Senate Bill 243: Chatbot Safeguards for Minors and Vulnerable Users
United States · Law · California State Legislature
High impact. A reviewer confirms each change before it is listed here.
Our summary
This law establishes safeguards for companion chatbot operators to protect minors and vulnerable users from harmful interactions. It requires operators to prevent exposure to sexual content, provide age-appropriate notifications that chatbots are AI-generated, and implement protocols to address suicidal ideation and self-harm. The law grants families a private right of action to enforce these requirements.
Written by the Index in our own words. It is not legal advice; the official text is the authority.
Inside this policy
Every section of this policy in order. Our notes summarise each one in plain language and do not quote the official text, which is the authority.
Drafted by the Index An automated summary of the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
3 sections
Jump to a chapter
Overview and purpose
Senate Bill 243 requires operators of companion chatbots to establish safeguards for interactions with AI chatbots and grants families a private right of action against developers who fail to comply. The law responds to documented harms from unregulated chatbots, including a case where a minor developed an emotional relationship with a chatbot and subsequently died by suicide.
Required safeguards and protections
SB 243 establishes requirements for companion chatbot platforms to protect minors and vulnerable users from potential harms, including preventing exposure to sexual content, providing disclosures and reminders that chatbots are artificially generated, requiring protocols to address suicidal ideation and self-harm with crisis service referrals, and mandating annual reporting on the relationship between chatbot use and suicidal thoughts. The bill also creates a private right of action enabling users to enforce these protections.
Legislative passage and effective date
Senate Bill 243 passed the California Senate on September 11 with a vote of 33 to 3 and the Assembly on September 10 with a vote of 59 to 1. Governor Newsom signed the bill into law on October 13, 2025, and it becomes effective on January 1, 2026.
Controls
What this policy requires, forbids, grants or penalises, one control at a time and in our own words. Each control links to the official text, which is the authority. This is not legal advice.
Drafted by the Index Drafted automatically from the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
Themes covered 0 of 35
Choose a theme to see only its controls. About the themes
Risk and scope 0 of 4
- Risk classification, not covered
- Prohibited practices, not covered
- Risk management system, not covered
- Impact assessment, not covered
Data and privacy 0 of 4
- Data governance and quality, not covered
- Data subject rights and consent, not covered
- Cross-border data transfer, not covered
- Copyright and training data, not covered
Transparency and records 0 of 4
- Transparency and disclosure to users, not covered
- Labelling of synthetic content, not covered
- Technical documentation, not covered
- Record keeping and logging, not covered
Technical safeguards 0 of 4
- Human oversight, not covered
- Accuracy, robustness and cybersecurity, not covered
- Bias and non-discrimination, not covered
- Testing and evaluation, not covered
Assurance and lifecycle 0 of 4
- Conformity assessment and certification, not covered
- Registration and notification, not covered
- Incident and breach reporting, not covered
- Post-market monitoring and corrective action, not covered
Rights and protected groups 0 of 4
- Automated decision-making rights, not covered
- Children and vulnerable groups, not covered
- Biometric identification and surveillance, not covered
- Whistleblowing, complaints and redress, not covered
Roles and organisation 0 of 6
- Supply chain and provider-deployer duties, not covered
- General purpose and foundation models, not covered
- Accountability and governance roles, not covered
- Training and AI literacy, not covered
- Public sector use and procurement, not covered
- Innovation support and sandboxes, not covered
Enforcement and sectors 0 of 5
- Enforcement, penalties and regulators, not covered
- Sector rules: health, not covered
- Sector rules: finance and insurance, not covered
- Sector rules: employment, not covered
- Sector rules: education, not covered
The full list of controls could not be loaded, so only the first 0 are shown.
Change history
No changes recorded since we began monitoring this policy.