Parents and Legal Guardians
- Parents must be able to use easy parental controls to monitor and limit their child’s chatbot use.
- If a minor expresses suicidal thoughts while using certain chatbots, the provider must notify the parent or guardian without “unreasonable delay.”
- A provider cannot sell or share a minor’s chatbot data without verifiable parental consent.
Businesses and AI developers (covered entities)
- Must take “reasonable measures” to stop chatbots from encouraging self-harm, sexual communication with minors, pretending to be human, claiming to be licensed professionals, or fostering romantic/emotional dependency with minors.
- Must require accounts and collect age assurances; design parental controls and notification systems; provide identity disclosures at set intervals depending on tier.
- Tier II chatbots must not keep persistent memory of a minor’s past interactions except as needed for compliance.
- Tier III chatbots (therapeutic) cannot be used by minors unless supervised by a licensed professional; they must keep risk management programs, publish protocols, and keep training-data documentation.
- Must stop targeted ads to minor users based on their chat content or inferred emotional state.
Mental health professionals
- Tier III chatbots cannot make diagnoses or stand in for professional care. Minors may use them only under supervision of a licensed professional.
Government / Public agencies
- FTC will publish annual reports on compliance and observed risks for each tier.
- NIST must do a study on harms from Tier II and Tier III chatbots.