Washington AI Chatbot Safety for Minors (HB 2225)
Effective date
Penalty
Violations enforceable under Consumer Protection Act. CPA penalties apply. Private right of action.
Obligations mapped
Tracked
Overview
First-in-nation law requiring AI chatbot operators to disclose AI nature at regular intervals (every 3 hours for adults, every hour for minors) and implement safety measures to protect minors from manipulation, explicit content, and emotional exploitation. Includes self-harm and crisis protocols. Targets conversational AI engagement patterns specifically.
This is an AI-specific state law.
See if this regulation applies to your company with the free exposure scan.
Who this applies to
This regulation applies to the following roles:
- Developers of covered AI systems
- Deployers and users of covered AI systems
- Organizations operating in Washington
This regulation applies to both companies that build AI products and companies that use AI tools from other vendors.
See enrolled statute text at the official source.
AI categories covered
- Healthcare AI
- Consumer-facing AI
Specific AI use cases:
- Companion, relationship, or social chatbots
What this requires you to do
Detailed obligation packs are not yet mapped for this entry in XIRA. Obligation areas from the catalog are listed below.
What this requires you to do
Disclose AI use. Make it clear to users when they are interacting with AI-generated content or AI-driven systems.
Provide transparency notices. Inform affected individuals that AI is being used and how it influences decisions.
Notify consumers. Inform consumers about how AI affects decisions that impact them.
Implement a risk management program. Maintain ongoing processes to identify, assess, and mitigate AI-related risks.
Regulation summaries are simplified for readability and may not capture every nuance of the underlying statute. Verify important details against primary sources linked on this page.
Enforcement and penalties
Violations enforceable under Consumer Protection Act. CPA penalties apply. Private right of action.
Private right of action: plaintiffs may bring direct claims in addition to government enforcement.
Penalty amounts are based on statutory text and may be subject to adjustment, judicial interpretation, or enforcement discretion.
Legislative history
effective
Takes effect
signed
Signed by Governor Ferguson
Related regulations
- In EffectAI-Specific
California Companion Chatbots Act (SB 243)
California's Companion Chatbot Act may apply to operators of AI chatbots designed for ongoing social interaction. Where applicable, operators may need to disclose the AI nature of the chatbot, maintain safety protocols for self-harm and suicide content, provide crisis referrals, and implement special protections for minors including break reminders and content restrictions. Operators may need to publish safety protocols and file annual reports with the Office of Suicide Prevention starting July 2027.
Effective
- In EffectAI-Specific
New York AI Companion Models Law (A3008, Article 47)
Requires AI companion operators to disclose AI nature, provide reminders every 3 hours of use, and implement protocols to detect suicidal ideation or self-harm and refer users to crisis services. Carries the highest per-day penalties of any US AI law at $15,000 per day. Penalties fund the NY suicide prevention fund. Unlike California SB 243, the New York law does not include a private right of action.
Effective
- In EffectAI-Specific
Utah AI Mental Health Chatbot Regulation (HB 452)
Regulates AI-powered mental health chatbots. Requires clear disclosure that the service is not a human clinician, limits certain advertising during therapeutic-style conversations, and restricts sharing identifiable health information. Specific disclosure timing: before user can access the chatbot, after 7 days without use, and whenever asked by the user. Health data restrictions: businesses cannot share or sell individually identifiable health information or user input with third parties, except as necessary for chatbot function or to health providers with user consent under HIPAA. Advertising restrictions: ads delivered through chatbot must be disclosed, and no user input can be used to decide whether to advertise or to customize ads. Affirmative defense requires actual policy filing with the Division of Consumer Protection, not only having a policy on file internally.
Effective
- UpcomingAI-Specific
Washington AI Content Disclosure Act (HB 1170)
AI content provenance and watermarking requirements for providers with 1 million or more monthly Washington users. Requires latent disclosures (watermarks) in AI-generated image, video, and audio content. Extended implementation period to January 1, 2028. Only applies to providers with 1 million or more monthly Washington users. Closely aligned with California SB 942 (California AI Transparency Act). AG-exclusive enforcement under the Consumer Protection Act. No private right of action.
Effective
- UpcomingAI-Specific
Washington SB 5395 (AI in Health Insurance Prior Authorization)
Enacted as Chapter 157, Laws of 2026; Governor signed March 23, 2026; effective June 11, 2026. AI tools may be used to approve prior authorization requests but may not deny care without human review by a licensed physician or health professional. Where applicable, managed care organizations may need to report the percentage of total denials aided by AI. Periodic performance reviews of AI tools may be required for accuracy and reliability.
Effective
- In EffectPrivacy ADM
Washington My Health My Data Act
Broad health data privacy law covering health data collected outside HIPAA, including data from health-related AI tools, wearables, and wellness apps. Defines consumer health data extremely broadly to include data not typically considered health-related: biometric data, bodily function data, and inferences derived from non-health data. Applies to Washington residents and any person whose health data is collected in Washington (potential extraterritorial reach). Much broader than reproductive health alone: it covers all consumer health data outside HIPAA. Geofencing ban around healthcare facilities effective July 2023. Regulated entities: compliance from March 31, 2024; small businesses from June 30, 2024. Multiple lawsuits filed, establishing early case law.
Effective
- In EffectAI-Specific
Washington Election Deepfake Disclosure (SB 6280)
Requires clear and conspicuous disclosure when AI-generated or AI-manipulated media is used in political advertising or communications. One of the first state laws specifically targeting deepfakes in elections.
Effective
- In EffectAI-Specific
Washington Fabricated Intimate Images (2024)
Criminalizes creation and distribution of AI-generated intimate images without consent. Provides civil remedies for victims.
Effective
- In EffectAI-Specific
Washington Forged Digital Likenesses (HB 2459)
Extends Washington's existing forgery and identity theft statutes to cover AI-generated digital likenesses used for fraudulent purposes.
Effective
Washington AI regulation guide lists every tracked rule for this jurisdiction with timelines and obligation tallies.
Regulation summaries are simplified for readability and may not capture every nuance of the underlying statute. Verify important details against primary sources linked on this page.