View full title
Imposes liability for misleading, incorrect, contradictory or harmful information to a user by a chatbot that results in financial loss or other demonstrable harm.
In one paragraph
New York's A 222-A would add General Business Law § 390-f on chatbot liability. A proprietor whose chatbot acts in place of a human representative could not disclaim liability for materially misleading, incorrect, contradictory or harmful information that causes a covered user financial loss or other demonstrable harm (no liability if cured within thirty days of notice), and would have to tell users they are talking to an AI chatbot. Further duties would apply to companion chatbots (self-harm and minors). Reference changed to Science and Technology March 5, 2026; it has not passed either chamber.
Plain-English summary, written with AI assistance. The official text controls.
What it means for business
None yet: the bill is pending. If enacted, businesses deploying chatbots could not disclaim liability for harmful or misleading chatbot output and would have to disclose the AI, and companion-chatbot operators would need self-harm and minor safeguards.
Key provisions
- Proprietors (owners, operators or deployers, not third-party licensors) "may not disclaim liability" for materially misleading, incorrect, contradictory or harmful chatbot information causing financial loss or other demonstrable harm; no liability if the proprietor cures the harm within thirty days of notice
- Liability for bodily harm, including self-harm, from such information has no cure provision and cannot be disclaimed
- Proprietors must give clear, conspicuous notice that the user is interacting with an AI chatbot rather than a human
- Companion chatbots: commercially reasonable methods to prevent promoting self-harm, a use bar of at least 24 hours and a crisis contact when a user expresses self-harm thoughts
- Companion chatbots and minors: determine whether a user is a minor, get verifiable parental consent, strict liability for a minor's self-harm if the proprietor fails to comply
- The Attorney General "shall promulgate regulations" on commercially reasonable methods and on verifiable parental consent; age and consent data must be deleted immediately after use
- Would take effect one year after it becomes law; no penalty amounts or enforcement agency are stated
Latest legislative action
Mar 5, 2026. REFERENCE CHANGED TO SCIENCE AND TECHNOLOGY
Sponsors (showing 5 of 8)
| Name | Role |
|---|---|
| Clyde Vanel D | Primary |
| GANTT | Primary |
| Linda Rosenthal D | Primary |
| MAGNARELLI | Primary |
| PAULIN | Primary |
Topics and industries
Related topics
Affected industries
This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error