{"resourceId":"fpf-us-chatbot-legislation-landscape-202609","versions":[{"version":"external-d1f4999527589e4c499418c7f1373f9a6c73a9017d2206baa0cb59741baea98d","resource":{"id":"fpf-us-chatbot-legislation-landscape-202609","title":"FPF finds 37 states introduced 124 chatbot bills in 2026 as laws shift from disclosures to interaction controls","organization":"Future of Privacy Forum (FPF)","sector":"Independent privacy/AI policy research (U.S. state legislation)","geography":"United States (multi-state)","publishedAt":"2026-09","publicationDate":"2026-09-01","eventDate":null,"sourceName":"Future of Privacy Forum — Regulating the Conversation: The U.S. Landscape of AI Chatbot Legislation (R3 PDF)","sourceLabel":"Independent research report analyzing 2025–2026 U.S. chatbot legislation (tracked through September 2026)","sourceUrl":"https://fpf.org/wp-content/uploads/2026/09/FPF-U.S.-Chatbot-Regulations-Report-R3.pdf","evidenceClass":"independent-research","outcomeClass":"emerging","topics":["governance-procurement","accessibility-workforce","data-security","developers-agents"],"finding":"Why now: FPF’s September 2026 report (methodology: bills tracked through September 2026) quantifies an active state chatbot-law wave—37 states introduced 124 chatbot-related bills in 2026, 13 enacted that year, totaling 18 enacted laws across 2025–2026—and documents a shift from early disclosure/crisis-referral rules toward regulating conversational UX (crisis protocols, minor safeguards, emotional-dependence and engagement-optimization limits, professional-licensure boundaries, data protections). Notes chatbot rules may preview agentic-AI governance. Complements same-week Oregon/Maryland frontier procurement moves by showing parallel state activity on conversational-AI product rules.","sledRelevance":"Cross-state legislative intelligence for SLED sellers and state counsel: clarifies that companion/youth chatbot statutes may or may not sweep ordinary government customer-service bots depending on definitions/carveouts—transferable caution when deploying resident assistants.","evidence":"FPF desk analysis of introduced/enacted bills; not an empirical study of chatbot harm rates. Companion-chatbot focus is primary; government FAQ bots may fall into carveouts depending on state definitions.","architectureImplications":"Vendors and state builders may need configurable disclosures, crisis-response hooks, minor/age pathways, and logging to meet divergent state models; agentic features raise additional action-authorization questions flagged in Part III.","governanceImplications":"Highlights definitional models (capability vs behavior vs broad-with-carveouts) as the real scope control; AG enforcement dominates; private rights of action less common but present in some states.","securityPrivacyImplications":"Emerging chatbot-specific limits on advertising, training use of chats, memory, and age-assurance data—especially for minors—on top of general privacy laws.","caveats":"publicationDate set to 2026-09-01 as month-level; exact day not stated on cover. Counts are FPF-tracked through September 2026 and may move. Report is not an audit of state agency systems.","streamIds":["state-government"],"roles":{"sales":"Sales framing: FPF shows chatbot legislation is one of the hottest state AI arenas—124 bills in 2026—with definitions that can accidentally catch or carve out government service bots. Use the report to open a compliance-scoping conversation before pitching resident assistants in multi-state footprints. Bound work to a jurisdiction matrix and carveout analysis; do not claim the report certifies any product.","engineering":"Engineering framing: implement feature flags for disclosures, crisis protocols, and minor safeguards keyed to state profiles, and keep government FAQ modes narrowly purpose-built so carveouts remain defensible. Inventory memory, personalization, and emotional re-engagement features that FPF flags as relational-design triggers. Proof-of-value is a mapping of product behaviors to FPF’s capability, behavior, and carveout definitional models for target states—not a new model fine-tune. Minimize retention when crisis or age-assurance processing is required.","delivery":"Delivery framing: produce a living state chatbot-law register for counsel and product owners, with change control when bills enact or governors sign. Acceptance includes documented carveout rationale for each customer-facing bot, named crisis-protocol owners where required, and a monthly bill-delta review. Train PMs on definitional models so companion-like feature creep is caught early. Risks include one-size national UX that violates the strictest state, misclassifying a FAQ bot as out-of-scope, or ignoring pending federal floor bills."},"roleDetails":{"sales":{"customerProblem":"Multi-state AI assistants face a fast-changing chatbot statute patchwork that may treat companion features differently from service FAQs.","stakeholders":["State CIO / counsel","Privacy officer","Product owner for resident assistants","Vendor compliance"],"discoveryQuestions":["Which definitional model does each target state use?","Do our bots retain memory or emotional prompts?","What carveouts cover government customer service?","Who monitors new enactments monthly?"],"valueHypothesis":"A bounded multi-state chatbot-law matrix engagement reduces surprise compliance blockers before scale-out.","potentialEngagement":"3–5 week jurisdiction matrix and product-behavior mapping against FPF categories.","unsupportedClaims":["FPF counts equal enforcement outcomes","All government chatbots are exempt","Agentic rules already enacted uniformly"]},"engineering":{"fit":"Fit for compliance feature-flag architecture and logging; unfit as a substitute for jurisdiction-specific legal advice.","architectureIntegration":"Per-state policy packs for disclosures/crisis/minors; narrow-purpose FAQ mode; memory/personalization switches.","prerequisites":["Bill tracker feed","Product behavior inventory","Legal review channel","Logging for high-risk chats"],"constraints":["Companion-focused statutes may not map 1:1 to UI bots","Federal preemption unresolved","Counts may change after September 2026"],"security":"Crisis and age-assurance features can increase sensitive-data processing—minimize retention.","proofOfValue":["Matrix of top 10 states vs product flags","Carveout memo for FAQ mode","Tabletop on emotional-dependence feature risk"]},"delivery":{"work":"Stand up compliance register, counsel review cadence, and product change checklist tied to chatbot bills.","dependencies":["Legal","Product","Privacy","State public-affairs for legislative watch"],"ownership":"Privacy/compliance lead with product co-ownership.","skillsAdoption":"PMs need statute literacy; engineers need policy-pack deployment skills.","governanceCheckpoints":["Monthly bill delta review","Pre-release carveout check","Post-enactment 30-day remediation"],"acceptanceCriteria":["Published state matrix for in-scope bots","Documented FAQ carveout rationale","Crisis-protocol owner named where required"],"risks":["Misclassifying a bot as out-of-scope","Feature creep into companion behavior","Conflicting multi-state timing rules"]}},"retrievedAt":"2026-09-23T22:28:00-05:00","enrichedAt":"2026-09-23T22:33:54-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Report centers youth and vulnerable-user protections more than WCAG; notes educational/accessibility benefits of chatbots as a policy tension when drafting broad restrictions.","procurementImplications":"State buyers should add chatbot-statute diligence (disclosures, crisis protocols, minor features, data/memory limits) into RFP questionnaires—especially for resident-facing assistants.","operatingModelImplications":"Implies ongoing legislative watch and product governance rather than one-time compliance; agentic expansion would require action-authorization controls beyond conversational UX rules.","sourceVerification":{"openedUrl":"https://fpf.org/wp-content/uploads/2026/09/FPF-U.S.-Chatbot-Regulations-Report-R3.pdf","referenceExcerpt":"37 states introduced 124 chatbot-related bills, 13 of which have been enacted","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}