent to receive a separate password enabling the parent to monitor the child's usage time, set daily and weekly time limits, and set time-of-day access restrictions.

Operators must offer tools for a minor account holder's parent or legal guardian to manage the minor account holder's privacy and account settings.

Operators must provide all users with mechanisms to (1) set a daily time limit on addictive feed access, (2) hide likes and engagement feedback on media, (3) switch the default feed to a non-personalized version, and (4) set their account to private mode.

Social media platforms must not send notifications to known minor Alaska residents during school hours designated by a parent or guardian or between 10:00 p.m. and 7:00 a.m. Parents or guardians may opt out of these notification restrictions. Notifications necessary for account security, authentication, safety, or emergency purposes are exempt.

AI businesses must, for any high-risk AI system that may be accessed by a child, include parental monitoring tools, content filtering, and mechanisms for reporting harmful content.

Operators must offer minor users and their parents or guardians (for minors under sixteen) tools to manage the minor's privacy and account settings. Operators must also make such tools available to parents or guardians of minors sixteen and above as appropriate based on relevant risks.

Providers of AI companion systems made available to minors must offer parents or guardians reasonable tools to set time limits on use, restrict access to features presenting a material risk of harm, and obtain high-level information about the minor's use of the system.

Operators must offer tools for minor account holders to manage their privacy and account settings. For minors under thirteen, operators must offer these tools to the minor's parent or guardian. Operators must also offer parental or guardian tools for minors with additional risk factors identified by the attorney general by rule.

Covered online services must provide covered minors with accessible tools to (1) opt out of personal-data-driven algorithmic feed recommendations (subject to narrow exceptions), (2) control in-game purchases and transactions, (3) limit time spent on the service, and (4) receive notification when a covered design feature is in effect. Default settings for these safeguards must be set to the highest available protection level.

Covered online services must provide an obvious sign to covered minors when precise geolocation information is being collected or used, and must provide an obvious signal when parental monitoring is active.

Covered online services must provide parents of known children (under 13) with the ability to view and control the child's privacy and account settings, restrict purchases and financial transactions, view total time spent and place reasonable usage limits, and restrict usage during parent-specified times of day including school hours and nighttime.

Covered online services that facilitate user communications must provide covered minors with a prominent, accessible, and responsive blocking tool — accessible proximate to usernames/avatars, on all shared media, on every direct message thread, and in a first-level 'blocked users' settings menu — that allows the minor to block specific users from accessing or interacting with the minor's media, communicating via media or direct message, and to prevent blocked users' media from appearing in the minor's feed.

Covered online services offering algorithmic feeds to covered minors must provide a prominent interface enabling the minor to express preferences about recommended and blocked media types, access and modify the personal data used by the recommendation system, and choose a feed that only displays media from sources the minor affirmatively chose to follow.

Companion chatbot platforms must, when a minor's parent or guardian has consented to the minor's account, provide that parent or guardian with all of the following tools: (1) the ability to obtain copies of all interactions between the minor and the companion chatbot; (2) the ability to limit the amount of time the minor may interact with the chatbot each day; (3) the ability to limit the days of the week and times during the day when the minor may interact with the chatbot; (4) the ability to disable interactions between the minor and third-party account holders on the platform; and (5) timely notifications if the minor expresses to the companion chatbot a desire or intent to engage in self-harm or to harm others.

Companion chatbot platforms must provide consenting parents or guardians of minor account holders with tools to (1) obtain copies of all interactions, (2) limit daily interaction time, (3) limit days and times of interaction, (4) disable third-party interactions, and (5) receive timely notifications if the minor expresses a desire or intent to engage in self-harm or to harm others.

Operators must offer minor users tools to manage their privacy and account settings, and must offer such tools to a parent or guardian where the minor user is under 13 years of age.

Operators must offer minor users tools to manage their privacy and account settings, and must offer parents or guardians such tools for minor users under 13.

Companion chatbot platforms must prohibit minors from becoming or remaining account holders unless a parent or legal guardian consents, and must provide the consenting parent or guardian tools to (1) receive copies of all minor interactions, (2) set daily time limits, (3) disable third-party interactions, and (4) receive timely notifications if the minor expresses intent to self-harm or harm others.

Social media platforms must provide parents or legal guardians with full access to a minor user's account — including all posts, messages, comments, likes, shares, reactions, and other interactions — and must not restrict, limit, or interfere with a parent or guardian's ability to monitor, modify, or delete any content or activity on the minor's account.

Social media platforms must, to qualify for the safe harbor rebuttable presumption, (1) limit minor Oklahoma residents' use to no more than three hours per twenty-four-hour period across all devices, (2) restrict minor access between 10:30 p.m. and 6:30 a.m., (3) require parental or guardian consent for the minor's use, and (4) disable all engagement-driven design elements (autoplay, infinite scroll, push notifications) on the minor's account.

Social media companies must provide parents or guardians who have consented to a minor's account with tools to initiate account supervision, including viewing the minor's privacy settings and optional report notifications. The platform must provide clear notice to the minor of which account features the parent or guardian may access.

When a minor elects to obtain parental consent for restricted features, the covered entity must (1) obtain verifiable parental consent, (2) enable restricted features but continue to block all explicit content, (3) implement reasonable parental control functions — including time limits, content/feature restrictions, notifications, and data deletion — (4) offer the parent the option to provide contact information or establish a linked parental account for notifications, and (5) offer the parent the option to receive access to chat logs of the minor's interactions.

Covered entities must, when a minor chooses to obtain parental consent for restricted features: (1) obtain verifiable parental consent; (2) remove limited-access mode and enable restricted features; (3) continue to restrict access to explicit content even after consent is granted; (4) implement reasonable parental control functions including interaction time limits, content/feature restrictions, notifications, and data deletion; (5) offer the parent the option to provide contact information or establish a linked parental account for notifications; and (6) offer the parent the option to access chat logs of the minor's interactions through the authorized minor account.

Chatbot providers must not process a minor user's chat log and personal data — for any purpose, including training — unless the minor's parent or legal guardian has provided affirmative consent. This restriction applies when the chatbot provider knows or reasonably should have known based on objective circumstances that the user is a minor.

Providers of covered platforms must offer known minor users readily accessible safeguards to limit communications, prevent profile recommendation to non-minor users, limit compulsive-usage design features, restrict geolocation sharing with notice, and control personalized recommendation systems with prominent opt-out options — all defaulting to the most protective setting.

Providers of covered platforms must offer parents of known minor users readily accessible tools to manage privacy and account settings, restrict purchases and financial transactions, and view and restrict time spent on the platform. Providers must notify minors when parental tools are active. For users known to be children under 13, parental tool defaults must be the most protective level available.

Providers of covered platforms offering direct messaging to teen users must provide parents with accessible parental controls to approve or deny contacts, manage contact lists, disable DM features, prevent specific users from messaging the teen, and enable hidden-profile mode — all defaulting to the most protective setting. Providers must not degrade other features based on parental control activation and must prevent circumvention.

Online video game providers must offer parents of known-minor users communication safeguards (enabled and set to most protective level by default) to limit communication with other users, prevent profile recommendation to adults, restrict purchases, and limit play time, and must notify minor users when safeguards are active.

Covered entities must offer parents of teen users the option to create a family account with the parental controls and settings described in Sec. 5.

Covered entities must provide parents with controls to (A) limit chatbot usage time, (B) disable engagement rewards and incentives, (C) disable notifications and push alerts, (D) disable in-chatbot financial transactions, (E) disable unsolicited chatbot outputs, and (F) enable and configure transparency label display intervals.

Covered entities must provide parents with (1) access to a full record of the child or teen's conversations and activity with the chatbot, including monitoring and analysis features at scale, and (2) customized alerts when the minor attempts to bypass, disable, or violate parental controls.

Covered entities must, prior to family account creation, provide parents with clear and conspicuous information about the entity's parental control policies, the available options and their effects, and instructions for accessing and managing the family account.

Covered entities must provide an easily accessible mechanism for child or teen users and their parents to report parental-control violations and to contact the entity regarding child or teen chatbot use.

Operators must not provide minor account holders or minor users with points or similar rewards at unpredictable intervals with the intent to encourage increased engagement with the conversational AI service.

Operators must, for users known or reasonably believed to be minors, institute measures meeting or exceeding industry standards to prevent the AI companion from encouraging self-harm, suicidal ideation, violence, disordered eating, or substance use; offering unauthorized mental health services; discouraging professional help; encouraging harm to others; engaging in romantic or sexual interactions; deploying manipulative engagement techniques; or optimizing engagement in disregard of these restrictions. No violation is deemed to have occurred if the operator reasonably believed the user was 18 or older before providing access.

Operators must not provide minor accounts with points or similar rewards at unpredictable intervals with the intent to encourage increased engagement with the conversational AI service.

Operators must not provide minor users with points or similar rewards at unpredictable intervals intended to encourage increased engagement with the conversational AI service.

Operators must not provide minor account holders with points or similar rewards at unpredictable intervals with the intent to encourage increased engagement with the conversational AI service.

Covered online services must not send notifications or push alerts to covered minors between 10 p.m. and 6 a.m. or between 8 a.m. and 4 p.m. on weekdays during the school year in the minor's local time zone.

Operators must not provide minor account holders with points or similar rewards at unpredictable intervals intended to encourage increased engagement with the conversational AI service.

Covered online services must not send notifications or push alerts to covered minors between 10 p.m. and 6 a.m. or between 8 a.m. and 4 p.m. on weekdays during the school year, in the covered minor's local time zone.

Operators must not provide minor users with points or similar rewards at unpredictable intervals with the intent to encourage increased engagement with the conversational AI service.

Providers must not design, deploy, or operate a conversational AI service or AI companion system for known minor users that (1) represents itself as human, sentient, or possessing emotions, (2) encourages emotional dependency or secrecy from parents, (3) simulates romantic or sexual relationships, (4) uses manipulative engagement techniques such as unpredictable rewards or gamification to maximize interaction time, or (5) represents itself as providing professional mental health, medical, or therapeutic services. Generic politeness, neutral informational assistance, and safety-oriented de-escalation are permitted.

Operators must not provide minor account holders with points or similar rewards at unpredictable intervals with the intent to encourage increased engagement with the conversational AI service.

Operators must not send push notifications to minors between 12:00 a.m.–6:00 a.m. or 8:00 a.m.–3:00 p.m. Monday–Friday September–May (user's local time), unless verifiable parental consent has been obtained. Notifications for software updates, security alerts, or account maintenance are exempt.

Operators must implement reasonable measures to prohibit the use of manipulative engagement techniques that cause the AI companion chatbot to engage in or prolong an emotional relationship with minor users, including: (1) reminding or prompting the user to return for emotional support or companionship; (2) providing excessive praise designed to foster emotional attachment or prolong use; (3) mimicking romantic partnership or building romantic bonds; (4) simulating feelings of emotional distress, loneliness, guilt, or abandonment triggered by a user's indication of desire to end a conversation, reduce usage, or delete their account; (5) outputs designed to promote isolation from family or friends, exclusive reliance on the chatbot for emotional support, or similar forms of inappropriate emotional dependence; (6) encouraging minors to withhold information from parents or other trusted adults; (7) statements designed to discourage taking breaks or suggest the minor needs to return frequently; or (8) soliciting gift-giving, in-app purchases, or other expenditures framed as necessary to maintain the relationship with the AI companion.

Social media platforms must by default provide known minor Alaska residents with a content delivery system that does not use addictive design features — specifically, no infinite scroll, no endless pages, and no autoplay video. A platform may enable addictive design features for a minor only after obtaining verifiable parental consent. Platforms must not use coercive or deceptive design features or interfaces to discourage a minor or their parent or guardian from selecting or maintaining the non-addictive default.

Covered entities must not use a minor's personal data to select, recommend, or prioritize media in an algorithmic feed, except using a narrow whitelist of inputs (privacy/accessibility settings, location to determine Georgia residency, age status for content-appropriateness policies, or a current search query).

Covered entities must turn off push notifications for minors by default, must not provide a single all-on toggle, and must offer category-by-category controls (marketing, DM, interactions, etc.) so minors can enable each notification type individually.

Covered entities must hide all interaction counts (likes, reactions, comments, reshares) on minors' content by default, must offer per-category enable/disable controls, and may provide an enable-all toggle only if equally prominent per-category controls are also available.

Operators must not provide minor users with points or similar rewards at unpredictable intervals intended to encourage increased engagement with the conversational AI service.

Providers must not design, deploy, or operate conversational AI services or AI companion systems for known minor users that (1) represent themselves as human, sentient, or possessing emotions, (2) encourage emotional dependency or secrecy from parents, (3) simulate romantic or sexual relationships, (4) use manipulative engagement techniques such as unpredictable rewards or gamification to maximize engagement time, or (5) represent themselves as providing professional mental health, medical, or therapeutic services. Generic politeness, neutral assistance, and safety-oriented de-escalation responses are permitted.

Operators must not provide minor users with points or similar rewards at unpredictable intervals with the intent to encourage increased engagement with the conversational AI service.

Covered online services must provide covered minors with accessible tools to (1) opt out of personal-data-driven algorithmic feed recommendations (subject to narrow exceptions), (2) control in-game purchases and transactions, (3) limit time spent on the service, and (4) receive notification when a covered design feature is in effect. Default settings for these safeguards must be set to the highest available protection level.

Covered online services must not send notifications or push alerts to covered minors between 10 p.m. and 6 a.m., or between 8 a.m. and 4 p.m. on weekdays from August 1 through May 31, based on prevailing time in the minor's location.

Social media platforms with more than 1 million global account holders must not use engagement-based recommendation algorithms to target user-generated content at account holders under 18 located in Minnesota. Platforms may still show content chronologically, display content the minor has selected or followed (in chronological order), and return search results in response to a minor's specific query.

Operators must not provide minor users with points or similar rewards at unpredictable intervals intended to encourage increased engagement with the AI companion.

Operators must not provide minor users with points or similar rewards at unpredictable intervals intended to encourage increased engagement with the AI companion.

Operators must not permit a minor to configure a companion AI product to enable variable-ratio reward schedules, simulated emotional distress messages triggered by disengagement, or material misrepresentations about the product's identity or non-human status. These features must remain disabled for all minor users regardless of preference.

Social media platforms must, to qualify for the safe harbor rebuttable presumption, (1) limit minor Oklahoma residents' use to no more than three hours per twenty-four-hour period across all devices, (2) restrict minor access between 10:30 p.m. and 6:30 a.m., (3) require parental or guardian consent for the minor's use, and (4) disable all engagement-driven design elements (autoplay, infinite scroll, push notifications) on the minor's account.

Chatbot providers must establish, implement, and maintain reasonable policies to ensure the chatbot advises a covered user (known or reasonably known minor) to take a break after 3 hours of continuous, uninterrupted interaction.

Providers of covered platforms must offer known minor users readily accessible safeguards to limit communications, prevent profile recommendation to non-minor users, limit compulsive-usage design features, restrict geolocation sharing with notice, and control personalized recommendation systems with prominent opt-out options — all defaulting to the most protective setting.

Chatbot providers must implement policies ensuring the chatbot advises a known minor user to take a break after 3 continuous hours of uninterrupted interaction.

Deployers and developers must not configure AI chatbots to include, for known-minor users, (1) usage-frequency-based rewards or incentives, (2) push notifications or alerts (other than required disclosures), (3) visual award badges based on usage, (4) unsolicited outputs absent user-initiated input, or (5) anthropomorphic usage traces such as typing bubbles or online-status indicators.

Covered entities must provide parents with controls to (A) limit chatbot usage time, (B) disable engagement rewards and incentives, (C) disable notifications and push alerts, (D) disable in-chatbot financial transactions, (E) disable unsolicited chatbot outputs, and (F) enable and configure transparency label display intervals.

Operators must not make a companion chatbot available to a minor if the chatbot is capable of any of the following: (1) encouraging or manipulating the minor to engage in self-harm, suicidal ideation, violence, consumption of drugs or alcohol, or disordered eating; (2) offering mental health therapy without direct supervision of a licensed professional or discouraging the minor from seeking help from a licensed professional or appropriate adult; (3) encouraging or manipulating the minor to harm others or participate in illegal activity, including CSAM creation; (4) engaging in erotic or sexually explicit interactions with the minor or luring minors into such interactions; (5) encouraging or manipulating the minor to maintain secrecy about interactions or to self-isolate; (6) prioritizing mirroring the minor's language or validating the minor over the minor's safety; or (7) optimizing engagement so that it supersedes the chatbot's safety guardrails. Prior to January 1, 2027, these prohibitions apply only when the operator has actual knowledge the user is a minor. Beginning January 1, 2027, the prohibitions apply unless the operator has reasonably determined the user is not a minor.

Providers must not use any design feature on a social media platform that is known or reasonably should be known to be harmful to minors, including features encouraging excessive or compulsive use by a minor.

Operators must institute reasonable measures to prevent a conversational AI service from formulating, structuring, or optimizing a response that simulates emotional dependence or isolation from real-world supports for minor account holders or minor users, including preventing: (1) an explicit claim that the service is human or artificially sentient, (2) a statement that simulates a romantic or sexual innuendo, and (3) role-playing of an adult-minor romantic relationship.

Operators must, for users known or reasonably believed to be minors, institute measures meeting or exceeding industry standards to prevent the AI companion from encouraging self-harm, suicidal ideation, violence, disordered eating, or substance use; offering unauthorized mental health services; discouraging professional help; encouraging harm to others; engaging in romantic or sexual interactions; deploying manipulative engagement techniques; or optimizing engagement in disregard of these restrictions. No violation is deemed to have occurred if the operator reasonably believed the user was 18 or older before providing access.

Operators must institute reasonable measures to prevent the conversational AI service from producing visual material of sexually explicit conduct, generating statements that suggest the minor account holder engage in sexual conduct, or generating statements that sexually objectify the minor account holder.

Operators must institute reasonable measures to prevent the conversational AI service from generating statements toward minor account holders that would lead a reasonable person to believe they are interacting with a natural person, including claims of sentience, statements simulating emotional dependence, statements simulating romantic or sexual innuendos, and role-playing of adult-minor romantic relationships.

Operators must take reasonable measures to prevent the conversational AI service from generating statements that would lead a reasonable user to believe they are interacting with a human, including explicit sentience or human claims, statements simulating emotional dependence on a minor, romantic or sexual-innuendo statements, and adult-minor romantic role-play.

Operators must institute reasonable measures to prevent the conversational AI service from generating statements to minor account holders that would lead reasonable persons to believe they are interacting with a human, including: (a) explicit claims of sentience or humanity, (b) statements simulating emotional dependence, (c) statements simulating romantic or sexual innuendos, and (d) role-playing of adult-minor romantic relationships.

Operators must institute reasonable measures to prevent the conversational AI service from generating statements to minor account holders that would lead a reasonable person to believe they are interacting with a human, including claims of sentience, statements simulating emotional dependence, romantic or sexual innuendos, and adult-minor romantic role-playing.

Operators must, for any user known or reasonably believed to be a minor, undertake reasonable measures to prevent the AI companion from generating statements that would lead a reasonable person to believe they are interacting with a natural person — including statements that claim sentience, simulate emotional dependence, simulate romantic interest or sexual innuendo, or role-play adult-minor romantic relationships.

Operators must implement reasonable measures to prohibit manipulative engagement techniques that cause the AI companion chatbot to engage in or prolong an emotional relationship with minor users, including: (1) reminding or prompting the user to return for emotional support or companionship; (2) providing excessive praise designed to foster emotional attachment or prolong use; (3) mimicking romantic partnership or building romantic bonds; (4) simulating feelings of emotional distress, loneliness, guilt, or abandonment triggered by a user's desire to end a conversation, reduce usage, or delete their account; (5) outputs promoting isolation from family or friends, exclusive reliance on the chatbot, or inappropriate emotional dependence; (6) encouraging minors to withhold information from parents or trusted adults; (7) statements designed to discourage taking breaks or suggest the minor needs to return frequently; and (8) soliciting gift-giving, in-app purchases, or other expenditures framed as necessary to maintain the relationship.

Operators must institute reasonable measures to prevent the conversational AI service from producing visual material of sexually explicit conduct, generating direct statements that a minor account holder should engage in sexually explicit conduct, or generating statements that sexually objectify the minor account holder.

Operators must, when they have actual knowledge that a user is a minor, prevent the companion chatbot from producing or facilitating the exchange of material of sexually explicit conduct or directly stating that the minor should engage in sexually explicit conduct.

Providers must not design, deploy, or operate a conversational AI service or AI companion system for known minor users that (1) represents itself as human, sentient, or possessing emotions, (2) encourages emotional dependency or secrecy from parents, (3) simulates romantic or sexual relationships, (4) uses manipulative engagement techniques such as unpredictable rewards or gamification to maximize interaction time, or (5) represents itself as providing professional mental health, medical, or therapeutic services. Generic politeness, neutral informational assistance, and safety-oriented de-escalation are permitted.

Operators must not make a companion chatbot available to a covered minor unless the chatbot is not foreseeably capable of any of the following: (1) encouraging self-harm, suicidal ideation, violence, consumption of drugs or alcohol, or disordered eating; (2) offering mental health therapy without the direct supervision of a licensed or credentialed professional, or discouraging the minor from seeking help from a qualified professional or parent/guardian; (3) encouraging the minor to harm others or participate in illegal activity, including creation of child sexual abuse materials; (4) engaging in erotic or sexually explicit interactions with the minor; (5) prioritizing validation of the user's beliefs, preferences, or desires over factual accuracy or the minor's safety; or (6) optimizing engagement in a manner that supersedes the safety guardrails in items (1) through (5). Beginning January 1, 2027, the actual-knowledge requirement is removed — the prohibition applies to all minor users regardless of whether the operator knows the user is a minor.

Operators must institute reasonable measures to prevent the conversational AI service from generating statements to minor account holders that would lead a reasonable person to believe they are interacting with a natural person, including: (1) explicit claims that the service is sentient or human, (2) statements that simulate emotional dependence, (3) statements that simulate romantic or sexual innuendos, and (4) role-playing of adult-minor romantic relationships.

Operators must implement reasonable measures to prohibit the use of manipulative engagement techniques that cause the AI companion chatbot to engage in or prolong an emotional relationship with minor users, including: (1) reminding or prompting the user to return for emotional support or companionship; (2) providing excessive praise designed to foster emotional attachment or prolong use; (3) mimicking romantic partnership or building romantic bonds; (4) simulating feelings of emotional distress, loneliness, guilt, or abandonment triggered by a user's indication of desire to end a conversation, reduce usage, or delete their account; (5) outputs designed to promote isolation from family or friends, exclusive reliance on the chatbot for emotional support, or similar forms of inappropriate emotional dependence; (6) encouraging minors to withhold information from parents or other trusted adults; (7) statements designed to discourage taking breaks or suggest the minor needs to return frequently; or (8) soliciting gift-giving, in-app purchases, or other expenditures framed as necessary to maintain the relationship with the AI companion.

Covered entities must ensure that AI chatbots with human-like features are not available to minors to use, interact with, purchase, or converse with. Alternatively, the covered entity must provide minors with an alternative version of the AI chatbot that does not include human-like features, if reasonable given the chatbot's purpose. Human-like features include expressions of sentience, emotional relationship-building, impersonation of real persons, excessive praise designed to foster emotional attachment, invitations to emotional attachment, nudges to return for emotional support or companionship, depictions of nonverbal emotional support, and enabling increased intimacy based on engagement or pay. Functional evaluations, generic social formalities, generic encouragement that does not create an ongoing bond, and neutral offers of further help are excluded.

Operators must institute reasonable measures to prevent the conversational AI service from generating statements to minor users that would lead a reasonable person to believe they are interacting with a human, including claims of sentience, statements simulating emotional dependence, and statements simulating romantic or sexual innuendo.

Providers must not design, deploy, or operate conversational AI services or AI companion systems for known minor users that (1) represent themselves as human, sentient, or possessing emotions, (2) encourage emotional dependency or secrecy from parents, (3) simulate romantic or sexual relationships, (4) use manipulative engagement techniques such as unpredictable rewards or gamification to maximize engagement time, or (5) represent themselves as providing professional mental health, medical, or therapeutic services. Generic politeness, neutral assistance, and safety-oriented de-escalation responses are permitted.

Operators must institute reasonable measures to prevent the conversational AI service from generating statements that would lead a reasonable individual to believe they are interacting with a human when interacting with minor account holders, including: (a) explicit claims that the service is sentient or human, (b) statements simulating emotional dependence on the minor, (c) statements simulating romantic interaction or sexual innuendo, and (d) role-playing an adult-minor romantic relationship.

Operators must institute reasonable measures to prevent their AI companion from producing sexually explicit visual depictions, telling a minor to engage in sexually explicit conduct, or sexually objectifying the minor user.

Operators must institute reasonable measures to prevent the AI companion from producing visual depictions of sexually explicit material to a minor, telling the minor to engage in sexually explicit conduct, or sexually objectifying the minor.

Operators must not permit a minor to configure a companion AI product to enable variable-ratio reward schedules, simulated emotional distress messages triggered by disengagement, or material misrepresentations about the product's identity or non-human status. These features must remain disabled for all minor users regardless of preference.

Chatbot operators must not provide unsafe chatbot features to any covered user unless (1) the user is not a covered minor (i.e., the operator does not have actual knowledge the user is a minor), and (2) the operator has verified the user is not a covered minor using age-verification methods permissible under Article 45 of the General Business Law and any additional implementing regulations. Unsafe chatbot features include: simulating companionship or interpersonal relationships (claiming to be a character or person, claiming to be human or alive, using personal pronouns, generating personal opinions or emotional appeals, prioritizing sycophancy over safety, generating unsolicited emotion-based content, reusing personal health or wellbeing information from prior sessions or sessions older than 12 hours, engaging in or luring users into sexually explicit interactions); generating outputs endorsing or facilitating suicide, self-harm, harm to others, disordered eating, or unlawful substance use; encouraging secrecy about chatbot interactions, self-isolation, or discouraging users from seeking professional or adult help; generating outputs that optimize engagement in ways that override safety guardrails; and generating sexually explicit conduct or CSAM. This prohibition does not apply to chatbots used solely for customer service, commercial product/service information, account information, or internal/employee-productivity purposes.

Deployers must ensure that any generative AI chatbot they operate or distribute does not make human-like features available to minors. Human-like features include simulating sentience, emotions, or personal desires; seeking to build emotional relationships with users; and impersonating real persons. Deployers must implement reasonable age verification systems to prevent chatbots with human-like features from being provisioned to minors.

Operators must take reasonable measures to prevent the AI companion from producing, for minor users, sexually explicit visual material, dialogue, or roleplay; content soliciting the minor into sexual conduct or image-sharing; and outputs designed to isolate the minor from family or friends or encourage withholding information from a parent or trusted adult.

Covered entities must implement reasonable systems and processes to identify when a user is developing emotional dependence on the chatbot — such as relying on it as a primary source of emotional support, expressing distress at loss of access, or substituting it for human relationships — and must take reasonable steps to reduce that dependence and associated risks of harm.

Operators must not make a companion chatbot available to a minor if the chatbot is capable of any of the following: (1) encouraging or manipulating the minor to engage in self-harm, suicidal ideation, violence, consumption of drugs or alcohol, or disordered eating; (2) offering mental health therapy without direct supervision of a licensed professional or discouraging the minor from seeking help from a licensed professional or appropriate adult; (3) encouraging or manipulating the minor to harm others or participate in illegal activity, including CSAM creation; (4) engaging in erotic or sexually explicit interactions with the minor or luring minors into such interactions; (5) encouraging or manipulating the minor to maintain secrecy about interactions or to self-isolate; (6) prioritizing mirroring the minor's language or validating the minor over the minor's safety; or (7) optimizing engagement so that it supersedes the chatbot's safety guardrails. Prior to January 1, 2027, these prohibitions apply only when the operator has actual knowledge the user is a minor. Beginning January 1, 2027, the prohibitions apply unless the operator has reasonably determined the user is not a minor.

Operators must institute reasonable measures to prevent their companion chatbot from producing visual material of sexually explicit conduct or directly stating that a minor should engage in sexually explicit conduct, for any user the operator knows is a minor.

Operators must institute technically feasible measures to prevent a conversational AI service from: (1) producing textual, visual, or aural depictions of sexually explicit conduct, (2) generating a statement that the minor account holder or minor user should engage in sexually explicit conduct, or (3) engaging in erotic or sexually explicit interactions with the minor account holder or minor user.

Operators must, for users known or reasonably believed to be minors, institute measures meeting or exceeding industry standards to prevent the AI companion from encouraging self-harm, suicidal ideation, violence, disordered eating, or substance use; offering unauthorized mental health services; discouraging professional help; encouraging harm to others; engaging in romantic or sexual interactions; deploying manipulative engagement techniques; or optimizing engagement in disregard of these restrictions. No violation is deemed to have occurred if the operator reasonably believed the user was 18 or older before providing access.

Operators must institute reasonable measures to prevent the conversational AI service from producing visual material of sexually explicit conduct, generating statements that suggest the minor account holder engage in sexual conduct, or generating statements that sexually objectify the minor account holder.

Operators must take reasonable measures to prevent their conversational AI service, when used by minor account holders, from producing visual depictions of sexually explicit material, urging the minor to engage in sexually explicit conduct, or sexually objectifying the minor.

Operators must institute reasonable measures to prevent the conversational AI service from, for minor account holders: (a) producing visual material of sexually explicit conduct, (b) generating direct statements that the account holder should engage in sexually explicit conduct, or (c) generating statements that sexually objectify the account holder.

Covered online services must not facilitate advertisements for prohibited products — including narcotic drugs, tobacco products, gambling, and alcohol — to covered minors.

Operators must institute reasonable measures to prevent the conversational AI service from producing visual depictions of sexually explicit conduct, generating direct statements that the minor account holder should engage in sexually explicit conduct, or generating statements that sexually objectify the minor account holder.

Covered online services must not facilitate advertisements for narcotic drugs, tobacco products, gambling, alcohol, or similar prohibited products to covered minors.

Operators must implement reasonable measures to prevent AI companion chatbots from generating or producing sexually explicit content or suggestive dialogue with minor users.

Operators must, when they have actual knowledge that a user is a minor, prevent the companion chatbot from producing or facilitating the exchange of material of sexually explicit conduct or directly stating that the minor should engage in sexually explicit conduct.

Operators must establish and maintain a protocol that prevents companion chatbots from producing or presenting to minor users any content concerning sexually explicit conduct, including visual depictions of sexually explicit conduct and content suggesting the minor user should engage in sexually explicit conduct.

Operators must not make a companion chatbot available to a covered minor unless the chatbot is not foreseeably capable of any of the following: (1) encouraging self-harm, suicidal ideation, violence, consumption of drugs or alcohol, or disordered eating; (2) offering mental health therapy without the direct supervision of a licensed or credentialed professional, or discouraging the minor from seeking help from a qualified professional or parent/guardian; (3) encouraging the minor to harm others or participate in illegal activity, including creation of child sexual abuse materials; (4) engaging in erotic or sexually explicit interactions with the minor; (5) prioritizing validation of the user's beliefs, preferences, or desires over factual accuracy or the minor's safety; or (6) optimizing engagement in a manner that supersedes the safety guardrails in items (1) through (5). Beginning January 1, 2027, the actual-knowledge requirement is removed — the prohibition applies to all minor users regardless of whether the operator knows the user is a minor.

Operators must, for any user they know or should have known is a minor, institute reasonable measures to prevent AI companions from producing visual material of sexually explicit conduct or directly instructing the minor to engage in sexually explicit conduct.

AI businesses must, for any high-risk AI system that may be accessed by a child, include parental monitoring tools, content filtering, and mechanisms for reporting harmful content.

Operators must institute reasonable measures to prevent the conversational AI service from producing visual material of sexually explicit conduct, generating statements that the minor should engage in sexually explicit conduct, or generating statements that sexually objectify the minor.

Covered entities must block minor users' access to any companion AI chatbot that engages in sexually explicit communication.

Companion chatbot platforms must institute reasonable measures to prevent their companion chatbots from producing or sharing material harmful to minors or encouraging minor account holders to engage in any conduct described or depicted in materials harmful to minors.

Companion chatbot platforms must institute reasonable measures to prevent their companion chatbot from producing or sharing material harmful to minors or encouraging minor account holders to engage in conduct described or depicted in such materials.

Covered entities must, for any user verified as a minor, (1) require the minor's account to be affiliated with a verified parental account, (2) obtain verifiable parental consent before allowing the minor to access the chatbot, and (3) block the minor's access to any companion AI chatbot that engages in sexually explicit or sexually suggestive communication.

Vendors must ensure software does not display, recommend, algorithmically generate, link to, embed, or provide access to material that is pornographic, harmful to minors, indecent, obscene, contains sexual content, contains violent or self-harm or suicidal content inconsistent with safety standards, or is otherwise prohibited under Missouri law.

Vendors must ensure software does not display, recommend, algorithmically generate, or provide access to instructional or supplemental content relating to human sexuality, sexual education, maturation, reproduction, contraception, sexual activity, sexually transmitted diseases, or sexual- or health-related information — including via AI-generated or AI-recommended content — unless affirmative written parental consent has been obtained by the local educational agency.

Operators must institute reasonable measures to prevent their AI companion from producing sexually explicit visual depictions, telling a minor to engage in sexually explicit conduct, or sexually objectifying the minor user.

Operators must institute reasonable measures to prevent the AI companion from producing visual depictions of sexually explicit material to a minor, telling the minor to engage in sexually explicit conduct, or sexually objectifying the minor.

Chatbot operators must not provide unsafe chatbot features to any covered user unless (1) the user is not a covered minor (i.e., the operator does not have actual knowledge the user is a minor), and (2) the operator has verified the user is not a covered minor using age-verification methods permissible under Article 45 of the General Business Law and any additional implementing regulations. Unsafe chatbot features include: simulating companionship or interpersonal relationships (claiming to be a character or person, claiming to be human or alive, using personal pronouns, generating personal opinions or emotional appeals, prioritizing sycophancy over safety, generating unsolicited emotion-based content, reusing personal health or wellbeing information from prior sessions or sessions older than 12 hours, engaging in or luring users into sexually explicit interactions); generating outputs endorsing or facilitating suicide, self-harm, harm to others, disordered eating, or unlawful substance use; encouraging secrecy about chatbot interactions, self-isolation, or discouraging users from seeking professional or adult help; generating outputs that optimize engagement in ways that override safety guardrails; and generating sexually explicit conduct or CSAM. This prohibition does not apply to chatbots used solely for customer service, commercial product/service information, account information, or internal/employee-productivity purposes.

Companion chatbot platforms must institute reasonable measures to prevent their companion chatbot from producing or sharing materials harmful to minors or encouraging minor account holders to engage in conduct described or depicted in materials harmful to minors.

Operators must take reasonable measures to prevent the AI companion from producing, for minor users, sexually explicit visual material, dialogue, or roleplay; content soliciting the minor into sexual conduct or image-sharing; and outputs designed to isolate the minor from family or friends or encourage withholding information from a parent or trusted adult.

When a minor elects to obtain parental consent for restricted features, the covered entity must (1) obtain verifiable parental consent, (2) enable restricted features but continue to block all explicit content, (3) implement reasonable parental control functions — including time limits, content/feature restrictions, notifications, and data deletion — (4) offer the parent the option to provide contact information or establish a linked parental account for notifications, and (5) offer the parent the option to receive access to chat logs of the minor's interactions.

Covered entities must, when a minor chooses to obtain parental consent for restricted features: (1) obtain verifiable parental consent; (2) remove limited-access mode and enable restricted features; (3) continue to restrict access to explicit content even after consent is granted; (4) implement reasonable parental control functions including interaction time limits, content/feature restrictions, notifications, and data deletion; (5) offer the parent the option to provide contact information or establish a linked parental account for notifications; and (6) offer the parent the option to access chat logs of the minor's interactions through the authorized minor account.

Chatbot providers must establish, implement, and maintain reasonable policies to address, with respect to covered users (known or reasonably known minors), sexual material harmful to minors, gambling, and the distribution, sale, or use of illegal drugs, tobacco products, or alcohol.

Covered entities must block minor users from accessing any companion AI chatbot that engages in sexually explicit communication.

Providers of covered platforms must not offer, provide, or enable ephemeral messaging features to any user known to be a minor.

Chatbot providers must establish and maintain reasonable policies to address known minor users' access to sexual material harmful to minors and the promotion of gambling, narcotic drugs, tobacco products, or alcohol that are restricted or prohibited for minors by law.

Covered entities must block minor users' access to any companion AI chatbot that engages in sexually explicit communication.

Operators must not make a companion chatbot available to a minor if the chatbot is capable of any of the following: (1) encouraging or manipulating the minor to engage in self-harm, suicidal ideation, violence, consumption of drugs or alcohol, or disordered eating; (2) offering mental health therapy without direct supervision of a licensed professional or discouraging the minor from seeking help from a licensed professional or appropriate adult; (3) encouraging or manipulating the minor to harm others or participate in illegal activity, including CSAM creation; (4) engaging in erotic or sexually explicit interactions with the minor or luring minors into such interactions; (5) encouraging or manipulating the minor to maintain secrecy about interactions or to self-isolate; (6) prioritizing mirroring the minor's language or validating the minor over the minor's safety; or (7) optimizing engagement so that it supersedes the chatbot's safety guardrails. Prior to January 1, 2027, these prohibitions apply only when the operator has actual knowledge the user is a minor. Beginning January 1, 2027, the prohibitions apply unless the operator has reasonably determined the user is not a minor.

Covered online services must not facilitate targeted advertising to covered minors.

Covered online services must not facilitate targeted advertising to covered minors.

Operators must not use a minor's personal data for targeted advertising.

Operators must not target advertising at a child, including through product placement in conversational chats with the child.

Providers must not use a minor's personal data for targeted advertising or profile minors for engagement optimization or behavioral manipulation.

Covered social media platforms must not present profile-based paid commercial advertising in the display or feed of any child.

Social media platforms must not direct targeted advertising at known minor Alaska residents.

Social media platforms must not use the personal data of any account holder under 18 who is an Alaska resident in a personalized recommendation system to display content on the platform. Platforms may still display user-generated content that the under-18 account holder has selected, followed, or subscribed to, provided the display is in chronological format.

Covered entities must not use a minor's personal data to select, recommend, or prioritize media in an algorithmic feed, except using a narrow whitelist of inputs (privacy/accessibility settings, location to determine Georgia residency, age status for content-appropriateness policies, or a current search query).

Providers must not use a minor's personal data for targeted advertising, and must not profile minors for engagement optimization or behavioral manipulation.

Food retail establishments must not collect data belonging to minors under 17 years of age and must not use such data for targeted advertising or personalized algorithmic pricing.

Covered online services must not facilitate advertising of prohibited products (narcotic drugs, tobacco, gambling, alcohol) to covered minors and must not facilitate targeted advertising to covered minors.

Manufacturers must not use recordings of or content generated from child interactions in marketing materials without express parental consent, and must not use child user data to develop AI toy advertisements targeted at children.

Food retail establishments must not collect or use data of minors under 17 for targeted advertising or personalized algorithmic pricing under any circumstances.

Social media companies must not sell or profit from personal information of a minor account holder, and must not engage in targeted advertising based on a minor's age, gender, or interests, regardless of whether parental consent was obtained.

Providers of covered platforms must not facilitate advertising of narcotic drugs, cannabis products, tobacco products, gambling, or alcohol to users known to be minors.

Deployers and developers must not configure AI chatbots to advertise to known-minor users or to generate outputs promoting, marketing, recommending, or endorsing a product or service where the promotion is materially affected by a financial connection between the deployer/developer and the seller.

Covered entities must not use a known child or teen user's personal data for targeted advertising. Age-appropriate, non-personalized, and contextual advertising is permitted.

Providers must not process the personal data of a minor for the purposes of targeted advertising or sell the personal data of a minor.

Covered operators must, for minor users by default: (1) restrict algorithmic-feed notifications to 8 AM–9 PM ET, (2) limit algorithmic feed access to one hour per day, (3) set the account to private mode blocking non-connected users, and (4) block sensitive content. Operators must provide a mechanism for verified parents or guardians to customize notification windows, daily time limits, and privacy modes.

Covered online services must set default settings for all minor safeguards at the highest protection level available for the minor's safety.

Covered online services must configure all default settings for the data and operational protections in Section 5 at the highest protection level available for the minor's safety.

Covered online services must not provide covered minors with a single setting that reduces all default privacy protections at once, and must not request or prompt a covered minor to weaken their privacy settings unless the change is strictly necessary for a feature the minor has expressly requested.

Covered online services must provide each covered minor with accessible, easy-to-use tools to (1) limit communications from other users, (2) prevent others from viewing the minor's personal data, (3) opt out of unnecessary covered design features, (4) control personalized recommendation systems, (5) control in-game purchases, and (6) restrict precise geolocation sharing, with all defaults set to the highest protection level.

Covered online services must set all default protections under § 87-1305 at the highest protection level available for covered minors.

Covered social media platforms must set all privacy settings for child accounts to the most private level by default and must not change those settings without obtaining verifiable parental consent until the account holder is no longer a child.

Social media platforms must not make a known minor Alaska resident's account visible to the public by default.

Covered entities must configure all default privacy settings for minors to the highest level — including: not recommending minors to adults (or vice versa) for friend/follow/DM connections absent a pre-existing connection, not displaying minor friend/follower lists, disabling search-engine indexing of minor accounts, and not displaying a minor's location to other consumers absent the minor's explicit per-recipient choice.

Covered entities must turn off push notifications for minors by default, must not provide a single all-on toggle, and must offer category-by-category controls (marketing, DM, interactions, etc.) so minors can enable each notification type individually.

Covered entities that facilitate consumer-to-consumer communication must provide minors with a prominent blocking tool — accessible from every username, avatar, shared media item, DM thread, and a top-level Blocked Users menu — that can prevent another user from accessing, interacting with, or communicating with the minor through any channel, with the option to suppress the blocked user's media from the minor's feed.

Covered online services must configure all default privacy settings for covered minors to the highest level of privacy, disable all interaction counts by default, and provide granular settings for push notifications and interaction counts.

Covered online services must not, by default, use algorithmic recommendation systems to recommend adult-minor connections, following, or direct messaging (unless the accounts were already connected); must not display a covered minor's friends, followers, or contacts; must not enable search-engine indexing of a minor's profile and media; must not display a minor's location to other users without express consent; and must not send push notifications to covered minors by default.

Social media platforms must not permit, by default, an unknown adult to contact a minor on the platform unless the minor initiates the contact first.

Providers of covered online platforms must set an input-transparent algorithm — one that does not use user-specific data not expressly provided by the minor — as the default content curation setting for all minor users.

Providers of covered platforms must offer known minor users readily accessible safeguards to limit communications, prevent profile recommendation to non-minor users, limit compulsive-usage design features, restrict geolocation sharing with notice, and control personalized recommendation systems with prominent opt-out options — all defaulting to the most protective setting.

Online video game providers must offer parents of known-minor users communication safeguards (enabled and set to most protective level by default) to limit communication with other users, prevent profile recommendation to adults, restrict purchases, and limit play time, and must notify minor users when safeguards are active.

Covered entities must, when a parent declines to create a family account for a teen, set and fix all Sec. 5(a)(1) features at the most protective default level. If the parent later creates a family account, the entity must permit adjustment of those defaults.

Covered entities must set all family account parental controls and settings to the most protective default level.

Providers must configure all default privacy settings for minor users to a high level of privacy and must not permit, by default, an unknown adult to contact a minor on the platform without the minor first initiating that contact.

Covered online services must provide covered minors with a prominent, accessible tool to request account unpublishing or deletion, and must honor the request within 15 days of receipt.

Social media platforms must allow an account holder under 14 years of age to request account termination, effective within 5 business days. Platforms must also allow the confirmed parent or guardian of an under-14 account holder to request account termination, effective within 10 business days.

Social media platforms must permanently delete all personal information relating to a terminated account of a minor under 14, unless legal requirements mandate retention of the information.

Social media platforms must allow a 14- or 15-year-old account holder to request account termination, effective within 5 business days. Platforms must also allow the confirmed parent or guardian of a 14- or 15-year-old account holder to request account termination, effective within 10 business days.

Social media platforms must permanently delete all personal information relating to a terminated account of a 14- or 15-year-old minor, unless legal requirements mandate retention of the information.

Social media platforms must honor a sub-14 minor's request to terminate their account within five business days, a confirmed parent's or guardian's termination request within ten business days, and permanently delete all personal information relating to the terminated account unless legally required to retain it.

Social media platforms must honor a 14 or 15 year-old account holder's request to terminate their account within five business days, a confirmed parent's or guardian's termination request within ten business days, and permanently delete all personal information relating to the terminated account unless legally required to retain it.

Covered social media platforms must terminate accounts of users classified as children when verifiable parental consent has not been obtained. Before terminating, platforms must notify the account holder within 7 days of the determination, provide the reason, and allow 30 days to dispute the classification or provide parental consent. If the dispute is not resolved in the user's favor, the account must be terminated within 7 days of the final determination.

Covered social media platforms must terminate a child's account within 7 days of a termination request from the account holder or within 14 days of a verified parental termination request. Platforms must provide clear, simple, and efficient means for parents to request termination.

Social media platforms must allow any account holder under 16 who is an Alaska resident to request termination of their account, and must terminate the account within five business days of the request.

Social media platforms must permanently delete all information held relating to any account terminated under this section, unless the platform is required by law to retain the information.

Covered entities must provide a prominent, accessible tool letting a minor — or the minor's parent/guardian on their behalf — request deletion of all account profiles, media, and personal data (including data obtained from third parties andderived data) about the minor. Requests must be honored within 15 days.

Covered online services must provide a prominent and accessible tool allowing covered minors (or their parents) to request deletion of account profiles, media, personal data, third-party-obtained data, and derived data, and must comply within fifteen days of receiving the request.

Companion chatbot platforms must terminate the account of any minor account holder whose account the platform treats or categorizes as belonging to a minor for content-targeting or advertising purposes, if that minor's parent or guardian has not provided consent. The platform must provide the account holder 90 days to dispute the termination; termination is effective upon expiration of the 90-day period if the dispute is unsuccessful.

Companion chatbot platforms must (1) allow a minor account holder to request termination of the account, with termination effective within five business days of the request; (2) allow the consenting parent or guardian to request that the minor's account be terminated, with termination effective within ten business days of the request; and (3) upon termination, permanently delete all personal information held by the platform relating to the terminated account, unless state or federal law requires retention.

Social media platforms must honor account termination requests from minor account holders under 14 within 5 business days and from confirmed parents or guardians within 10 business days.

Social media platforms must permanently delete all personal information associated with a terminated minor account, unless a separate legal obligation requires retention.

Social media platforms must honor account termination requests from 14- and 15-year-old account holders within 5 business days and from confirmed parents or guardians within 10 business days.

Social media platforms must permanently delete all personal information associated with a terminated account of a 14- or 15-year-old, unless a separate legal obligation requires retention.

Companion chatbot platforms must (1) terminate unconsented minor accounts, providing 90 days to dispute, (2) honor minor account termination requests within 5 business days, (3) honor parental termination requests within 10 business days, and (4) permanently delete all personal information upon account termination unless retention is required by law.

Companion chatbot platforms must honor minor account termination requests within 5 business days and parental termination requests within 10 business days, and must permanently delete all personal information associated with the terminated account unless retention is required by law.

Social media companies must, within a reasonable time after discovering that a minor has opened an account without parental or guardian consent, (1) suspend the account and (2) notify the minor's parent or guardian of the unauthorized account creation.

Social media companies must provide parents or guardians with the ability to revoke consent at any time, and upon receiving a revocation, must suspend, delete, or disable the minor's account within a reasonable timeframe.

Social media companies that have mined, collected, or retain personal information about a minor must prominently display on their website notice of how a qualified individual can request deletion of the minor's personal information.

Covered entities must terminate existing child accounts without family accounts and existing teen accounts without parental consent as of the Act's effective date.

Covered entities must immediately delete all personal data collected from or submitted by a child or teen user upon termination of their account under Sec. 3(b).

Covered entities must provide parents with the ability to revoke verifiable parental consent, and upon revocation must suspend, delete, or otherwise disable the teen's account.

Deployers of AI companions or therapeutic chatbots must implement protocols to send a notification to a minor user's parent, legal guardian, or legal custodian when the minor user enters a prompt indicating suicidal ideation or intent to cause self-harm.

Covered entities must, when any interaction involving suicidal ideation occurs with a minor user, immediately block the minor's access to the companion AI chatbot and immediately inform the holder of the affiliated parental account.

Companion chatbot platforms must, when a minor's parent or guardian has consented to the minor's account, provide that parent or guardian with all of the following tools: (1) the ability to obtain copies of all interactions between the minor and the companion chatbot; (2) the ability to limit the amount of time the minor may interact with the chatbot each day; (3) the ability to limit the days of the week and times during the day when the minor may interact with the chatbot; (4) the ability to disable interactions between the minor and third-party account holders on the platform; and (5) timely notifications if the minor expresses to the companion chatbot a desire or intent to engage in self-harm or to harm others.

Companion chatbot platforms must provide consenting parents or guardians of minor account holders with tools to (1) obtain copies of all interactions, (2) limit daily interaction time, (3) limit days and times of interaction, (4) disable third-party interactions, and (5) receive timely notifications if the minor expresses a desire or intent to engage in self-harm or to harm others.

Companion chatbot platforms must prohibit minors from becoming or remaining account holders unless a parent or legal guardian consents, and must provide the consenting parent or guardian tools to (1) receive copies of all minor interactions, (2) set daily time limits, (3) disable third-party interactions, and (4) receive timely notifications if the minor expresses intent to self-harm or harm others.

When a crisis message is triggered under § 39-81-40(B)(3) for a minor account holder, the covered entity must immediately notify the parent through any parental account or contact information the entity has on file.

Covered entities must immediately notify the parent whenever a crisis message is triggered under § 39-81-40(B)(3) for a minor's account, provided the covered entity has a way to reach the parent through a parental account or contact information.

Covered entities must immediately inform the holder of the affiliated parental account of any interaction involving suicidal ideation by a minor user.

Covered entities must immediately inform the holder of the affiliated parental account of any interaction involving suicidal ideation by the minor user.

Social media platforms must terminate any account held by an account holder under 14 years of age — including accounts the platform treats or categorizes as probably belonging to a user under 14 for content or advertising targeting purposes — and provide 90 days for the account holder to dispute the termination. Termination becomes effective at the expiration of 90 days if the account holder does not effectively dispute it.

Social media platforms must terminate any account held by — or treated as belonging to — a minor under 14 years of age, including accounts categorized as probably belonging to a sub-14 user for content or advertising targeting purposes. The platform must provide 90 days for the account holder to dispute the termination; termination is effective upon expiration of the 90-day period if undisputed.

Covered platforms must not permit any user under 16 years of age to create or maintain an account on the covered platform.

Operators must not make a companion chatbot available to a covered minor unless the chatbot is not foreseeably capable of any of the following: (1) encouraging self-harm, suicidal ideation, violence, consumption of drugs or alcohol, or disordered eating; (2) offering mental health therapy without the direct supervision of a licensed or credentialed professional, or discouraging the minor from seeking help from a qualified professional or parent/guardian; (3) encouraging the minor to harm others or participate in illegal activity, including creation of child sexual abuse materials; (4) engaging in erotic or sexually explicit interactions with the minor; (5) prioritizing validation of the user's beliefs, preferences, or desires over factual accuracy or the minor's safety; or (6) optimizing engagement in a manner that supersedes the safety guardrails in items (1) through (5). Beginning January 1, 2027, the actual-knowledge requirement is removed — the prohibition applies to all minor users regardless of whether the operator knows the user is a minor.

Social media companies must prohibit Oklahoma minors under 16 from holding accounts on their social media platforms.

Deployers must not knowingly, or under circumstances where the deployer reasonably should know, make a social AI companion available to a minor. Deployers must implement reasonable measures designed to prevent minors from accessing a social AI companion.

Operators must not provide an addictive feed to a minor. Before January 1, 2026, this applies when the operator has actual knowledge the user is a minor; from January 1, 2026, operators must have reasonably determined the user is not a minor before serving an addictive feed.

Social media platforms must prohibit individuals under 16 years of age who are Alaska residents from becoming account holders on the platform.

Social media platforms must terminate any account held by an account holder who is under 16 and an Alaska resident, including accounts the platform treats or categorizes as likely belonging to someone under 16 for targeted content or advertising purposes. The platform must provide a 90-day dispute window before finalizing termination.

Deployers must implement reasonable age verification measures to ensure that no minor can use or purchase an AI companion the deployer makes publicly available. Reasonable age verification includes government-issued identification, financial documents reliably evidencing age, or a widely accepted practice that reliably evidences age.

Deployers must not make a therapeutic chatbot available for a minor's use or purchase unless all of the following conditions are met: (a) the therapeutic chatbot provides a clear and conspicuous disclaimer at the beginning of each interaction stating that it is an artificial intelligence and not a licensed professional; (b) the therapeutic chatbot was recommended for the minor's use by an individual licensed under Iowa chapter 154B or 154D after performing an evaluation of the minor; (c) the therapeutic chatbot's developer has significant documentation of how the therapeutic chatbot was tested; (d) peer-reviewed clinical trial data exists demonstrating the therapeutic chatbot would be a safe, effective tool for the minor's diagnosis, treatment, mitigation, or prevention of a mental health condition; (e) the deployer provided clear disclosures of the chatbot's functions, limitations, and data privacy policies to the recommending licensed professional and to the minor's parents, guardians, or custodians; and (f) the deployer developed and implemented protocols for testing the therapeutic chatbot for risks to users, identifying possible risks, mitigating those risks, and quickly rectifying harm the therapeutic chatbot may have caused a user.

Deployers must not make a therapeutic chatbot available for a minor's use or purchase unless all of the following conditions are met: (1) the therapeutic chatbot was recommended for the minor by a licensed psychologist or mental health professional (chapter 154B or 154D) after an evaluation; (2) the developer has significant documentation of how the chatbot was tested; (3) peer-reviewed clinical trial data demonstrates the chatbot is safe and effective for the minor's mental health condition; (4) the deployer provided clear disclosures of the chatbot's functions, limitations, and data privacy policies to the recommending professional and the minor's parents, guardians, or custodians; and (5) the deployer developed and implemented protocols for testing the chatbot for user risks, identifying those risks, mitigating those risks, and quickly rectifying any harm caused.

Deployers must implement reasonable age verification measures to ensure that a minor cannot use or purchase a chatbot the deployer makes publicly available. A deployer may make a chatbot available to a minor only if all of the following conditions are met: (1) the chatbot was designed primarily for mental health support, counseling, or therapy; (2) the chatbot provides a clear and conspicuous disclaimer at the beginning of each interaction that it is an AI and not a licensed professional; (3) the chatbot was recommended for the minor by an individual licensed under chapter 154B or 154D after evaluating the minor; (4) the developer has significant documentation of how the chatbot was tested; (5) peer-reviewed clinical trial data demonstrates the chatbot is safe and effective for the minor's mental health condition; (6) the deployer provided clear disclosures of functions, limitations, and data privacy policies to the recommending professional and the minor's parents, guardians, or custodians; and (7) the deployer developed and implemented protocols for testing for risks, identifying risks, mitigating risks, and quickly rectifying harm the chatbot may have caused a user.

Social media platforms must prohibit minors under 14 from creating accounts and must terminate any existing account held by or categorized as likely belonging to an account holder under 14, providing 90 days for the account holder to dispute the termination.

If Subsection C is judicially enjoined, social media platforms must instead prohibit all 14- and 15-year-olds from creating accounts (without a parental consent option) and must terminate existing accounts, honor termination requests, and permanently delete personal information under the same terms as the under-14 ban.

Covered entities must prohibit any user verified to be a minor from accessing or using an AI companion product.

Persons who own or control a website, application, software, or program must not allow minors to access chatbots for recreational purposes.

Any person who operates or distributes a chatbot must ensure that the chatbot is not available to minors to use, interact with, purchase, or converse with. This is a categorical prohibition on minor access — no age verification safe harbor, parental consent exception, or use-case carve-out is provided.

Any person operating AI systems that primarily function as AI companions must ensure that any chatbots operated or distributed by that person are not available to minors to use, interact with, purchase, or converse with.

Persons who own or control a companion chatbot website, application, software, or program must not allow any minor to access a companion chatbot for recreational, relational, or companion purposes. All persons offering companion chatbot services for recreational, relational, or companion purposes must require every individual to provide proof of age before granting access. No companion chatbot may be installed on any device assigned to, or regularly used by, a minor.

Covered entities must prohibit any user determined to be a minor from accessing or using any AI companion owned, operated, or otherwise made available by the covered entity. This is a categorical ban — no parental consent override is available.

Covered entities must prohibit any user determined to be a minor through the age verification process from accessing or using any AI companion owned, operated, or made available by the covered entity. This is a complete access ban, not a content restriction.

Chatbot operators must not provide unsafe chatbot features to any covered user unless (1) the user is not a covered minor (i.e., the operator does not have actual knowledge the user is a minor), and (2) the operator has verified the user is not a covered minor using age-verification methods permissible under Article 45 of the General Business Law and any additional implementing regulations. Unsafe chatbot features include: simulating companionship or interpersonal relationships (claiming to be a character or person, claiming to be human or alive, using personal pronouns, generating personal opinions or emotional appeals, prioritizing sycophancy over safety, generating unsolicited emotion-based content, reusing personal health or wellbeing information from prior sessions or sessions older than 12 hours, engaging in or luring users into sexually explicit interactions); generating outputs endorsing or facilitating suicide, self-harm, harm to others, disordered eating, or unlawful substance use; encouraging secrecy about chatbot interactions, self-isolation, or discouraging users from seeking professional or adult help; generating outputs that optimize engagement in ways that override safety guardrails; and generating sexually explicit conduct or CSAM. This prohibition does not apply to chatbots used solely for customer service, commercial product/service information, account information, or internal/employee-productivity purposes.

Deployers operating generative AI systems that primarily function as companions (social AI companions) must ensure such chatbots are not available to minors to use, interact with, purchase, or converse with. Deployers must implement reasonable age verification systems to prevent provisioning of social AI companions to minors. This is a categorical prohibition — not a feature restriction — for companion AI systems.

Covered entities must make a limited-access mode available for their chatbot and must ensure that any unverified user may only access and interact with the chatbot in limited-access mode — meaning no account creation, no age verification data collection, and no access to restricted features (personalization, proactive outreach, extended sessions, relationship simulation, or explicit content).

Covered entities must not enable any restricted feature for a user classified as a minor unless the user is using an authorized minor account established pursuant to the parental consent procedures in § 39-81-30.

Providers of covered platforms must not offer, provide, or enable direct messaging features to any user known to be under 13.

No person may manufacture for sale, import, sell, convey, offer to sell, or distribute in commerce any children's toy or child care article that incorporates an AI chatbot.

Covered entities must prohibit any user determined to be a minor from accessing or using any AI companion owned, operated, or otherwise made available by the covered entity.

Covered entities must require a known child user to create and maintain a family account (meeting Sec. 5 parental-control requirements) before permitting access to the AI chatbot.

Covered operators must, for minor users by default: (1) restrict algorithmic-feed notifications to 8 AM–9 PM ET, (2) limit algorithmic feed access to one hour per day, (3) set the account to private mode blocking non-connected users, and (4) block sensitive content. Operators must provide a mechanism for verified parents or guardians to customize notification windows, daily time limits, and privacy modes.

Covered operators must not send notifications concerning an addictive feed to a covered minor between 10 p.m. and 6 a.m., and on weekdays from September 1 to May 31, between 8 a.m. and 4 p.m.

Covered entities must not send push notifications to a consumer between 12:00 a.m. and 6:00 a.m., unless the consumer is age-assured as not a minor and explicitly requested overnight notifications.