From the State Government edition of September 20, 2026
California Adam’s Law requires independent child-safety audits for companion chatbots
Office of the Governor of California · State government — companion chatbot safety regulation, independent audits, child online protections · California (first-mover state statute; transferable as audit-mandate design with jurisdictional limits)
- Publisher
- Governor of California — strongest child safety chatbot and social media laws
- Original publication
- Governor Newsom press release dated September 10, 2026
- Source retrieved
- 2026-09-21
- Event date
- 2026-09-10
What happened
On September 10, 2026, Governor Newsom signed a bipartisan package headlined by SB 1119 (“Adam’s Law”), described as creating the nation’s strongest companion-chatbot rules for children—including crisis protocols for suicidal ideation, parental controls/notifications, and the first U.S. requirement for companies to conduct independent child-safety audits and annual risk assessments. The package also includes AB 1709 bans on addictive social features for users under 16 and related privacy/exploitation measures. The release situates the signing alongside California’s broader AI safety arc (SB 53, SB 813 IVOs, AB 1405 auditor registry). No completed audits or measured harm reductions are reported yet.
Why it matters
Extends state-government AI oversight from frontier-model transparency into consumer companion-chatbot independent audits—highly relevant after this week’s acceleration of California’s auditor/IVO machinery (EO N-9-26 already archived).
Evidence and measured results
Official Sep 10, 2026 governor release: Adam’s Law bullet claims first-in-country independent child-safety audits and annual risk assessments; lists SB 1119 authors; packages with AB 1709 and other child-safety bills; references prior SB 53/SB 813/AB 1405 context.
Limitations and uncertainty
Press release summarizes signed bills—it is not the chaptered statute text. Effective dates and audit deadlines are not fully specified here (other analyses cite later 2027–2029 milestones). Outcome class is emerging; no completed independent audits yet.
Put this evidence to work
Lighthouse Advisory interpretation, grounded in this source. Enriched 2026-09-20; this does not change the original publication date. Each role follows the same checklist so takeaways compare across sources.
Sales
Role takeaway
- Customer problem
- States regulating child-facing companion chatbots need enforceable independent-audit designs that plug into auditor registries—not disclosure-only rules.
- Stakeholders
- Governor / First Partner child-safety agenda
- Attorney General
- GovOps AI oversight
- Legislative authors
- Education privacy officers
- Discovery questions
- Which companion-chatbot operators serve minors in our state?
- Do we have an auditor registry or IVO path yet?
- What crisis-protocol evidence would an auditor need?
- How does this interact with K-12 pupil-data rules?
- Value hypothesis
- A 4-week audit-readiness assessment against Adam’s Law-style obligations can identify evidence gaps before first statutory deadlines.
- Potential engagement
- Compliance architecture review for child-chatbot audit evidence and AG reporting workflows—bounded, no product build.
- Unsupported claims
- That audits are already occurring under Adam’s Law
- Guaranteed reduction in youth self-harm incidents
- That every state can copy California’s package unchanged
Pre-sales engineering
Role takeaway
- Fit
- Companion-chatbot safety controls with exportable audit evidence; integration points to future IVO/auditor processes.
- Architecture and integration
- Instrument crisis detection, parental controls, and risk-assessment artifacts; segregate pupil data; prepare auditor data rooms.
- Prerequisites
- Inventory of youth-facing bots
- Retention and deletion maps
- Counsel-approved auditor access patterns
- Constraints
- Press release lacks full statutory timelines
- Auditor market still forming
- Cross-border operator complexity
- Security
- Protect sensitive crisis and minor data during audits; prevent training on prohibited pupil data.
- Proof of value
- Completed risk-assessment pack
- Successful tabletop with a mock auditor
- Documented parental-control coverage
Delivery
Role takeaway
- Work
- Translate signed-bill requirements into a compliance backlog and auditor engagement plan tied to IVO/registry milestones.
- Dependencies
- Chaptered bill text
- AG reporting channels
- SB 813/AB 1405 implementing regs
- Ownership
- Product compliance + AG policy liaison; GovOps for auditor ecosystem.
- Skills and adoption
- Need child-safety evaluation, privacy engineering, and assurance documentation skills.
- Governance checkpoints
- Risk assessment before material bot changes
- Auditor selection independence checks
- AG summary submission rehearsal
- Acceptance criteria
- Mapped control-to-evidence matrix
- Named audit owner
- Draft AG submission template
- Risks
- Press-release overclaim vs statute detail
- Auditor capacity shortage
- Confusing Adam’s Law with SB 53 frontier duties
Implementation considerations
Lighthouse Advisory interpretation across the operating dimensions a public-sector buyer must settle before this evidence becomes a design. Each note answers the question under its heading for this specific source.
Architecture and integration
What must connect, and where does the AI sit in the workflow?
Operators will need audit-ready evidence trails (risk assessments, crisis-protocol logs, parental-control telemetry) suitable for third-party child-safety audits—not only production MLOps metrics.
Governance
Who approves, reviews and stays accountable for outcomes?
Creates a statutory independent-audit obligation for companion chatbots that will interact with California’s emerging IVO/auditor registry regime; peers copying audit mandates need AG intake and confidentiality rules.
Security and privacy
What data, permissions and controls need testing?
Focuses on child safety, parental controls, and privacy expansions for kids/K-12 pupil data in AI systems; security control detail is high-level in the press release.
Accessibility and workforce
Who is affected, and what skills or accommodations follow?
Child-safety and parental-control focus; separate digital-wellness instruction bills mentioned. Limited direct state-workforce GenAI guidance in this release.
Procurement
What should contracts, pricing and exit terms secure?
State and school buyers of companion/youth AI should require independent child-safety audit cooperation, parental-control features, and pupil-data training bans in contracts.
Operating model
Which teams own the service once it runs?
Pairs statutory independent audits for consumer chatbots with California’s parallel IVO/auditor-registry buildout—an assurance-market operating model still ahead of completed audits.
Publication history
- 2026-09-20State Government · Issue 153 resources
Stable resource ID: california-sb1119-adams-law-child-chatbot-audits-20260910