Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

Industry Tracker · AI Laws by State

Consumer Protection AI Laws & Regulations

295 published AI bills and regulations affecting Consumer Protection across 44 states, each checked against official state legislature records.

295 Total Bills
44 States
43 Enacted / In Effect
94 High Risk
NY A08158
In Committee Medium Risk

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

New York's A 8158 (the "New York privacy act") would add General Business Law Article 42-A (§§ 1200-1207). Among other consumer rights, people could opt out of "profiling in furtherance of decisions that produce legal or similarly significant effects" (such…

CA AB1988
Dead/Failed High Risk

Companion chatbots: crisis interruption pauses.

California's AB 1988, the Preventing AI User Self Endangerment (PAUSE) Act, would have required companion chatbot operators to adopt a public policy for credible crisis expressions (intent to harm self or others), warn the user on the first one, and on a…

CA SB1146
Dead/Failed Medium Risk

Advertisement claims: health-related consumer products and services: digital replicas and synthetic performers.

California's SB 1146 (Gonzalez) would add Business and Professions Code 651.4, requiring a person who creates an advertisement for a health-related consumer product or service that includes a digital replica or synthetic performer depicted as a health care…

CO HB 1210
Vetoed High Risk

Prohibit Surveillance Price & Wage Setting

Colorado's HB 26-1210 would have banned individualized price and wage setting: using an algorithm that applies statistical modeling, data analytics, AI or similar techniques to surveillance data about a person's characteristics, online behavior or…

MD HB148
Dead/Failed Medium Risk

Consumer Protection and Labor and Employment - Surveillance-Based Price and Wage Setting - Prohibition

Maryland's HB 148 (2026) would have barred surveillance-based price setting (new Commercial Law section 14-1330) and surveillance-based wage setting (new Labor and Employment section 3-718): using surveillance data with an automated decision system to offer…

MD SB889
Dead/Failed Medium Risk

Consumer Protection and Labor and Employment - Electronic Shelving Labels and Surveillance-Based Price and Wage Setting - Prohibitions

Maryland's SB 889 (2026, first reader text) would have barred surveillance-based price setting (pricing consumer goods or services based on profiling or processing of consumer or device data), barred food retailers of at least 15,000 square feet from using…

MD HB1250
Dead/Failed High Risk

Consumer Protection and Product Liability - Chatbots

Maryland's HB 1250 (2026, first reader text, cross-filed with SB 827) would have regulated operators and developers of generative AI chatbots made available to Maryland users: affirmative consent for training on input data, a ban on using chat logs for…

MD HB952
Dead/Failed Medium Risk

Consumer Protection - Companion Chatbots - Regulation

Maryland's HB 952 (2026, third reader text) would have required operators of companion chatbots available to Maryland users to keep and publish self-harm and minor sexual-content protocols, display warnings that the chatbot is not human (a persistent…

HI SB2967
Dead/Failed High Risk

Relating To Artificial Intelligence.

Hawaii's SB 2967 (2026) would have added a part to HRS chapter 480 regulating businesses ('deployers') that use AI systems or automated decision tools with consumers. They would have to disclose AI interactions, give notice and explanation, correction,…

HI HB831
Dead/Failed Medium Risk

Relating To Antitrust.

Hawaii's HB 831 (2025) would have made it unlawful for rental property owners to use a 'coordinator', a software or data analytics service whose coordinating function collects price, supply or lease-date data from two or more owners, analyzes it through…

MN SF4233
Dead/Failed Medium Risk

Surveillance-based price and wage discrimination prohibition

Minnesota's SF 4233 would have prohibited using an automated decision system to set individualized prices for consumers or wages for workers based on surveillance data about them, with listed exceptions, and required anyone using such a system for prices or…

FL H0659
Dead/Failed Medium Risk

Interactions with Artificial Intelligence

Not law: died in committee. Florida's HB 659 would have created s. 501.172, F.S., requiring operators of companion chatbots to display a notice that companion chatbots are AI-generated, not human and may not be suitable for some minors, maintain a protocol…

FL S1258
Dead/Failed Medium Risk

Delivery of Commercial Goods by Autonomous Vehicles

Not law: died in committee. Florida's SB 1258 would have added s. 316.85(6), F.S., providing that an autonomous vehicle may not be used to deliver commercial goods directly to a residence or business for use or retail sale unless a licensed human operator is…

VT H0821
Dead/Failed Low Risk

An act relating to artificial intelligence

Vermont's H.821 (2026) would have required anyone using generative AI to interact with consumers to clearly disclose, when asked, that the consumer is dealing with AI, and would have required licensed professionals to disclose high-risk generative AI…

VT H0792
Dead/Failed Medium Risk

An act relating to liability standards for developers and deployers of artificial intelligence systems

Vermont's H.792 (2026) would have added 9 V.S.A. chapter 118 on liability for developers and deployers of AI. A developer would have been liable in a products liability action only if it failed to use reasonable care in design, warnings or express warranty,…

VT S0093
Dead/Failed Medium Risk

An act relating to consumer data privacy

Vermont's S.93 (2025-2026 biennium) would have enacted a consumer data privacy law applying to businesses that process personal data of at least 100,000 consumers, or at least 25,000 consumers while deriving over 25 percent of revenue from selling data. It…

WA SB6312
Dead/Failed Medium Risk

Prohibiting surveillance-based price discrimination and surge pricing for retail goods.

Washington's SB 6312, the Senate companion to HB 2481 (2026 session), would have barred non-small businesses selling grocery products from surveillance-based price discrimination (prices set from monitoring or automated analysis of a consumer's personal…

LA HB471
Dead/Failed Medium Risk

Provides relative to prohibiting surveillance-based price discrimination

Louisiana's HB471 would have made 'surveillance-based price discrimination' an unfair or deceptive trade practice, so that no person could engage in it. It defines surveillance data, behaviors, biometrics and automated decision systems, and exempts…

LA HB295
Dead/Failed Medium Risk

Prohibits the development of artificial intelligence systems with certain capabilities involving interactions with minors (OR SEE FISC NOTE GF EX)

Louisiana's HB295, the Guidelines for User Age-Verification and Responsible Dialogue Act, would have made it a crime to knowingly or recklessly design, develop or deploy an AI chatbot able to solicit sexual conduct from minors, send them sexual images, or…

MA S264
In Committee High Risk

Establishing protections for consumers interacting with artificial intelligence chatbots

Massachusetts S264 would add G.L. Chapter 93M requiring any commercial entity that deploys a chatbot to clearly and conspicuously disclose that the user is dealing with a chatbot and not a human, and making chatbot statements legally equivalent to those of…

IA HF406
In Committee High Risk

A bill for an act relating to restrictions on the use of artificial intelligence, and creating a civil cause of action.

Iowa's HF 406 would require device companies and AI developers to disclose and get separate agreement before AI accesses private data on smart devices, let users uninstall preinstalled AI, and bar using AI to recreate a person's likeness without consent for…

TX SB2567
Dead/Failed Medium Risk

Relating to the deceptive trade practice of failure to disclose information regarding the use of artificial intelligence system or algorithmic pricing systems for setting of price.

Texas's SB 2567 (West) would amend the Deceptive Trade Practices Act (Bus. & Com. Code 17.45 and 17.46) to add 'failure to disclose information regarding use of artificial intelligence system, or algorithmic pricing systems for setting of price' to the list…

RI S2491
Dead/Failed Medium Risk

Video Lottery Games, Table Games And Sports Wagering--the Rhode Island Consumer Protection Gaming Act

Rhode Island S 2491 (2022), as introduced on March 1, 2022, would amend the Consumer Protection Gaming Act to bar facial recognition technology and biometric recognition programs in video-lottery terminals at pari-mutuel licensees and in online betting…

TX SB2490
Dead/Failed Medium Risk

Relating to biometric identifiers used in the performance of artificial intelligence.

Texas SB 2490 (2025), as introduced, would have amended Business & Commerce Code Sec. 503.001 (biometric identifiers) to define artificial intelligence and add Subsection (f) exempting AI-related training, processing or storage of biometric identifiers,…

TX SB2966
Dead/Failed Medium Risk

Relating to establishing a framework to govern the use of artificial intelligence systems in critical decision-making by private companies and ensure consumer protections; authorizing a civil penalty.

Texas SB 2966 (2025), as introduced, would have added Business & Commerce Code Chapter 551 requiring a private company that uses an AI system to make a consequential decision, meaning one with a material, legal or similarly significant effect on a consumer,…

US HB7218
In Committee High Risk

CHAT Act Children Harmed by AI Technology Act

The CHAT Act would require operators of companion AI chatbots (built mainly to simulate friendship, companionship, emotional or therapeutic conversation) to require user accounts and verify every user's age; existing accounts would be frozen until verified.…

US SB3495
In Committee High Risk

Artificial Intelligence Scam Prevention Act

The AI Scam Prevention Act would make it unlawful to impersonate a government, business or official in commerce, to replicate anyone's image or voice (including with AI) with intent to defraud, or to substantially assist someone they know or should know is…

OK HB3959
Dead/Failed Medium Risk

Technology; Protecting Consumers and Jobs from Predatory Pricing Act; personalized algorithmic pricing; consumer data; food retailers; effective date.

Oklahoma's HB 3959 (2026), as introduced, would have created the Protecting Consumers and Jobs from Predatory Pricing Act. Per its title, it would require disclosure of personalized algorithmic pricing by food retail establishments, bar electronic shelving…

MS SB2354
Dead/Failed High Risk

Artificial Intelligence Fraud and Accountability Act; enact.

Mississippi's SB 2354 (2026), the "Artificial Intelligence Fraud and Accountability Act," would have created a civil cause of action for anyone injured by use of AI systems (including deepfakes, voice cloning, generative tools, chatbots or automated…

CA SB867
Enacted Medium Risk

Toys: companion chatbots.

California bans toys with companion chatbots until 2031. From January 1, 2027, no one may make, sell, exchange, possess for sale, or offer to a retailer a toy (a physical product designed, marketed or made for play by children under 16) that includes a…

CA SB468
Dead/Failed High Risk

High-risk artificial intelligence systems: duty to protect personal information.

California's SB 468 (Becker) would add Civil Code Title 1.81.28 requiring a business that deploys a high-risk AI system (a high-risk automated decision system) that processes personal information to develop, implement and maintain a written comprehensive…

NY A03265
In Committee Medium Risk

Enacts the New York artificial intelligence bill of rights to provide residents of the state with rights and protections to ensure that any system making decisions without human intervention impacting their lives do so lawfully, properly, and with meaningful oversight.

New York's A 3265 would enact the New York artificial intelligence bill of rights as new Article 5 of the State Technology Law, giving residents rights against persons developing automated systems that have the potential to meaningfully impact their civil…

CA SB300
Dead/Failed Medium Risk

Companion chatbots.

California's SB 300 (2025-26 Regular Session) would amend Business and Professions Code section 22602 on companion chatbots. It would require a companion chatbot operator to take its existing protective actions for minors when it has constructive knowledge…

NJ A5089
In Committee High Risk

"AI Image Disclosure Act"; concerns disclosure of certain AI-generated content.

New Jersey's A 5089, the AI Image Disclosure Act (as introduced), would require a covered provider of a publicly accessible generative AI system to put a manifest (clear and conspicuous) and a latent (not visible or audible) disclosure in AI-generated…

IA HF 2507
Dead/Failed Low Risk

A bill for an act establishing requirements and guidelines for conversational AI services, and providing civil penalties, and including applicability provisions.

Iowa's HF 2507 (formerly HSB 611) would have required operators of conversational AI services to protect minors (AI disclosures, no unpredictable rewards, limits on sexual and human-like content), adopt suicide and self-harm protocols, and not pose as…

TN SB1998
In Committee Low Risk

AN ACT to amend Tennessee Code Annotated, Title 47 and Title 53, relative to consumer protection.

SB1998 requires establishments, potentially beyond food retail, to display prices using physical tags or signs and prohibits personalized algorithmic pricing.

ME LD1088
Dead/Failed Low Risk

An Act to Enact the Maine Consumer Data Privacy Act

Not law. Maine's LD 1088, the Maine Consumer Data Privacy Act, as introduced would have applied to controllers handling data of 100,000 or more consumers (50,000 from 2028), or 25,000 with more than 25% of gross revenue from data sales. Consumers could have…

ME LD1822
Dead/Failed High Risk

An Act to Enact the Maine Online Data Privacy Act

Not law. Maine's LD 1822, the Maine Online Data Privacy Act, as introduced would have applied to controllers handling data of 35,000 or more consumers (or 10,000 with over 20% of gross revenue from data sales). Consumers could have accessed, corrected and…

KY HB201
Dead/Failed Medium Risk

AN ACT relating to the use of algorithmic devices in setting the amount of rent to be charged to a residential tenant.

Kentucky's HB 201 (2026 session) would have barred a landlord from employing, using or relying on an 'algorithmic device', or causing another person to, in setting residential rent. An algorithmic device is a device using algorithms to perform calculations…

WI SB1140
Dead/Failed Medium Risk

Algorithmic pricing of essential consumer goods, granting rule-making authority, and providing a penalty.

Wisconsin's SB 1140 would restrict grocery retailers' use of personalized algorithmic pricing on essential consumer goods: required disclosure on each such price, no electronic display of those prices in grocery stores of 15,000+ square feet, no pricing that…

IL HB4869
Dead/Failed Medium Risk

CONSUMER FRAUD-AI DISCLOSURE

Illinois's HB 4869 (103rd General Assembly) would have added Section 2EEEE to the Consumer Fraud and Deceptive Business Practices Act. A person who, for a commercial purpose, makes, publishes or places an advertisement that the person knows or should have…

IL HB2411
Dead/Failed Medium Risk

BIOMETRIC DATA-COMMERCIAL USE

Illinois's HB 2411 (100th General Assembly) would have amended Section 15 of the Biometric Information Privacy Act to bar a private entity from requiring a person or customer to provide a biometric identifier or biometric information as a condition of goods…

IL HB4330
Dead/Failed Medium Risk

BIOMETRIC DATA-COMMERCIAL USE

Illinois's HB 4330 (100th General Assembly) would have amended Section 15 of the Biometric Information Privacy Act to bar a private entity from requiring a person or customer to provide a biometric identifier or biometric information as a condition of goods…

CA SB384
Dead/Failed Medium Risk

Preventing Algorithmic Price Fixing Act: prohibition on certain price-setting algorithm uses.

California's SB 384 (2025-26 Regular Session), the Preventing Algorithmic Price Fixing Act, would have barred selling, licensing, providing or using a price-setting algorithm with the intent or reasonable expectation that 2 or more competitors in the same…

CA AB 2169
Dead/Failed High Risk

Social media platforms: artificial intelligence models.

California's AB 2169 (2025-26 Regular Session), the Digital Choice Act, would require a social media company, or a person that deploys an AI model (a deployer), to give a consumer a copy of their personal information, contextual data and social graph within…

VA HB2250
Dead/Failed Medium Risk

Artificial Intelligence Training Data Transparency Act; transparency and disclosure requirements.

Virginia's HB 2250 (2025 Regular Session) would have amended the Consumer Data Protection Act and added an Artificial Intelligence Training Data Transparency Act (new Title 59.1 chapter, §§ 59.1-607 through 59.1-611) with requirements for generative AI…

VA HB2411
Dead/Failed Medium Risk

Consumer Counsel, Division of; expands duties, artificial intelligence fraud and abuse.

Virginia's HB 2411 (2025 Regular Session) would have expanded the duties of the Division of Consumer Counsel in the Department of Law to include programs addressing artificial intelligence fraud and abuse, including a statewide fraud and abuse alert system.…

TN SB1807
Dead/Failed Medium Risk

AN ACT to amend Tennessee Code Annotated, Title 29; Title 45; Title 47 and Title 66, relative to algorithmic pricing.

Tennessee's SB1807 (114th General Assembly) would have barred an entity from setting the price of a specific good or service for a consumer in Tennessee using personalized algorithmic pricing, meaning dynamic pricing set by an algorithm that uses personal…

TN HB2340
Dead/Failed Medium Risk

AN ACT to amend Tennessee Code Annotated, Title 2; Title 4; Title 8; Title 38; Title 39 and Title 47, Chapter 18, relative to synthetic media.

Tennessee's HB 2340 (113th General Assembly) would have let a person whose appearance, action, or speech is altered by synthetic media (made with AI or other digital technology), in a public communication knowingly distributed with intent to mislead the…

TN SB2460
Dead/Failed High Risk

AN ACT to amend Tennessee Code Annotated, Title 2; Title 4; Title 8; Title 38; Title 39 and Title 47, Chapter 18, relative to synthetic media.

Tennessee's SB 2460 (113th General Assembly) would have let a person whose appearance, action, or speech is altered by synthetic media (made with AI or other digital technology), in a public communication knowingly distributed with intent to mislead the…

GA HB478
Dead/Failed Medium Risk

Commerce and trade; require that AI generated content include a disclaimer indicating such content was generated using artificial intelligence

Georgia's HB 478 would add Code section 10-1-393.20 to the Fair Business Practices Act. On or after July 1, 2025, any individual disseminating AI-generated video, audio or still images to facilitate commerce or trade would have to ensure the content…

GA SB164
Dead/Failed Medium Risk

Trade Practices; surveillance based price discrimination and surveillance based wage discrimination; prohibit

Georgia's SB 164 would add Article 37 to Title 10, Chapter 1, prohibiting 'surveillance based price discrimination' and 'surveillance based wage discrimination', meaning use of an automated decision system to set individualized prices or wages based on…

MO HB2318
Dead/Failed Medium Risk

Creates provisions relating to artificial intelligence in mental health

Missouri's HB 2318, as introduced, would bar any person or entity that develops or deploys artificial intelligence in the state from advertising or representing to the public that the AI is, or can act as, a mental health professional or provide therapy…

RI H7222
Dead/Failed High Risk

Video Lottery Games, Table Games And Sports Wagering--the Rhode Island Consumer Protection Gaming Act

Rhode Island H 7222 (2022), as introduced on January 26, 2022, would amend the Consumer Protection Gaming Act to bar facial recognition technology and biometric recognition programs in video-lottery terminals at pari-mutuel licensees and in online betting…

NC H814
Enacted

Neighborhood Occupantless Vehicle.

North Carolina's S.L. 2021-179 authorizes neighborhood occupantless vehicles: low-speed, fully autonomous vehicles designed to carry cargo with no occupant. New G.S. 20-121.2 sets the roadways they may use and their operating rules, and exempts a fully…

KY HB641
Dead/Failed High Risk

AN ACT relating to mental health chatbots.

Kentucky's HB 641 (the Artificial Intelligence in Mental Health Act, as introduced) would add sections to KRS Chapter 367 regulating suppliers of mental health chatbots, AI systems that use generative AI to hold therapy-like conversations. Suppliers could…

IA SF2278
Dead/Failed Medium Risk

A bill for an act prohibiting personalized algorithmic pricing and surveillance pricing at certain food retail establishments, and providing civil penalties.

Iowa's SF 2278 (as introduced) would add Code chapter 554J for large food retail stores. Such a store using personalized algorithmic pricing based on a particular consumer's data would have to show "THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL…

CA AB2877
Dead/Failed Medium Risk

California Consumer Privacy Act of 2018: artificial intelligence: training.

California's AB 2877 (2023-24 Regular Session) would amend the California Consumer Privacy Act to prohibit a developer, except if certain conditions are met, from using the personal information of a consumer under 16 to train an AI system or service unless…

TX HB3755
Dead/Failed High Risk

Relating to biometric identifiers used in the performance of artificial intelligence.

Texas HB 3755 (2025), as introduced, would have amended Business & Commerce Code Sec. 503.001 (the biometric identifier law) to define artificial intelligence and to exempt AI training, processing, or storage unless done to uniquely identify a specific…

MA H63
Dead/Failed Medium Risk

To protect biometric information

Massachusetts H 63 (2023-2024) would have added a new chapter 93M to the General Laws restricting how private entities collect and process biometric information, including face geometry, with consent, a written privacy policy and a ban on monetizing the…

CO HB 1263
Enacted Medium Risk

Conversational Artificial Intelligence Service Operator Requirements

Colorado's HB 26-1263 regulates operators of conversational AI services: public AI systems that mainly simulate human conversation (customer-service, business and other listed uses excluded). From January 1, 2027, operators must tell users the service is AI…

NY S08874
In Committee Medium Risk

Requires disclosure of the use of artificial intelligence in customer services at the point of interaction with the customer; defines terms.

New York's S 8874 would add General Business Law § 399-m-1 requiring any person, firm, partnership, association or corporation, or its agent or employee, to disclose its use of AI to influence customer interaction (such as automated customer support, ad…

LA SB362
Dead/Failed Medium Risk

Provides that surveillance-based price discrimination is an unfair or deceptive trade practice or act. (8/1/26)

Louisiana's SB362 would have made 'surveillance-based price discrimination' an unfair or deceptive trade practice, so that no person could engage in it. The bill defines surveillance data, behaviors and biometrics, mentions automated decision systems, and…

VT H0208
Dead/Failed Medium Risk

An act relating to consumer data privacy and online surveillance

Vermont's H.208 (2025-2026 biennium) would have enacted a consumer data privacy and online surveillance law applying to businesses processing data of at least 25,000 consumers, or 12,500 consumers with over 25 percent of revenue from selling data. Consumers…

FL H1161
Enacted

Removal of Altered Sexual Depictions Posted without Consent

Florida's CS/CS/HB 1161 (Chapter 2025-133), Brooke's Law, amends s. 836.13, F.S. Covered platforms (sites, services or apps that mainly host user content, or regularly make nonconsensual altered sexual depictions available) had to set up by December 31, 2025…

FL H1289
Enacted

Autonomous Vehicles

Florida's CS/CS/HB 1289 (Chapter 2021-233) defines a low-speed autonomous delivery vehicle (fully autonomous, meeting the federal low-speed vehicle standard, not built to carry people) and lets it run on roads posted at 35 mph or less and, under conditions,…

AZ SB1295
Enacted

An Act amending section 13-2006, Arizona Revised Statutes; relating to forgery.

Arizona's SB 1295 (Laws 2025, Ch. 184) adds a new form of criminal impersonation to A.R.S. 13-2006: using a computer-generated voice recording, image or video of another person with intent to defraud others. It is a class 5 felony, one level above the other…

AZ SB1305
Enacted

An Act amending section 28-101, Arizona Revised Statutes, as amended by Laws 2019, chapter 89, section 1; repealing section 28-101, Arizona Revised Statutes, as amended by Laws 2019, chapter 89, section 1; amending title 28, chapter 3, Arizona Revised Statutes, by adding article 22; relating to personal delivery devices.

Arizona's SB 1305 (Laws 2020, Ch. 78) adds A.R.S. 28-1221 to 28-1228 on personal delivery devices: devices built to carry cargo in pedestrian areas and equipped with automated driving technology (software and hardware) that operate with remote human support…

IA HF304
Enacted

An Act relating to personal delivery devices, providing penalties, and making penalties applicable.

Iowa's 2021 Acts chapter 119 (HF 304) creates Iowa Code chapter 321O for personal delivery devices: cargo-carrying devices for pedestrian areas, equipped with automated driving technology (software and hardware), that operate with remote support and…

US HB8229
Introduced Medium Risk

Lower Grocery Prices Act

The federal H.R. 8229 (Lower Grocery Prices Act) would prohibit surveillance-based price setting for food, groceries and agricultural commodities: using an automated decision system to offer or inform a customized price for a specific person or group based…

KS HB2591
Enacted Medium Risk

Authorizing financial institutions to report suspected financial exploitation of an adult account holder to a designated agency, notify any adult designated as a trusted contact by such account holder of suspected financial exploitation and place a temporary hold on certain transactions or…

HB2591 authorizes financial institutions to report suspected financial exploitation, regulate virtual currency kiosks, address insolvency of technology-enabled fiduciary financial institutions, and eliminate certain stipulations on negotiable instruments.

WV HB4675
Enacted

AN ACT to amend the Code of West Virginia, 1931, as amended, by adding thereto a new article, designated §17C-24-1 and §17C-24-2, all relating to autonomous delivery vehicles; authorizing operation of low-speed autonomous delivery vehicle on certain streets and roads; authorizing operation of low-speed autonomous delivery vehicle on streets or roads with posted speed limit of up to a specified number of miles per hour under specified conditions.

HB 4675 lets autonomous or remotely monitored delivery robots operate in West Virginia. Personal delivery devices may use sidewalks, crosswalks and roadways with pedestrian-like rights, must yield to pedestrians, obey signals, carry an identifying plate with…

CT SB1295
Enacted

An Act Concerning Broadband Internet, Gaming, Social Media, Online Services and Consumer Contracts

Public Act 25-113 overhauls the Connecticut Data Privacy Act's rules on automated decision-making. From July 1, 2026, consumers can opt out of profiling used for any automated decision with legal or similarly significant effects (housing, insurance, health…

ME LD1727
Enacted Medium Risk

An Act to Ensure Transparency in Consumer Transactions Involving Artificial Intelligence

Maine's chatbot disclosure law adds a chapter on communications with consumers via artificial intelligence to Title 10. A person may not use an artificial intelligence chatbot or other computer technology to engage in trade and commerce with a consumer in a…

IL HB4843
Enacted

VEH CD-PLATES-REGISTRATION

HB4843 is a Vehicle Code bill mostly about license plates, registration and driver's licenses. Its AI provision amends Section 12-610.2 of the Illinois Vehicle Code (625 ILCS 5/12-610.2) so that "electronic communication device" expressly includes artificial…

MA H1754
Dead/Failed Medium Risk

Establishing an internet bill of rights

Massachusetts H1754 would add G.L. Chapter 93M, an 'Internet Bill of Rights' comprehensive data protection law, including a right not to be subject to decisions based solely on automated processing, including profiling, with legal or similarly significant…

CA SB1398
Enacted

Vehicles: consumer notices.

SB 1398 added Vehicle Code Section 24011.5. A dealer or manufacturer that sells a new passenger vehicle equipped with a partial driving automation feature, or that adds such a feature by software update or upgrade, must give the buyer or owner a notice…

CA AB1008
Enacted

California Consumer Privacy Act of 2018: personal information.

AB 1008 amended Civil Code Section 1798.140, the CCPA definitions section. It specifies that personal information can exist in various formats, including physical formats, digital formats, and abstract digital formats such as compressed or encrypted files,…

CA AB2905
Enacted

Telecommunications: automatic dialing-announcing devices: artificial voices.

AB 2905 amended Public Utilities Code Section 2874, which governs automatic dialing-announcing devices. The required introductory announcement for prerecorded calls must also inform the person called if the prerecorded message uses an artificial voice, as…

TX SB969
Enacted

Relating to the operation of personal delivery and mobile carrying devices.

Texas SB 969 (2019) authorizes personal delivery devices: robots made mainly to carry cargo on sidewalks, crosswalks and road shoulders and equipped with automated driving technology that lets them operate with remote human support and supervision. State law…

TX HB18
Enacted

Relating to the protection of minors from harmful, deceptive, or unfair trade practices in connection with the use of certain digital services and electronic devices, including the use and transfer of electronic devices to students by a public school.

Texas HB 18, the SCOPE Act (2023), sets duties for digital service providers toward known minors. Its AI-relevant part is Business & Commerce Code 509.056, 'Use of algorithms': a provider that uses algorithms to automate the suggestion, promotion or ranking…

TN SB2836
Enacted

AN ACT to amend Tennessee Code Annotated, Title 55, Chapter 1; Title 55, Chapter 10; Title 55, Chapter 12 and Title 55, Chapter 8, relative to personal delivery devices.

Tennessee's 2020 personal delivery device law (Public Chapter 685, SB 2836) authorizes electric delivery robots that travel mainly on sidewalks and crosswalks and can navigate with or without the active control or monitoring of a natural person. The devices…

VA SB758
Enacted

Electric personal delivery devices; operation on sidewalks, shared-use paths, etc.

Virginia SB 758 (2020) revises the state's law on delivery robots. A personal delivery device is a powered device used on sidewalks and crosswalks to transport property, weighing no more than 500 pounds (up from 50) and capable of navigating with or without…

MD SB726
Enacted

Vehicle Laws - Personal Delivery Devices - Standards and Requirements

Maryland SB 726 (2021) authorizes personal delivery devices: powered devices up to 550 pounds, used mainly on shoulders, sidewalks and crosswalks to carry property and capable of navigating with or without the active control or monitoring of an individual.…

GA HB1009
Enacted

Motor vehicles; use of personal delivery devices to transport cargo; authorize

Georgia's HB 1009 (Act 814 of 2022) authorizes delivery robots. A personal delivery device is a powered vehicle that uses an automated driving system to transport cargo, carries no passengers and weighs at most 500 pounds empty or 600 pounds loaded. Devices…

GA HB203
Enacted

Health; restrictions on sale and dispensing of contact lenses with respect to physicians; revise provisions

HB 203 (Act 233 of 2023) regulates automated and AI tools for remote eye assessments. It defines an 'assessment mechanism' as automated or virtual equipment, applications or technology used in person or via telemedicine to conduct an eye assessment,…

OK SB706
Enacted

Personal delivery devices; authorizing certain use; limiting certain jurisdictional powers. Effective date.

Oklahoma's SB 706 (2021) authorizes delivery robots. Personal delivery devices are electrically powered cargo devices of up to 550 pounds equipped with automated driving technology for operation with remote support and supervision. Devices may use sidewalks,…

ID H0528
Enacted

TRANSPORTATION – Amends existing law to revise provisions regarding personal delivery devices.

Idaho's H 528 (2022) updates the rules for personal delivery devices, the sidewalk delivery robots defined as devices equipped with technology that lets them operate with or without the active control or monitoring of a person. A device may not operate on a…

AR HB1767
Enacted

To allow the operation of a personal delivery device in pedestrian areas and certain streets and roads

Arkansas's Act 926 of 2021 (HB 1767), the Personal Delivery Device Act, authorizes delivery robots: electrically powered cargo devices of up to 500 pounds equipped with automated driving technology that lets them operate with or without a person's active…

NY A00974
In Committee High Risk

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

New York's A 974-A, the "New York data protection act," would add General Business Law Article 42-A letting consumers opt out of profiling (automated processing of personal data to evaluate or predict personal traits) in furtherance of decisions that produce…

SC H3401
In Committee Medium Risk

Technology Transparency

South Carolina's H 3401, 'Technology Transparency', would add Chapter 31 to Title 37. It would bar government entities from working with social media platforms on content moderation, give consumers rights to opt out of profiling with significant effects,…

VT S0071
Enacted High Risk

An act relating to consumer data privacy and online surveillance

Vermont's S.71 (Act 145) adds the Vermont Data Privacy and Online Surveillance Act. It covers businesses that in the prior year processed personal data of at least 35,000 Vermonters or sensitive data of at least 3,000, or offered for sale personal data of at…

MI SB0158
Enacted Medium Risk

Consumer protection: other; certain uses of automated programs to purchase event tickets online; prohibit. Creates new act. TIE BAR WITH: HB 4262'25

This bill prohibits the use of automated programs to purchase event tickets online. It is tie-barred with HB 4262'25, meaning its enactment depends on that bill.

MA S243
In Committee Medium Risk

Requiring consumer notification for chatbot systems

Massachusetts's S 243 (194th General Court) would add G.L. c. 93, section 115, declaring it an unfair and deceptive act under chapter 93A for a person, in a commercial transaction or trade practice with a consumer, to use a bot (such as a chatbot or AI…

HI SB2036
Dead/Failed Medium Risk

Relating To Consumer Protection.

Hawaii's SB 2036 (2026) would have added a new section to HRS chapter 481B prohibiting any person from engaging in 'surveillance pricing': offering or setting a customized price for a specific consumer or group based wholly or partly on information collected…

NJ S3268
In Committee High Risk

Prohibits use of facial recognition technology on consumer except for legitimate safety purpose.

New Jersey's S3268 would make it an unlawful practice under the Consumer Fraud Act for a person selling goods or services at retail, or at a place of public accommodation, to use a biometric surveillance system (facial or other remote biometric recognition…

NY S7263
In Committee Medium Risk

Imposes liability for damages caused by a chatbot impersonating certain licensed professionals

New York's S 7263-A would add General Business Law § 390-f. A chatbot operator could not knowingly let its chatbot impersonate a licensed professional (a profession licensed under listed Education Law articles, or an attorney) in a way that would be a crime…

VT H0784
Dead/Failed Medium Risk

An act relating to the regulation of chatbots

Vermont's H.784 (2026) would have regulated chatbot providers under a new 9 V.S.A. chapter 118. Providers could not use chat logs for targeted ads, sell chat logs, train on minors' data, or train on adults without affirmative consent, and would have had to…

PA HB1779
In Committee Medium Risk

In preliminary provisions, providing for algorithmic pricing transparency and fairness; and imposing duties on the Office of Attorney General and Bureau of Consumer Protection.

Pennsylvania's HB 1779 would require a clear disclosure, 'THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA.', on advertised personalized algorithmic prices, and bar using protected class data to set prices differently. The Attorney General could…

NJ A4742
In Committee Medium Risk

Establishes "Fair Pricing and Transparency Act."

New Jersey's A4742 (Wainstein, Rodriguez, Walker), the Fair Pricing and Transparency Act, would bar retail food stores from using surveillance-based price discrimination, dynamic pricing, or personalized pricing (personalized pricing means prices set using…

NJ S3612
Enacted Low Risk

Establishes "Fair Price Protection Act."

New Jersey's Fair Price Protection Act (S 3612) was substituted on June 30, 2026 by A 4085 (Assembly committee substitute for A 4085 and A 4523, third reprint), which became P.L.2026, c.55 on July 23, 2026. It makes surveillance pricing of groceries and…

MD HB1477
Dead/Failed High Risk

Consumer Protection - Consumer Reporting Agencies - Use of Algorithmic Systems

Maryland's HB 1477 (2025) would have added Commercial Law section 14-1228 for consumer reporting agencies that use algorithmic systems to assemble or evaluate consumer information. They would have had to give plain-language explanations, keep a public…

IL SB 3220
In Committee Medium Risk

CONSUMER DATA PRIVACY

Illinois's SB 3220 would create the Illinois Consumer Data Privacy Act, giving consumers rights to access, correct, delete and port their personal data and to opt out of targeted advertising, data sales and profiling used for decisions with legal or…

OH HB665
In Committee Medium Risk

Regulate the use of pricing algorithms

Ohio's HB 665 (as introduced) would amend Ohio's antitrust law (R.C. Chapter 1331) to bar using or distributing a pricing algorithm, including one derived from machine learning or AI, that uses or is trained with nonpublic competitor data, and would presume…

NC S624
In Committee High Risk

AI Chatbots - Licensing/Safety/Privacy

North Carolina's S 624 (as filed) would require a Department of Justice license to operate or distribute a chatbot that deals substantially with health information, with a $50,000 civil penalty for violating G.S. 114B-5. It would also create a Chatbot Safety…

NJ S3732
In Committee Medium Risk

Prohibits certain businesses from using dynamic, surveillance, or personalized algorithmic pricing when selling groceries to consumers.

New Jersey's S 3732 would make it an unlawful practice under the Consumer Fraud Act for a retail food store or third-party grocery delivery platform to use dynamic pricing, surveillance pricing or personalized algorithmic pricing when selling groceries, in…

PA HB2175
In Committee High Risk

Providing for consumer protection and for artificial intelligence and chatbots; imposing duties on the Bureau of Consumer Protection in the Office of Attorney General; and imposing penalties.

Pennsylvania's HB 2175 (Printer's No. 2831) would add Chapter 71 to Title 12 on AI chatbots that use generative AI to converse with consumers and are represented as helping manage a situation or treat a condition, including mental health. Suppliers could not…

IA HF2469
In Committee High Risk

A bill for an act prohibiting the use of an automated decision-making system to alter the price of a product or service for a specific individual based on surveillance data, and providing civil penalties.

Iowa's HF 2469 would add Code chapter 554J, barring a person from using an automated decision-making system (AI or algorithms making decisions with little or no human intervention) to alter the price of a product or service for a specific individual based on…

NJ S861
Introduced Medium Risk

Establishes certain requirements for social media websites concerning content moderation practices; establishes cause of action against social media websites for violation of content moderation practices.

New Jersey's S861 would make it an unlawful practice under the Consumer Fraud Act for a social media website to fail to publish and consistently apply its censorship, suspension and "anonymous" ban standards, to notify users of such actions, and to let users…

NY S08524
Introduced High Risk

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

New York's S 8524 (the "New York data protection act") would add General Business Law article 42-A, a consumer privacy framework. Controllers would have to give notice, honor access, correction and deletion requests, let consumers opt out of targeted ads,…

NJ A2767
In Committee Medium Risk

Modifies child endangerment statute to include AI technology; establishes criminal penalties.

New Jersey's A2767 would amend the child endangerment law (N.J.S.2C:24-4) so that a person who knowingly or recklessly causes or allows a child to be subjected to sexual conduct through the person's creation, control, possession, manipulation, use,…

NY A06211
Introduced High Risk

Prohibits the use of biometric surveillance system or biometric surveillance information in places of public accommodation; prohibits entering into any agreement that authorizes any third party to use any biometric surveillance system or biometric surveillance information; provides penalties for…

New York's A 6211 (same as S 8004) would add Civil Rights Law § 40-h, making it unlawful for an owner, manager, employee or other agent of a place or provider of public accommodation to use a biometric surveillance system or biometric surveillance…

FL H1395
Dead/Failed High Risk

Artificial Intelligence

Not law: died in subcommittee. Florida's HB 1395 (2026) would have created an "Artificial Intelligence Bill of Rights" (new part IX of ch. 501): parental consent and controls for minors on companion chatbot platforms, an hourly not-human pop-up for bots, a…

IL SB2203
In Committee High Risk

AUTOMATED DECISION TOOLS

Illinois's SB 2203 (104th General Assembly) would create the Preventing Algorithmic Discrimination Act. On or before January 1, 2027, and annually after, a deployer of an automated decision tool would have to perform an impact assessment, notify people…

IL SB2255
In Committee Medium Risk

SURVEILLANCE DISCRIMINATION

Illinois's SB 2255 (104th General Assembly) would create the Surveillance-Based Price and Wage Discrimination Act. A person could not use surveillance data as part of an automated decision system to inform the individualized price charged to a consumer or…

SC H5476
In Committee High Risk

Protecting Children from Chatbots

South Carolina's H 5476, the Protecting Children from Chatbots Act (new Chapter 81 of Title 39), would require chatbot operators with 500,000 or more monthly active users to offer a limited-access mode, verify users' ages and obtain verifiable parental…

NY A10764
In Committee High Risk

Enacts the "utility billing integrity act" to establish utility billing integrity and consumer protections through anomaly detection, advanced data analytics and the usage of artificial intelligence; requires every utility to implement and maintain a billing integrity program utilizing anomaly…

New York's A 10764, the “utility billing integrity act,” would add Public Service Law § 65-c requiring every electric, gas or combination utility to maintain a program using anomaly detection systems (including advanced analytics, machine learning or AI) to…

IL HB5323
In Committee High Risk

ALGORITHMIC PRICING DISCLOSURE

Illinois's HB 5323 (104th General Assembly) would require an entity that sets prices with personalized algorithmic pricing (dynamic pricing set by an algorithm using personal data) and advertises or offers it using the consumer's personal data to include the…

IL SB 3364
In Committee Medium Risk

HUMAN RIGHTS-AI-VIOLATIONS

Illinois's SB 3364 (104th General Assembly) would amend the Illinois Human Rights Act to make it a civil rights violation for an owner, broker or agent to use AI in a real estate transaction without telling the other party, to fail to tell a loan or credit…

VA HB638
In Committee Medium Risk

Data brokers; regulation, civil penalties.

Virginia's HB 638 (2026 Regular Session) would regulate data brokers. It would bar acquiring personally identifiable information by fraud, or to stalk, harass, commit fraud or unlawfully discriminate; require data brokers to keep an information security…

IL SB 3262
In Committee Medium Risk

Companion AI Protection Act

Illinois's SB 3262 (104th General Assembly) would create the Companion Artificial Intelligence Protection Act. Operators of companion AI products could not deploy products with specified features unless an adult user configures them, would face auditing and…

IL SB 3384
In Committee High Risk

AI Companion Model Safety Act

Illinois's SB 3384 (104th General Assembly) would create the Artificial Intelligence Companion Model Safety Act. An operator could not provide an AI companion unless it has a protocol to take reasonable efforts to detect and address suicidal ideation or…

IL SB 3601
In Committee High Risk

Professional AI Oversight Act

Illinois's SB 3601 (104th General Assembly) would create the Professional AI Oversight Act, requiring a licensee to disclose when a paying person is interacting with AI, with civil penalties up to $2,500 per violation. It would also amend the Consumer Fraud…

IL SB3657
In Committee Medium Risk

CONSUMER FRAUD-DIGITAL PRICING

Illinois's SB 3657 (104th General Assembly) would amend the Consumer Fraud and Deceptive Business Practices Act in two ways. Grocery stores offering digital coupons would have to provide a paper copy of equal value on request. A person also could not use…

IL HB 5044
In Committee Medium Risk

CHATBOT PROVIDER-LIABILITY

Illinois's HB 5044 (104th General Assembly) would create the Chatbot Provider Liability Act. Chatbots would be deemed products for strict liability, and a chatbot provider would have a duty to ensure its chatbot does not injure a user and would be liable for…

IL HB5221
In Committee High Risk

CONSUMER DATA PRIVACY ACT

Illinois's HB 5221 (104th General Assembly) would create the Consumer Data Privacy Act, with rules for agreements between personal data processors and controllers, controller responsibilities, small business requirements, data protection assessments and…

IL SB1792
In Committee Medium Risk

FRAUD-ARTIFICIAL INTELLIGENCE

Illinois's SB 1792 (104th General Assembly) would add Section 2HHHH to the Consumer Fraud and Deceptive Business Practices Act. The owner, licensee, or operator of a generative AI system would have to conspicuously display a warning on the system's user…

UT SB0322
Enacted Medium Risk

Educational Technology Regulatory Sandbox

SB0322 proposes an Educational Technology Regulatory Sandbox in Utah. Detailed analysis will follow upon release of the full bill text.

IL SB2398
In Committee High Risk

SPORTS WAGERING-AI RESTRICTION

Illinois's SB 2398 (104th General Assembly) would add Section 25-63 to the Sports Wagering Act, providing that a sports wagering licensee may not use artificial intelligence to track an individual's sports wagers, to create an offer or promotion targeting a…

IL SB 3180
In Committee High Risk

AI DATA PRIVACY ACT

Illinois's SB 3180 (104th General Assembly) would create the Artificial Intelligence Data Privacy Act. Beginning January 1, 2027, a deployer would have to either (1) not let its AI train on a user's covered information and retain the training data…

IL SB3548
In Committee High Risk

CONSUMER DATA PRIVACY ACT

Illinois's SB 3548 (104th General Assembly) would create the Consumer Data Privacy Act, giving consumers rights to confirm whether personal data is processed, correct and delete it, obtain a copy, and opt out of targeted advertising, data sales or profiling.…

OH HB524
In Committee Medium Risk

Impose penalties for AI models suggesting harming self or another

Ohio's HB 524 would bar any person from developing or deploying in Ohio an AI model or application that encourages any user to engage in any form of self-harm, including suicide, or to harm another person. The Attorney General could investigate suspected…

IL SB0050
In Committee High Risk

AGE-APPROPRIATE DESIGN CODE

Illinois' SB 50 is mainly a children's online privacy and design-code bill. As introduced, it would require covered entities (for-profit businesses over set revenue or data thresholds) to complete data protection impact assessments for services reasonably…

IL SB3241
In Committee Medium Risk

AGE-APPROPRIATE DESIGN CODE

Illinois' SB 3241 is mainly a children's online privacy and design-code bill. As introduced, it would require covered entities (for-profit businesses over set revenue or data thresholds) to complete data protection impact assessments for services reasonably…

IL SB0052
In Committee High Risk

PRIVACY RIGHTS ACT

Illinois' SB 52 is a general consumer privacy bill. As introduced, the Privacy Rights Act would give consumers rights over their personal information and create a Privacy Protection Agency. Its AI-related parts are narrow: it defines profiling as automated…

IL SB51
In Committee High Risk

AGE-APPROPRIATE DESIGN CODE

Illinois' SB 51 is mainly a children's online privacy and design-code bill. As introduced, it would require a business whose online service, product, or feature is likely to be accessed by people under 18 to complete a data protection impact assessment,…

HI HB639
Dead/Failed High Risk

Relating To Artificial Intelligence.

Hawaii's HB 639 HD 1 (2025) would have required businesses and individuals in commercial transactions to clearly disclose before using an AI chatbot that could lead a reasonable person to think they are talking to a natural person, and chatbot developers to…

IL HB4248
Passed One Chamber High Risk

ALGORITHMIC PRICE TRANSPARENCY

Illinois's HB 4248, as the Senate amended it (Senate Floor Amendment 1), would create the Protection from Surveillance Pricing Act, banning surveillance pricing: customized prices for a consumer or group based on personal data. The House passed an earlier…

WA HR4609
Dead/Failed Low Risk

Recognizing Data Privacy Day.

HR4609 recognizes Data Privacy Day in Washington. Full bill text access is required for comprehensive analysis.

HI SB3001
Enacted Medium Risk

Relating To Artificial Intelligence.

Hawaii's SB 3001 (Artificial Intelligence Disclosure and Safety Act) regulates AI companions, AI built to simulate a sustained human-like relationship. Operators must disclose it is AI if a reasonable person would think it human, adopt a suicide/self-harm…

UT SB149
Enacted

Artificial Intelligence Amendments

Utah's SB 149 created the Artificial Intelligence Policy Act: an Office of Artificial Intelligence Policy in the Department of Commerce and an AI Learning Laboratory in which the office may grant temporary regulatory mitigation agreements. It also made…

UT SB226
Enacted

Artificial Intelligence Consumer Protection Amendments

Utah's SB 226 replaces the 2024 generative AI disclosure rules with Utah Code Title 13, Chapter 75. A supplier using generative AI with an individual in a consumer transaction must disclose it is AI, not a human, if the individual clearly asks. Regulated…

NY A03411
Passed Both Chambers Medium Risk

Requires the owner, licensee or operator of a generative artificial intelligence system to conspicuously display a notice on the system's user interface that is reasonably calculated to consistently apprise the user that the outputs of the generative artificial intelligence system may be inaccurate.

New York's A 3411-B would add General Business Law § 399-zzzzzz requiring the owner, licensee or operator of a generative artificial intelligence system to clearly and conspicuously display a notice on the system's user interface that its outputs may be…

NY A04947
In Committee High Risk

Enacts the NY privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

New York's A 4947 (the "New York privacy act") would add General Business Law Article 42-A. For solely automated decisions that materially contribute to denials of lending, housing, insurance, health care or similar services, controllers would have to…

NY A10118
In Committee High Risk

Enacts the "food delivery worker safety and fair algorithms act" to prohibit food delivery platforms from utilizing or deploying any algorithmic management system that requires or incentivizes delivery workers to complete deliveries within a fixed or rigid time window that cannot reasonably be met…

New York's A 10118, the “food delivery worker safety and fair algorithms act,” would add Labor Law Article 21-D (§§ 796 to 796-e) barring food delivery platforms from using an algorithmic management system that requires or incentivizes deliveries within a…

IA SF2417
Enacted Medium Risk

A bill for an act establishing requirements and guidelines for conversational AI services, and providing civil penalties, and including applicability provisions. (Formerly SSB 3011.) Effective date: 07/01/2026. Applicability date: 07/01/2027.

Iowa's SF 2417 (Iowa Code ch. 554J) covers public conversational AI services built mainly to simulate human conversation. For known minors, operators must disclose AI use, take reasonable measures against sexual content and human-like claims, not give…

NY A06765
In Committee Medium Risk

Enacts the preventing algorithmic pricing discrimination act; requires the disclosure of algorithmically set prices.

New York's A 6765-A (the "Preventing Algorithmic Pricing Discrimination Act") would add General Business Law § 349-a, requiring anyone who knowingly advertises personalized algorithmic pricing based on an individual's consumer data to state "THIS PRICE WAS…

NY A00222
In Committee Medium Risk

Imposes liability for misleading, incorrect, contradictory or harmful information to a user by a chatbot that results in financial loss or other demonstrable harm.

New York's A 222-A would add General Business Law § 390-f on chatbot liability. A proprietor whose chatbot acts in place of a human representative could not disclaim liability for materially misleading, incorrect, contradictory or harmful information that…

NY A09317
In Committee Medium Risk

Regulates companion chatbots by requiring such companion chatbots include a warning.

New York's A 9317 would add General Business Law § 399-bbbb requiring any person or business operating a “companion chatbot” in New York to include a clear and conspicuous warning that the chatbot “can foster dependency and carries a psychological risk,”…

NY A09152
In Committee Medium Risk

Prohibits the use of any automated or algorithm-driven process by which the price charged for an essential good or service is adjusted on a real-time basis substantially in reference to any non-cost-based factor.

New York's A 9152 would add General Business Law § 396-rrr prohibiting sellers of essential goods and services, including platforms, from using dynamic pricing: an automated or algorithm-driven process adjusting price in real time "substantially in reference…

CA AB325
Enacted High Risk

Cartwright Act: violations.

California's AB 325 amends the Cartwright Act, the state antitrust law. It is unlawful to use or distribute a common pricing algorithm (any methodology, including software, used by two or more persons that uses competitor data to recommend, align, stabilize,…

IL HB5635
Dead/Failed Medium Risk

BIPA-SECURITY PURPOSES

Illinois's HB 5635 (103rd General Assembly) would have amended the Biometric Information Privacy Act to waive certain requirements for collecting biometric identifiers or information in circumstances relating to security purposes, exclude information…

NY A08916
In Committee Medium Risk

Prohibits licensees from relying on artificial intelligence for tracking and advertisement purposes and using such artificial intelligence to create personalized advertisements.

New York's A 8916 would add a paragraph (k) to Racing, Pari-Mutuel Wagering and Breeding Law § 1367-a(4) providing that mobile sports wagering licensees "shall be prohibited from using artificial intelligence to track a bettor's gambling habits and creating…

NY A09091
In Committee Medium Risk

Requires search engines inform users when showing information which was generated using artificial intelligence.

New York's A 9091 would add General Business Law § 399-ss. When a search engine displays information generated by artificial intelligence, it would have to tell the user, in clear, plain language in the same font size as the information, that it was…

NY A09642
In Committee Medium Risk

Requires the registration of data brokers; imposes regulations upon data brokers; establishes a data deletion mechanism for consumers; imposes penalties upon data brokers for violations of the law.

New York's A 9642-A would add General Business Law Article 42-A (§§ 1150-1158). Data brokers would have to register with the Attorney General within 60 days after meeting the definition and disclose, among other things, whether they have "shared or sold…

NY S08721
In Committee High Risk

Creates penalties for likenesses altered or created by artificial intelligence being used for commercial gain; establishes a private right of action for the unlawful dissemination of still or video images generated by artificial intelligence.

New York's S 8721 would add Civil Rights Law § 50-h, barring use of a person's likeness altered or created by software, machine learning or AI for products, merchandise, advertising or solicitation without prior consent, with liability of the greater of…

NY S09089
In Committee High Risk

Enacts the "food delivery worker safety and fair algorithms act" to prohibit food delivery platforms from utilizing or deploying any algorithmic management system that requires or incentivizes delivery workers to complete deliveries within a fixed or rigid time window that cannot reasonably be met…

New York's S 9089, the food delivery worker safety and fair algorithms act, would add Labor Law Article 21-D (sections 796 to 796-E). Food delivery platforms could not use an algorithmic management system that requires or incentivizes deliveries within a…

NY S08616
Passed One Chamber High Risk

Prohibits the use of electronic shelving labels, digital shelf display technology, and personalized algorithmic pricing in food retail establishments and drug retail establishments; provides injunctive relief, civil penalties, and a private right of action.

New York's S 8616-B, the Protecting Consumers and Jobs from Discriminatory Pricing Act, would add General Business Law § 349-a-1. Food and drug retail establishments could not use electronic shelving labels or digital shelf displays, could not engage in…

NY S05668
In Committee Medium Risk

Imposes liability for misleading, incorrect, contradictory or harmful information to a user by a chatbot that results in financial loss or other demonstrable harm.

New York's S 5668 would add General Business Law § 390-f on chatbot liability. A proprietor whose chatbot acts in place of a human representative could not disclaim liability for materially misleading, incorrect, contradictory or harmful information causing…

NY S09088
Passed One Chamber Medium Risk

Requires the registration of data brokers; imposes regulations upon data brokers; establishes a data deletion mechanism for consumers; imposes penalties upon data brokers for violations of the law.

New York's S 9088-A would add General Business Law Article 42-A (§§ 1150-1158) requiring data brokers to register with the Attorney General within 60 days with a $100 fee (or an amount the Attorney General sets) and disclose, among other things, data shared…

NY S08004
In Committee High Risk

Prohibits the use of biometric surveillance system or biometric surveillance information in places of public accommodation; prohibits entering into any agreement that authorizes any third party to use any biometric surveillance system or biometric surveillance information; provides penalties for…

New York's S 8004 would add Civil Rights Law § 40-h making it unlawful for an owner, franchisor, franchisee or other operator of a place or provider of public accommodation to use any biometric surveillance system or its information, or let a third party do…

PA HB78
Passed One Chamber High Risk

Consumer Data Privacy Act

Pennsylvania's HB 78 (Consumer Data Privacy Act) would give consumers rights to access, correct, delete and port personal data and to opt out of targeted advertising, data sales and profiling for solely automated decisions with legal or similarly significant…

NY S08459
In Committee Medium Risk

Prohibits transcripts being made from video conference meetings by artificial intelligence without conspicuous disclosure during such meeting that such meeting may be transcribed by artificial intelligence.

New York's S 8459 would add Civil Rights Law section 50-h ("Right to Privacy; Transcription"). No person could permit a video conference meeting to be transcribed by artificial intelligence unless the meeting includes a conspicuous disclosure during the…

NJ A1360
In Committee Medium Risk

"New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs.

New Jersey's A1360 would create the New Jersey Disclosure and Accountability Transparency Act (NJ DaTA). Controllers could process personally identifiable information only on a listed basis, such as the consumer's affirmative opt-in consent, and consumers…

MA H80
In Committee Medium Risk

Establishing the Comprehensive Massachusetts Consumer Data Privacy Act

Massachusetts H80 would add G.L. Chapter 93M, the Massachusetts Consumer Privacy Act, giving consumers rights to access, correct, delete and port data and to opt out of targeted advertising, sales and profiling for solely automated decisions with legal or…

SC S0268
Passed One Chamber High Risk

Children and Social Media

South Carolina's S 268, 'Children and Social Media', would add Chapter 80 to Title 39. Covered online services, which may include AI-based products, would owe minors a duty of care, face limits on data, notifications and profiling, and have to explain…

WA HB 2225
Enacted High Risk

Concerning regulation of artificial intelligence companion chatbots.

Washington's AI companion chatbot law (Chapter 168, Laws of 2026, effective January 1, 2027). Operators must clearly disclose that the companion is AI and not human at the start of an interaction and at least every three hours, and stop it from claiming to…

KY HB559
Dead/Failed Medium Risk

AN ACT relating to data privacy, portability, and interoperability.

Kentucky's HB 559, the Kentucky Digital Choice Act (2026 session), would have given users of social media services and AI model operators data portability, deletion and interoperability rights. Companies and operators would have had to answer copy or…

NJ A3968
In Committee Medium Risk

Establishes autonomous vehicle pilot program.

New Jersey's A3968 would have the Department of Transportation, with the Motor Vehicle Commission, establish a three-year pilot program allowing authorized testers to operate fully autonomous vehicles, overseen by a nine-member task force, with crash…

MS HB1051
Dead/Failed Medium Risk

Mississippi Consumer Privacy Protection Act; create.

Mississippi's HB 1051 (2026) would have created the Mississippi Consumer Privacy Protection Act for businesses with over $25 million in revenue that handle personal information of 175,000+ consumers (or 25,000+ with over half of revenue from selling data).…

MA S36
In Committee High Risk

To provide accountability in the use of biometric recognition technology and comprehensive enforcement

Massachusetts S36 would add G.L. Chapter 110I regulating biometric recognition technology: covered entities owe duties of loyalty, care and confidentiality, may not sell biometric data, and may not install biometric recognition equipment in places open to…

NY A9349
Passed Both Chambers Medium Risk

Prohibits the use of surveillance pricing

New York's A 9349-B would amend General Business Law section 349-a to prohibit surveillance pricing, meaning prices set in whole or part by an algorithm using personal data to offer different prices to different customers for the same goods or services. It…

US SB232
Introduced Medium Risk

Preventing Algorithmic Collusion Act of 2025

The federal S 232 (Preventing Algorithmic Collusion Act of 2025) would make it unlawful to use or distribute a pricing algorithm that uses or was trained with nonpublic competitor data, with federal civil penalties. It would also require audit reports on…

CT SB00002
Dead/Failed High Risk

An Act Concerning Artificial Intelligence.

Connecticut's SB 2, as passed by the Senate (File 603 as amended by Senate Amendments A and B, as described in the OLR bill analysis), would require anyone doing business in the state to tell consumers when they interact with an AI system, and deployers of…

KY HB33
Dead/Failed Medium Risk

AN ACT relating to data privacy.

Kentucky's HB 33, the Kentucky Price Fairness Act (2026 session), would have amended the Kentucky Consumer Data Protection Act (KRS 367.3611 and 367.3617) to bar controllers from 'surveillance pricing', meaning customized price increases based on…

IA HF2715
Introduced Medium Risk

A bill for an act relating to chatbots, including deployer requirements and interactions with minors. (Formerly HSB 647.)

Iowa's HF 2715 (formerly HSB 647) would require deployers of AI companions, public-facing chatbots and therapeutic chatbots to keep harm-response and self-harm protocols, disclose at the start and every three hours that the user is talking to AI, and take…

SC S0896
In Committee Medium Risk

Chatbot Regulation

South Carolina's S 896 was introduced as the Chatbot Protection Act (Chapter 80 of Title 39). The Senate Labor, Commerce and Industry Committee reported it favorably with an amendment on May 6, 2026, and the amended text is the Protecting Children from…

MA S2516
In Committee Medium Risk

Establishing the Massachusetts data privacy act

Massachusetts S2516 would add G.L. Chapter 93M (Massachusetts Data Privacy Act) and Chapter 93N (Location Shield Act), with consumer rights including opt-out of profiling for solely automated significant decisions. Reported to Senate Ways and Means May 12,…

MA S45
In Committee High Risk

Establishing the Massachusetts Data Privacy Act

Massachusetts S45 would add G.L. Chapter 93M (Massachusetts Data Privacy Act) and Chapter 93N (location data), with an opt-out of profiling used for automated decisions with legal or similarly significant effects. Referred to committee February 27, 2025; on…

WI AB1190
Dead/Failed Medium Risk

Algorithmic pricing of essential consumer goods, granting rule-making authority, and providing a penalty.

Wisconsin's AB 1190 would restrict grocery retailers' use of personalized algorithmic pricing on essential consumer goods: required disclosure on each such price, no electronic display of those prices in grocery stores of 15,000+ square feet, no pricing that…

MA S29
In Committee High Risk

To establish the Massachusetts Data Privacy Act

Massachusetts S29 would add G.L. Chapter 93M (Massachusetts Data Privacy Protection Act) and Chapter 93N (location data), giving individuals a right to opt out of profiling that produces legal or similarly significant effects. Referred to committee February…

MA H104
In Committee Low Risk

Establishing the Massachusetts Data Privacy Act

Massachusetts H104 would add G.L. Chapter 93M (the Massachusetts Data Privacy Act) and Chapter 93N (location data). Individuals could access, correct, delete and port covered data and opt out of profiling used for automated decisions with legal or similarly…

US HB4640
In Committee Medium Risk

Stop AI Price Gouging and Wage Fixing Act of 2025

The federal H.R. 4640, the Stop AI Price Gouging and Wage Fixing Act of 2025, would bar a person from surveillance-based price setting (using an automated decision system to set a customized price from surveillance data) and from surveillance-based wage…

WI SB166
Dead/Failed Medium Risk

Consumer data protection and providing a penalty. (FE)

Wisconsin's SB 166 (as introduced March 27, 2025) would create a consumer data protection law (s. 100.80) for controllers handling the personal data of 100,000+ consumers, or 25,000+ consumers while deriving over 50 percent of revenue from selling data.…

IA SF2415
In Committee High Risk

A bill for an act relating to provider requirements concerning the mental health of users of an artificial intelligence chatbot, and providing civil penalties.

Iowa's SF 2415 would bar AI chatbot providers from offering or simulating professional mental health advice or claiming to be a licensed professional, require crisis-referral protocols and repeated AI disclosures, and make violations unfair practices…

NY A05827
In Committee Medium Risk

Establishes consumers' foundational data privacy rights; creates oversight mechanisms; establishes enforcement mechanisms; establishes the privacy and security victims relief fund.

New York's A5827 (2025-26) would add a new Article 46, the "American Data Privacy and Protection Act", to the General Business Law, covering data minimization, a duty of loyalty, consumer rights to access, correct, delete and port covered data, and consent…

US SB3982
Introduced Medium Risk

AI Fraud Accountability Act of 2026

The federal S. 3982 (AI Fraud Accountability Act of 2026) would make it a federal crime, punishable by up to 3 years in prison and a fine, to pose falsely as a real or imaginary person in an AI-made or other computer-generated audio or visual impersonation,…

US SB2367
Introduced Medium Risk

AI Accountability and Personal Data Protection Act

The federal S. 2367 (AI Accountability and Personal Data Protection Act) would make it a federal tort to appropriate, use, collect, process, sell or otherwise exploit an individual's covered data without express, prior consent, including training a…

US HB334
Introduced Medium Risk

To amend the Communications Act of 1934 to establish technical and procedural standards for artificial or prerecorded voice systems created through generative artificial intelligence, and for other purposes.

The federal H.R. 334 would amend section 227(d)(3) of the Communications Act of 1934 (47 U.S.C. 227(d)(3)) by inserting "(including those created through generative artificial intelligence (genAI), for example voice cloning, and other subsequent technologies…

RI H7849
Introduced Medium Risk

Creates the surveillance pricing and online retailing act that would prohibit algorithmic price increases for online purchases.

Rhode Island H 7849 (2026), as introduced on February 27, 2026, would add chapter 6-13.4 barring online retailers from knowingly applying an 'algorithmic price increase': a price above the seller's baseline price set using an algorithm, AI or other data…

MO SB1444
Dead/Failed Medium Risk

Creates provisions relating to artificial intelligence in mental health

Missouri's SB 1444 (Senate Committee Substitute, 2026) would have added Section 407.3007, RSMo, barring anyone who develops or deploys AI in the state from advertising or representing that the AI is, or can act as, a mental health professional or provide…

VA HB758
Dead/Failed High Risk

Artificial Intelligence Chatbots and Minors Act; established, prohibited practices, penalties.

Virginia's HB 758 (2026) would have created the Artificial Intelligence Chatbots and Minors Act (Code §§ 59.1-614 to 59.1-616). Deployers that operate or distribute a chatbot in Virginia would have had to keep "human-like features" away from minors, use…

NJ A2710
In Committee Medium Risk

Establishes "Authentic Relationships Act"; prohibits artificial intelligence relationship simulation.

New Jersey's A2710 would create the Authentic Relationships Act. Providers could not design, develop, market or make available AI relationship simulations in New Jersey; AI could include features resembling intimate interaction only if used exclusively for a…

NJ S2602
In Committee Medium Risk

"New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs.

New Jersey's S2602 would create the New Jersey Disclosure and Accountability Transparency Act (NJ DaTA). Controllers could process personally identifiable information only on a listed basis, such as the consumer's affirmative opt-in consent, and consumers…

NJ S3952
In Committee Low Risk

Establishes "Fair Pricing and Transparency Act."

New Jersey's S3952, the Fair Pricing and Transparency Act, would bar retail food stores with 50 or fewer employees from surveillance-based price discrimination, dynamic pricing and personalized pricing of groceries, and require them to post sale prices…

NJ S1464
In Committee Medium Risk

Prohibits use of biometric surveillance system by business entity under certain circumstances.

New Jersey's S1464 would make it an unlawful practice under the Consumer Fraud Act for a business to use a biometric surveillance system (facial or other remote biometric recognition) on consumers at its premises unless it gives clear and conspicuous notice…

NJ A3926
In Committee Medium Risk

Prohibits collection of biometric identifier information by public or private entity under certain circumstances.

New Jersey's A3926 would bar public and private entities from collecting, retaining, converting, storing or sharing biometric identifier information unless they post clear, plain-language notice at every common entryway about their use of a biometric…

SC S1037
In Committee Medium Risk

Protecting Children from Chatbots

South Carolina's S 1037, the Protecting Children from Chatbots Act (new Chapter 81 of Title 39), would require chatbot operators with five hundred thousand or more monthly active users worldwide to offer a limited-access mode, verify age and obtain…

NJ A4732
In Committee Medium Risk

Requires artificial intelligence companion operators to provide notifications that users are not communicating with human.

New Jersey's A4732 would require operators of AI companions, meaning generative AI systems designed to simulate a sustained human or human-like relationship, to tell users they are not talking to a human. The notice must come at the start of each interaction…

MN HF3408
Dead/Failed Medium Risk

Surveillance-based price setting prohibited.

Not law. Minnesota's HF 3408 would have added Minn. Stat. 325D.141 barring retail food stores from surveillance-based price setting, meaning customized prices based on personal information gathered through electronic surveillance technology such as cameras,…

MN SF4199
Dead/Failed Medium Risk

Prohibit surveillance-based price setting

Minnesota's SF 4199 would have prohibited retail food stores from surveillance-based price setting, meaning customized prices based on personal information gathered through electronic surveillance such as cameras, sensors, biometric data or facial…

WA HB2481
Dead/Failed Medium Risk

Prohibiting surveillance-based price discrimination and surge pricing for retail goods.

Washington's HB 2481, the fair pricing and transparency act (2026 session), would have barred non-small businesses selling grocery products from surveillance-based price discrimination (prices set from monitoring or automated analysis of a consumer's…

NY A06656
In Committee Medium Risk

Requires certain companies which utilize artificial intelligence to file responsible capability scaling policies with the chief information officer.

New York's A 6656 would add General Business Law § 390-f requiring every person or entity "doing business or offering products to consumers in New York State" to develop a responsible capability scaling policy for its use and development of AI and to file an…

NJ S3668
In Committee High Risk

Requires notification of use of artificial intelligence system in certain communications with consumers.

New Jersey's S3668 would require a person or entity that deploys an AI system to communicate with a consumer through an online platform to tell the consumer, clearly and conspicuously, that an AI system is communicating and how to reach a human. A violation…

PA SB1090
Passed One Chamber Medium Risk

Providing for disclosures and safeguards relating to the use of artificial intelligence; and imposing duties on the Attorney General.

Pennsylvania's SB 1090 (2025-26), the Safeguarding Adolescents from Exploitative Chatbots and Harmful AI Technology Act (Printer's No. 1423), would require operators of AI companion platforms to disclose nonhuman status, maintain suicide and self-harm…

PA HB2006
Passed One Chamber Medium Risk

Providing for safety regarding artificial intelligence in companionship applications; and imposing a penalty.

Pennsylvania's HB 2006 (2025-26), the AI Companion Safety Act (Printer's No. 3747), would bar an operator from providing an AI companion unless it implements and maintains protocols that refer users to crisis services and block content that assists or…

NY A06767
In Committee High Risk

Prohibits the provision of an artificial intelligence companion to a user unless such artificial intelligence companion contains a protocol for addressing possible suicidal ideation or self-harm expressed by a user, possible physical harm to others expressed by a user, and possible financial harm…

New York's A 6767 would add General Business Law Article 47 and make it unlawful for an operator to provide an AI companion unless it has a protocol for possible suicidal ideation or self-harm, physical harm to others, and financial harm to others expressed…

MA S33
In Committee High Risk

Establishing the Comprehensive Massachusetts Consumer Data Privacy Act

Massachusetts S 33 would create a comprehensive consumer data privacy act. After a joint committee hearing on April 9, 2025, the committee folded it into new draft S2516 on May 12, 2025, so S33 itself does not move further. The successor, redrafted as S2608…

MI SB0359
In Committee Medium Risk

Consumer protection: privacy; personal data privacy act; create. Creates new act.

Michigan's SB 359 would create a Personal Data Privacy Act giving consumers rights over personal data, including opting out of profiling in furtherance of solely automated decisions with legal or similarly significant effects. Introduced June 5, 2025 and…

DE HB306
In Committee High Risk

An Act To Amend Title 6 Of The Delaware Code Regarding Communication With A Computer.

Delaware's HB 306 (153rd General Assembly) would add the Computer Communication Act (6 Del. C. ch. 25N). It would be an unlawful practice to engage or attempt to engage in a commercial transaction with a consumer who is interacting by text or voice with…

NJ S1677
In Committee Medium Risk

Establishes autonomous vehicle pilot program.

New Jersey's S1677 would have the Department of Transportation, with the Motor Vehicle Commission, establish a three-year pilot program allowing authorized testers to operate fully autonomous vehicles, overseen by a nine-member task force, with crash…

MA H97
In Committee Low Risk

Protecting consumers in interactions with artificial intelligence systems

Massachusetts's H 97 would add Chapter 93M requiring developers and deployers of high-risk AI systems (those making or substantially influencing decisions on education, employment, finance, government services, health care, housing, insurance or legal…

IL HB 3021
In Committee Medium Risk

CONSUMER FRAUD-AI DECEPTION

Illinois's HB 3021 (104th General Assembly) would add Section 2HHHH to the Consumer Fraud and Deceptive Business Practices Act making it an unlawful practice, whether or not a consumer is actually misled, to engage in a commercial transaction or trade…

NY S04276
In Committee High Risk

Enacts the "digital fairness act"; requires any entity that conducts business in New York and maintains the personal information of 500 or more individuals to provide meaningful notice about their use of personal information; establishes unlawful discriminatory practices relating to targeted…

New York's S 4276 (the digital fairness act) would require businesses holding personal information of 500 or more people to give short-form privacy notices, get opt-in consent, and bar discriminatory targeted advertising. It would also set rules for…

IL HB4985
In Committee Medium Risk

SURVEILLANCE-BASED PRICING

Illinois's HB 4985 would create the Surveillance-Based Price Discrimination Act, barring a person from using surveillance data as part of an automated decision system to inform the individualized price charged to a consumer. The Attorney General and…

NC H462
In Committee Medium Risk

Personal Data Privacy/Social Media Safety

North Carolina's H 462 (Edition 2) would enact a Data Privacy Act giving residents rights to access, correct, delete and take their data and to opt out of targeted ads, sales and profiling for solely automated decisions with significant effects, and a social…

OH SB79
In Committee Medium Risk

Regulate the use of pricing algorithms

Ohio's SB 79 would bar using or distributing a pricing algorithm that uses or was trained with nonpublic competitor data, presume an unlawful agreement in certain cases, and require businesses with $5 million or more in gross receipts to disclose algorithmic…

NJ S1463
In Committee Medium Risk

Prohibits collection of biometric identifier information by public or private entity under certain circumstances.

New Jersey's S 1463 would bar public and private entities in the State from collecting, retaining, converting, storing or sharing biometric identifier information gathered through biometric surveillance systems (including facial, iris, retina, voice,…

NY S03044
In Committee High Risk

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

New York's S 3044 (the New York privacy act) would add a consumer data privacy article to the General Business Law. Covered businesses would have to give notice, honor opt-outs of targeted advertising, data sales and profiling used for decisions with legal…

IL HB4988
In Committee High Risk

FRAUD-ARTIFICIAL INTELLIGENCE

Illinois's HB 4988 (104th General Assembly) would add Section 2MMMM to the Consumer Fraud and Deceptive Business Practices Act. The owner, licensee or operator of a generative AI system would have to conspicuously display on its user interface a warning…

IL SB3890
In Committee High Risk

CONSUMER DATA PRIVACY

Illinois's SB 3890 would create the Illinois Data Privacy Protection Act, giving consumers rights to access, correct, delete and port their data, to opt out of targeted advertising, sales and profiling used for decisions with legal or similarly significant…

IN HB1072
Enacted

Personal delivery devices

Indiana's HB 1072 (P.L. 15-2021) authorizes delivery robots. A personal delivery device is a powered device of up to 500 pounds, excluding cargo, used mainly on sidewalks and crosswalks to carry property and capable of navigating with or without the active…

CT SB00005
Enacted Medium Risk

An Act Concerning Online Safety

Public Act 26-15 is Connecticut's main AI statute. AI companion operators must disclose that users are talking to AI, run suicide and self-harm protocols and protect minors (from Jan. 1, 2027). Developers and deployers of automated employment-related…

CT SB00004
Enacted High Risk

An Act Concerning Consumer Privacy And Protection.

Connecticut's Public Act 26-64 (SB 4) targets data-driven pricing and surveillance. Businesses that use an automated price setting device fed by personal data (other than to set a discount) and advertise the price online must show "THIS PRICE WAS INCREASED…

VA SB796
Passed One Chamber High Risk

Artificial Intelligence Companion Chatbots and Minors Act; established, enforcement, civil penalty.

Virginia's SB 796 (2026 Regular Session) would create the Artificial Intelligence Chatbots and Minors Act. Covered entities would have to implement reasonable systems and processes, try to notify emergency services of imminent risk and report covered…

VA HB635
In Committee High Risk

Artificial Intelligence Chatbots Act; established, prohibited practices, penalties.

Virginia's HB 635 (2026 Regular Session) would create the Artificial Intelligence Chatbots Act. As introduced, an operator could not offer a companion chatbot in Virginia unless it is incapable of certain specified actions, and would have to show non-human…

SC H5138
In Committee High Risk

Chatbot Regulation

South Carolina's H 5138 would enact the Chatbot Protection Act (new Chapter 80 of Title 39). Chatbot providers would need affirmative consent to process personal data, could not use chat logs for advertising, would have to disclose that the user is talking…

IL HB4717
In Committee High Risk

ALGORITHMIC PRICING DISCLOSURE

Illinois's HB 4717 (104th General Assembly) would require an entity that sets prices with personalized algorithmic pricing (dynamic pricing set by an algorithm using personal data) and advertises or offers it using the consumer's personal data to include the…

US HB8014
Introduced High Risk

Online Privacy Act of 2026

The federal H.R. 8014 (Online Privacy Act of 2026) would create individual privacy rights and security duties for covered entities that intentionally collect, process or maintain personal information and send or receive it over the internet, and a new…

US SB2766
Introduced Medium Risk

Consumer Safety Technology Act Digital Taxonomy Act Blockchain Innovation Act AI for Consumer Product Safety Act

The federal S. 2766 (Consumer Safety Technology Act) would require the Consumer Product Safety Commission, within 1 year after enactment, to set up a pilot program using AI for at least one of: tracking injury trends, identifying hazards, monitoring…

KY SB345
Dead/Failed High Risk

AN ACT relating to the protection of children using the internet.

Kentucky's SB 345 (2024 session) would have required businesses that knowingly process children's personal information to protect children (under 18) online. Before offering new online services likely to be accessed by children, they would have had to…

TN HB1246
Dead/Failed Medium Risk

AN ACT to amend Tennessee Code Annotated, Title 4; Title 5; Title 6; Title 7; Title 12; Title 39; Title 45; Title 47; Title 48; Title 50; Title 55; Title 61; Title 62; Title 65; Title 66; Title 67 and Title 68, relative to artificial intelligence.

Tennessee's HB 1246 (114th General Assembly) would have required the Attorney General and Reporter's office, by July 1, 2026 and using existing resources, to report to legislative committee chairs how many Consumer Protection Act investigations involved AI…

RI S146
Dead/Failed High Risk

Video Lottery Games, Table Games And Sports Wagering -- The Rhode Island Consumer Protection Gaming Act

Rhode Island S 146 (2023), as introduced on February 1, 2023, would amend the Consumer Protection Gaming Act to bar facial recognition technology and biometric recognition programs in video-lottery terminals at pari-mutuel licensees and in online betting…

HI SB640
Dead/Failed High Risk

Relating To Artificial Intelligence.

Hawaii's SB 640 (2025) would have added a part to HRS chapter 481B making it unlawful in a commercial transaction to use an AI chatbot that may mislead a reasonable person into thinking they are talking to a natural person unless a clear and conspicuous…

MA H78
In Committee Medium Risk

Establishing the Massachusetts consumer data privacy act

Massachusetts H 78 would create the Massachusetts Consumer Data Privacy Act, giving consumers rights over personal data, including opting out of profiling for solely automated decisions with legal or similarly significant effects. After a hearing on April 9,…

MA S301
Dead/Failed Medium Risk

An Act advancing the economic development of the commonwealth through comprehensive data privacy

Massachusetts' S 301 would add a new chapter 93M to the General Laws, the Massachusetts Information Privacy and Security Act, a comprehensive data privacy law with defined terms such as consent (which excludes dark patterns), controller, data broker and…

US SB2937
Introduced Medium Risk

AI LEAD Act Aligning Incentives for Leadership, Excellence, and Advancement in Development Act

The federal S. 2937 (AI LEAD Act) would make AI developers liable for harm if they fail to use reasonable care in design or warnings, breach an express warranty, or sell a defective and unreasonably dangerous product (strict liability for the last).…

GA SB 540
Enacted Medium Risk

Online Internet Safety; certain disclosures related to conversational AI services; require

Georgia's AI companion chatbot law (Act 518, effective July 1, 2027). Operators must clearly disclose that users are talking to an AI, at the start and at least every three hours (hourly for minors or minor-directed bots). For known minors they must take…

MN SF4927
Dead/Failed High Risk

Delivery of professional services preclusion through artificial intelligence directly to consumers

Not law. Minnesota's SF 4927 would have added Minn. Stat. 325F.701, barring the owner of an AI model, or any business or person using one, from letting the model provide a professional service (one the state licenses, certifies or registers) to a consumer…

IL HB5581
Dead/Failed High Risk

ILLINOIS PRIVACY RIGHTS ACT

Illinois's HB 5581 (103rd General Assembly) would have created the Illinois Privacy Rights Act, giving consumers rights to access, correct, delete and obtain a copy of their personal data and to opt out of targeted advertising, sale, or profiling in…

CA SB295
Dead/Failed Medium Risk

California Preventing Algorithmic Collusion Act of 2025.

California's SB 295 (2025-26 Regular Session), the California Preventing Algorithmic Collusion Act of 2025, would have barred a person from distributing, or making recommendations based on, a pricing algorithm to 2 or more competitors, under specified…

NJ S968
Dead/Failed High Risk

Prohibits use of facial recognition technology on consumer except for legitimate safety purpose.

New Jersey's S 968 (2024-2025 session, as introduced) would make it an unlawful practice under the Consumer Fraud Act for a person selling goods or services at retail, or operating a place of public accommodation, to use a biometric surveillance system…

HI HB1782
Dead/Failed Medium Risk

Relating To Artificial Intelligence For The Protection Of Minors.

Hawaii's HB 1782 (H.D. 3, S.D. 2) would add a part to HRS chapter 481B for providers of conversational AI services and AI companion systems. When a provider knows or has reasonable certainty a user is a minor (under 18), it would have to disclose that the…

MD HB711
Enacted Medium Risk

Data Privacy - Consumer Data, Public Records, and Message Switching System (Data Privacy Act)

HB711 prohibits the sale of consumer data to governmental units engaged in civil immigration enforcement unless required by law.

MN HF4131
Dead/Failed Medium Risk

Surveillance-based price and wage discrimination prohibited.

Not law. Minnesota's HF 4131 would have added Minn. Stat. 325D.141 prohibiting surveillance-based price discrimination and wage discrimination, meaning use of an automated decision system to inform individualized prices or wages from surveillance data about…

NJ A4685
In Committee High Risk

Prohibits use and sale of algorithmic devices that set sale price of goods or services.

New Jersey's A 4685 (as introduced) would make it unlawful for a business entity to use, sell, distribute, develop, transfer or otherwise make available an algorithmic device, meaning software that uses algorithms on a consumer's personal data to recommend…

NJ A3929
Passed One Chamber Medium Risk

Prohibits use of biometric surveillance system by business entity under certain circumstances.

New Jersey's A3929 would make it an unlawful practice under the Consumer Fraud Act for a business entity to use a biometric surveillance system, meaning facial or other remote biometric recognition software, on a consumer at its physical premises unless it…

TN HB1468
Dead/Failed Medium Risk

AN ACT to amend Tennessee Code Annotated, Title 29; Title 45; Title 47 and Title 66, relative to algorithmic pricing.

Tennessee's HB1468 (114th General Assembly) would have barred an entity from setting the price of a specific good or service for a consumer in Tennessee using personalized algorithmic pricing, meaning dynamic pricing set by an algorithm that uses personal…

NY S7033
Dead/Failed Medium Risk

Enacts the preventing algorithmic pricing discrimination act

New York's S 7033 would have enacted the Preventing Algorithmic Pricing Discrimination Act. Anyone who knowingly advertised or published personalized algorithmic pricing based on a person's consumer data would have had to disclose "THIS PRICE WAS SET BY AN…

TN SB1363
Dead/Failed Medium Risk

AN ACT to amend Tennessee Code Annotated, Title 4; Title 5; Title 6; Title 7; Title 12; Title 39; Title 45; Title 47; Title 48; Title 50; Title 55; Title 61; Title 62; Title 65; Title 66; Title 67 and Title 68, relative to artificial intelligence.

Tennessee's SB 1363 (114th General Assembly) would have required the Attorney General and Reporter's office, by July 1, 2026 and using existing resources, to report to legislative committee chairs how many Consumer Protection Act investigations involved AI…

MI SB0760
Passed One Chamber High Risk

Trade: business regulation; availability of companion chatbots to minors; prohibit. Creates new act.

Michigan's SB 760, the 'leading ethical AI development for kids act', would bar operators of advanced chatbots from offering companion-style and other harmful design features unless they know the user is not a minor (under 18), and limit their use of minors'…

OR HB3899
Dead/Failed High Risk

Relating to requirements that apply to persons that process consumer personal data.

Oregon's HB 3899 (2025) would have amended the Oregon Consumer Privacy Act. It would have lowered the applicability thresholds in ORS 646A.572 from 100,000 to 35,000 consumers, and from 25,000 consumers with 25 percent of gross revenue from selling personal…

CA AB1609
Enacted Medium Risk

Customer service chatbots.

California's AB 1609 applies to businesses with over $500 million in national gross annual revenue. They may not represent that a customer service chatbot is human, and must clearly disclose that it is artificially generated if a reasonable person would…

TX HB3837
Dead/Failed High Risk

Relating to the regulation of autonomous vehicles; creating a criminal offense.

Texas HB 3837 (2025), as introduced, would have created an Autonomous Vehicle Commission and required a permit for autonomous vehicles to operate on Texas highways, with an operating plan for emergency responders, a recording device, insurance, and collision…

IL HB4544
Introduced High Risk

ALGORITHMIC PRICING

Illinois's HB 4544 would create the Preventing Algorithmic Pricing Discrimination Act. Anyone who knowingly advertises personalized algorithmic pricing based on a person's consumer data would have to state that the price was set by an algorithm using the…

MN HF4979
Dead/Failed Medium Risk

Delivery of professional services through artificial intelligence directly to consumers precluded, and enforcement and penalties provided.

Not law. Minnesota's HF 4979 would have added Minn. Stat. 325F.701, barring the owner of an AI model, or any business or person using one, from letting the model provide a professional service (one the state licenses, certifies or registers) to a consumer…

NY A6545
In Committee Medium Risk

Imposes liability for damages caused by a chatbot impersonating certain licensed professionals

New York's A 6545-C would add General Business Law section 390-f. Chatbot operators could not knowingly let a chatbot impersonate a practitioner of certain licensed professions or an attorney in a way that would be a crime or unauthorized practice if done by…

NY S9408
Passed Both Chambers High Risk

Relates to a prohibition on chatbot toys

This bill would ban manufacturing, distributing or selling 'chatbot toys' in New York, meaning children's toys with an embedded or integrated AI companion. The attorney general could seek injunctions and civil penalties of up to $15,000 per day per…

NY A07904
Dead/Failed Medium Risk

Requires disclosure of the use of artificial intelligence in political communications; directs the state board of elections to create criteria for determining whether a political communication contains an image or video footage created through generative artificial intelligence and to create a…

This bill mandates disclosure of AI use in political communications and directs the state board of elections to define AI-generated content.

NE LB1185
Dead/Failed High Risk

Adopt the Conversational Artificial Intelligence Safety Act

Not law as a stand-alone bill. Nebraska LB1185 would have enacted the Conversational Artificial Intelligence Safety Act, requiring chatbot operators to disclose they are AI, add protections for minor account holders, and keep a suicide and self-harm…

TX HB5496
Dead/Failed High Risk

Relating to the disclosure and use of artificial intelligence.

Texas HB 5496 (2025), as introduced, would have added Chapter 611 to the Business & Commerce Code. A person using AI in conducting business or providing a good or service to a Texas resident, including social media, political advertising or financial…

NY A10494
Dead/Failed High Risk

Imposes liability for misleading, incorrect, contradictory or harmful information to a user by a chatbot that results in financial loss or other demonstrable harm.

New York's A 10494 would have added General Business Law § 390-f barring a chatbot proprietor (an entity with more than twenty employees) whose chatbot serves as an alternative to a human representative from disclaiming liability when the chatbot gives…

NY S08209
Dead/Failed High Risk

Enacts the New York artificial intelligence bill of rights to provide residents of the state with rights and protections to ensure that any system making decisions without human intervention impacting their lives do so lawfully, properly, and with meaningful oversight.

New York's S 8209 (2023-2024) would have added State Technology Law Article IV (§§ 401-409), the New York artificial intelligence bill of rights. New York residents would have rights to safe and effective automated systems, protection from algorithmic…

NY S09381
Dead/Failed High Risk

Imposes liability for misleading, incorrect, contradictory or harmful information to a user by a chatbot that results in financial loss or other demonstrable harm.

New York's S 9381 (2023-2024) would have added General Business Law section 390-f on chatbots. A proprietor with more than twenty employees that uses a chatbot in place of a human representative could not disclaim liability for materially misleading,…

LA HB791
Dead/Failed Medium Risk

Provides relative to the regulation of artificial intelligence (OR +$256,243 GF EX See Note)

Louisiana's HB791, the People's A.I. Act, would have regulated AI chatbot providers: consent before processing personal data or training on chat logs, no selling chat logs, a ban on using chat logs for ads, notices that the user is talking to a chatbot,…

IL HB3044
In Committee High Risk

AUTONOMOUS VEH REQUIREMENTS

Illinois's HB 3044 (104th General Assembly) would amend the Illinois Vehicle Code to require manufacturers to file automation documentation and a fee with IDOT before selling or operating an autonomous vehicle. Level 2 vehicles could be sold and registered,…

IL SB 3368
In Committee Medium Risk

CHATBOT RESPONSE LIABILITY ACT

Illinois's SB 3368 (104th General Assembly) would create the Chatbot Response Liability Act. A chatbot proprietor could not disclaim liability when its chatbot gives materially misleading, incorrect, contradictory or harmful information resulting in…

IL SB 2995
In Committee Medium Risk

CONSUMER FRAUD-AI DISCLOSURE

Illinois's SB 2995 (104th General Assembly) would add Section 2MMMM to the Consumer Fraud and Deceptive Business Practices Act. A person could not use AI in trade and commerce to communicate with a consumer in a way that may mislead or deceive a reasonable…

CA AB 2583
Dead/Failed Medium Risk

Office of Small Business Advocate: artificial intelligence.

California's AB 2583 (2025-26 Regular Session), the AI for Main Street Act, would amend Government Code section 12098.5 to require the Small Business Advocate to assist California small businesses in evaluating artificial intelligence for their operations.…

AK HB367
Dead/Failed Medium Risk

Consumer Data Privacy Act

Alaska's HB 367 (2026), as the House Judiciary committee substitute CSHB 367(JUD), would have created a consumer data privacy article in AS 45.48 and a data broker registry, amended the social security number laws, and made certain violations unfair or…

SC S0920
Introduced Medium Risk

Health insurance

South Carolina's Bill S0920 requires health insurers to consider factors like bias and transparency when using AI, mandates disclosures about AI usage to enrollees, and details disciplinary actions such as fines or license suspensions for violations.

NC HR1177
In Committee Low Risk

Consumer Protection Artificial Intelligence Bill of Rights.

HR 1177 is a nonbinding North Carolina House resolution urging Congress to preserve the state's authority to regulate harmful uses of AI in consumer protection, to let state agencies keep full investigative and enforcement powers, and to oppose federal…

FL SB2D
Dead/Failed Medium Risk

Artificial Intelligence Bill of Rights

Not law: passed the Senate but died in the House. Florida's SB 2-D (2026 special session D) would have created an "Artificial Intelligence Bill of Rights" (new part IX of ch. 501, F.S.): parental consent and parental controls for minors on companion chatbot…

NY S03008
Enacted Medium Risk

Enacts into law major components of legislation necessary to implement the state transportation, economic development and environmental conservation budget for the 2025-2026 state fiscal year; relates to the waterfront commission act; makes amendments to change "applicant" to "licensee or…

New York's 2025-26 budget bill (Chapter 58 of 2025) includes two AI laws. Part U requires operators of AI companions (AI that simulates a sustained human-like relationship) to make reasonable efforts to detect and address suicidal ideation or self-harm and…

OK HB3453
Dead/Failed High Risk

Artificial intelligence; definitions; establishing the rights of Oklahomans when interacting with artificial intelligence; effective date.

Oklahoma's HB 3453 (2024), as engrossed, would define artificial intelligence and declare that Oklahomans have rights when dealing with it: to know when they interact with AI in consequential exchanges or consume realistic content generated entirely by AI…

LA HB425
Dead/Failed Medium Risk

Provides for consumer protection practices for customers engaging with artificial intelligence (OR SEE FISC NOTE GF EX)

Louisiana's HB425 would have made it an unfair or deceptive trade practice for any person to let a Louisiana consumer interact with a chatbot, AI agent or avatar that could make a reasonable person think it is human without telling them clearly and…

NY S2539
Passed One Chamber Medium Risk

Requires retailers to post warning signs of the tracking and collecting of customers biometric data through electronic devices; provides for civil penalties.

New York's S 2539-C would add General Business Law § 390-f. A retailer that tracks customers through a cell phone, store-installed camera or other electronic device would have to conspicuously post a plain-language warning sign at each entrance, and a…

MD HB1261
Dead/Failed Medium Risk

Consumer Protection - Artificial Intelligence Toys (Artificial Intelligence Toy Safety Act)

Maryland's HB 1261 (2026, the Artificial Intelligence Toy Safety Act, first reader text) would have set rules for toys that use AI and are marketed to or mainly used by children: no sexual, violent or emotionally manipulative content, verified parental…

FL S0482
Dead/Failed Medium Risk

Artificial Intelligence Bill of Rights

Not law: passed the Senate but died in the House when the session ended. Florida's CS/SB 482 (2026), the "Artificial Intelligence Bill of Rights," would have required parental consent and controls for minors on companion chatbot platforms, an hourly…

MD HB883
Dead/Failed Medium Risk

Consumer Protection - Artificial Intelligence - Behavioral Health Care Prohibitions

Maryland's HB 883 (2026, third reader text) would have barred developers of AI offered to Maryland consumers from representing that the AI is a behavioral health care provider or can provide behavioral health care, and from offering AI specifically…

OK SB2085
Dead/Failed Medium Risk

Artificial intelligence; establishing certain rights; prohibiting certain actions by certain entities; requiring certain actions by certain entities. Effective date.

Oklahoma's SB 2085 (2026), as introduced, would, per the official bill summary, have barred the state from accepting bids from or renewing contracts with AI technology providers that do not attest they are not foreign-owned or foreign-adversary controlled,…

US SB3062
In Committee Medium Risk

GUARD Act Guidelines for User Age-verification and Responsible Dialogue Act of 2026

The federal S. 3062 (GUARD Act) would require AI chatbot providers to verify that users of AI companions are adults and bar minors from them, require AI and non-professional disclosures, and make it a crime to knowingly or recklessly make publicly available…

US HB1770
Passed One Chamber Medium Risk

AI for Consumer Product Safety Act Digital Taxonomy Act Blockchain Innovation Act

The federal H.R. 1770 (Consumer Safety Technology Act, which includes the AI for Consumer Product Safety Act, Blockchain Innovation Act and Digital Taxonomy Act) would require the Consumer Product Safety Commission to set up a pilot program on using AI…

US HB7786
Introduced Medium Risk

AI Fraud Accountability Act

The federal H.R. 7786 (AI Fraud Accountability Act) would make it a federal crime, in interstate or foreign communications, to pose in a "digital impersonation" (an AI- or software-generated image, video or audio indistinguishable from a real person) with…

MN SF3098
Dead/Failed Medium Risk

Prohibition from using artificial intelligence to dynamically set product prices

Minnesota's SF 3098 (1st engrossment) would add Minn. Stat. 325D.141 prohibiting surveillance-based price discrimination and wage discrimination, meaning individualized prices or wages set with an automated decision system from surveillance data about a…

VA SB85
Dead/Failed High Risk

Consumer Data Protection Act; social media platforms & model operators, interoperability interfaces.

Virginia's SB 85 (2026 Regular Session) would have required social media platforms and operators to build third-party interoperability interfaces letting users share social graph data and contextual data tied to AI systems, as the user designates. It passed…

US SB4199
In Committee Medium Risk

Youth AI Privacy Act

The federal S. 4199 (Youth AI Privacy Act), as introduced, would require AI chatbot deployers that know a user is a minor to disclose that the user is talking to an AI, bar profiling, advertising and training on minors' data, and have the FTC write rules…

MA H96
In Committee Medium Risk

To provide accountability in the use of biometric recognition technology and comprehensive enforcement

Massachusetts H96 would add G.L. Chapter 110I regulating biometric recognition technology: covered entities that collect or process biometric data owe duties of loyalty, care and confidentiality, may not sell it, and may not install biometric recognition…

AL HB324
Dead/Failed Medium Risk

Artificial intelligence; age verification systems required for chatbots, safeguard protocols required, therapy chatbot requirements established, private right of action and enforcement provided for

Alabama's HB 324, as introduced, would require AI chatbot deployers to verify the age of every user, keep chatbots with human-like features away from minors (under 19) or offer minors a version without them, adopt protocols for users who express intent to…

MD SB827
Dead/Failed Medium Risk

Consumer Protection and Product Liability - Chatbots

Maryland's SB 827 (2026, first reader text, cross-filed with HB 1250) would have regulated operators and developers of generative AI chatbots made available to Maryland users: affirmative consent for training on input data, a ban on using chat logs for…

US HB1027
Introduced Medium Risk

QUIET Act Quashing Unwanted and Interruptive Electronic Telecommunications Act

The QUIET Act (H.R. 1027) would amend the Communications Act of 1934 to require anyone making a robocall or sending a robotext who uses AI to emulate a human being to disclose at the start that AI is being used. It would also double the maximum forfeiture…

US SB3354
Introduced Medium Risk

QUIET Act Quashing Unwanted and Interruptive Electronic Telecommunications Act

The federal S. 3354 (QUIET Act) would amend Section 227 of the Communications Act of 1934 to require anyone making a robocall or robotext who uses AI to emulate a human to disclose at the beginning that AI is being used, and would double the maximum…

FL S2
Dead/Failed High Risk

Artificial Intelligence Bill of Rights

Florida's SB 2-D (2026 special session D), the Artificial Intelligence Bill of Rights, would have required companion chatbot platforms to get parental consent before a minor holds an account, required bots to tell users hourly that they are not talking to a…

IA SSB3085
In Committee Medium Risk

A bill for an act relating to private entity requirements concerning biometric data, and providing civil penalties.

Iowa's SSB 3085 would create Code chapter 554J requiring private entities holding biometric data (such as facial geometry, fingerprints or voice) to have a public retention policy, give written notice before collecting, never sell it, and protect it. The…

NJ S4279
In Committee High Risk

Provides disparate impact based on automated decision system as cause of action for certain consumers.

New Jersey's S 4279 (as introduced) would bar a covered entity (lender, housing provider, screening company, creditor, servicer, insurer or their agents) from using an automated decision system in housing or credit decisions in a way that results in a…

AI Regulation in the Consumer Protection Industry

State legislatures across the United States are actively developing artificial intelligence regulations that directly affect Consumer Protection companies and practitioners. These laws address a wide range of concerns including algorithmic discrimination, automated decision-making, data privacy, consumer transparency, and the use of high-risk AI systems that can materially affect individuals' lives. As of 2026, 44 states have introduced or enacted legislation with direct implications for Consumer Protection.

Compliance requirements vary significantly by state, making it essential for Consumer Protection legal and compliance teams to track both enacted laws and pending bills. Key obligations may include conducting algorithmic impact assessments, providing consumer disclosures when AI is used in consequential decisions, implementing risk management programs, and ensuring human-in-the-loop oversight for high-stakes outcomes. Penalties for non-compliance can be substantial — see our Penalty Tracker for details by state.

To assess your organization's specific compliance obligations under current and upcoming Consumer Protection AI regulations, use our Am I Affected? tool. For upcoming enforcement dates, visit the Deadlines page or the Deadline Calendar. Use the Bill Comparator to analyze differences between state laws side-by-side.