Covered entity obligations

(a) Creation of user accounts A covered entity shall require each individual accessing an artificial intelligence chatbot to make a user account in order to use or otherwise interact with such chatbot. (b) Age verification (1) Age verification of existing accounts With respect to each user account of an artificial intelligence chatbot that exists as of the effective date of this Act, a covered entity shall— (A) on such date, freeze any such account; (B) in order to restore the functionality of such account, require that the user provide age data that is verifiable using a reasonable age verification process, subject to paragraph (4); and (C) using such age data, classify each user as a minor or an adult. (2) Age verification of new accounts At the time an individual creates a new user account to use or interact with an artificial intelligence chatbot, a covered entity shall— (A) request age data from the individual; (B) verify the individual’s age using a reasonable age verification process, subject to paragraph (4); and (C) using such age data, classify each user as a minor or an adult. (3) Periodic age verification A covered entity shall periodically review previously verified user accounts using a reasonable age verification process, subject to paragraph (4), to ensure compliance with this Act. (4) Use of third parties For purposes of paragraphs (1)(B), (2)(B), and (3), a covered entity may contract with a third party to employ reasonable age verification measures as part of the covered entity's reasonable age verification process, but the use of such a third party shall not relieve the covered entity of its obligations under this Act or from liability under this Act. (5) Age verification measure data security A covered entity— (A) shall establish, implement, and maintain reasonable data security to— (i) limit collection of personal data to that which is minimally necessary to verify a user’s age or maintain compliance with this Act; and (ii) protect such age verification data against unauthorized access; (B) shall protect such age verification data against unauthorized access; (C) shall protect the integrity and confidentiality of such data by only transmitting such data using industry-standard encryption protocols; (D) shall retain such data for no longer than is reasonably necessary to verify a user’s age or maintain compliance with this Act; and (E) may not share with, transfer to, or sell to, any other entity such data. (c) Required disclosures for artificial intelligence chatbots (1) Disclosure of non-human status Each artificial intelligence chatbot made available to users shall— (A) at the initiation of each conversation with a user and at 30-minute intervals, clearly and conspicuously disclose to the user that the chatbot is an artificial intelligence system and not a human being; and (B) be programmed to ensure that the chatbot does not claim to be a human being or otherwise respond deceptively when asked by a user if the chatbot is a human being. (2) Disclosure regarding non-professional status (A) In general An artificial intelligence chatbot may not represent, directly or indirectly, that the chatbot is a licensed professional, including a therapist, physician, lawyer, financial advisor, or other professional. (B) Other limitations Each artificial intelligence chatbot made available to users shall, at the initiation of each conversation with a user and at reasonably regular intervals, clearly and conspicuously disclose to the user that— (i) the chatbot does not provide medical, legal, financial, or psychological services; and (ii) users of the chatbot should consult a licensed professional for such advice.

(a) Creation of user accounts A covered entity shall require each individual accessing an artificial intelligence chatbot to make a user account in order to use or otherwise interact with such chatbot. (b) Age verification (1) Age verification of existing accounts With respect to each user account of an artificial intelligence chatbot that exists as of the effective date of this Act, a covered entity shall— (A) on such date, freeze any such account; (B) in order to restore the functionality of such account, require that the user provide age data that is verifiable using a reasonable age verification process, subject to paragraph (4); and (C) using such age data, classify each user as a minor or an adult. (2) Age verification of new accounts At the time an individual creates a new user account to use or interact with an artificial intelligence chatbot, a covered entity shall— (A) request age data from the individual; (B) verify the individual’s age using a reasonable age verification process, subject to paragraph (4); and (C) using such age data, classify each user as a minor or an adult. (3) Periodic age verification A covered entity shall periodically review previously verified user accounts using a reasonable age verification process, subject to paragraph (4), to ensure compliance with this Act. (4) Use of third parties For purposes of paragraphs (1)(B), (2)(B), and (3), a covered entity may contract with a third party to employ reasonable age verification measures as part of the covered entity's reasonable age verification process, but the use of such a third party shall not relieve the covered entity of its obligations under this Act or from liability under this Act. (5) Age verification measure data security A covered entity— (A) shall establish, implement, and maintain reasonable data security to— (i) limit collection of personal data to that which is minimally necessary to verify a user’s age or maintain compliance with this Act; and (ii) protect such age verification data against unauthorized access; (B) shall protect such age verification data against unauthorized access; (C) shall protect the integrity and confidentiality of such data by only transmitting such data using industry-standard encryption protocols; (D) shall retain such data for no longer than is reasonably necessary to verify a user’s age or maintain compliance with this Act; and (E) may not share with, transfer to, or sell to, any other entity such data. (c) Required disclosures for artificial intelligence chatbots (1) Disclosure of non-human status Each artificial intelligence chatbot made available to users shall— (A) at the initiation of each conversation with a user and at 30-minute intervals, clearly and conspicuously disclose to the user that the chatbot is an artificial intelligence system and not a human being; and (B) be programmed to ensure that the chatbot does not claim to be a human being or otherwise respond deceptively when asked by a user if the chatbot is a human being. (2) Disclosure regarding non-professional status (A) In general An artificial intelligence chatbot may not represent, directly or indirectly, that the chatbot is a licensed professional, including a therapist, physician, lawyer, financial advisor, or other professional. (B) Other limitations Each artificial intelligence chatbot made available to users shall, at the initiation of each conversation with a user and at reasonably regular intervals, clearly and conspicuously disclose to the user that— (i) the chatbot does not provide medical, legal, financial, or psychological services; and (ii) users of the chatbot should consult a licensed professional for such advice.