Colorado Enacts AI Chatbot Safety Law for Minors, Requiring Suicide-Prevention Protocols and Age Checks
HB26-1263 requires conversational AI operators to add self-harm protocols, age estimation, and content safeguards for minors, with the operator requirements becoming operative January 1, 2027.
Overview
Colorado has enacted a law establishing safety requirements for conversational AI chatbots, with specific protections aimed at minor users. The measure, HB26-1263, titled the “Conversational Artificial Intelligence Service Operator Requirements” act, defines a conversational AI service as “an artificial intelligence system that is accessible to the general public and that primarily simulates human conversation and interaction through adaptive textual, visual, or aural communications,” according to the Colorado General Assembly’s bill page. Governor Jared Polis signed the bill into law, and the act itself became effective August 12, 2026, though the substantive requirements it places on AI operators do not become operative until January 1, 2027.
What We Know
According to the Colorado General Assembly, operators of conversational AI services will be required to:
- Use “commercially reasonable methods or generally accepted methods to estimate the age” of users
- Prohibit “points or rewards to encourage engagement” with minors
- Implement “technically feasible measures to prevent” the service from producing “explicit sexual conduct, intimate digital depictions, or statements that simulate emotional dependence”
- Create a protocol to “stop engaging in response to a user prompt regarding sexual conduct with a minor”
- Provide privacy and account-management tools for minor users and their parents or guardians
- Disclose when a user is interacting with AI, implement protocols addressing suicidal ideation and self-harm, and file annual reports with the attorney general
The act also bars operators from representing that AI-generated outputs are equivalent to services “provided by certain licensed or certified professionals,” per the bill page.
HB26-1263 was carried by prime sponsors Rep. Sean Camacho, Rep. Javier Mabrey, Sen. John Carson, and Sen. Iman Jodeh, according to the Colorado General Assembly. It passed the House 40-24 on third reading, cleared the Senate 24-11, and the House concurred with Senate amendments 48-16, according to the bill’s status history. Governor Polis signed the measure on May 29, 2026, according to the Colorado General Assembly’s status table.
“We wanted to put guardrails in place that protect kiddos and really hold big tech accountable when it comes to how predatory these chatbots have become,” Sen. Iman Jodeh, one of the bill’s sponsors, told CBS News Colorado.
CBS News Colorado reported that Polis signed the measure more than two years after Thornton resident Cynthia Montoya lost her 13-year-old daughter Juliana to suicide, which Montoya attributed partly to harmful interactions with an AI chatbot platform. Montoya, however, told CBS News Colorado she remains concerned the law’s language leaves too much discretion to the companies it regulates. “My primary concern is what I call the loose language in the bill. The platforms use a standard of what they think is a reasonable measure,” she said. Montoya added: “I believe that the law protects the technology companies.”
Colorado’s law joins a wave of state-level chatbot legislation enacted this year. The Future of Privacy Forum’s chatbot legislation tracker lists more than a dozen other states that have signed chatbot safety bills in 2026, including California, Connecticut, Georgia, Hawaii, Iowa, Idaho, Maine, Nebraska, New Hampshire, New York, Oregon, Rhode Island, Utah, and Washington.
What We Don’t Know
The Colorado General Assembly’s bill page does not specify a dollar figure for penalties tied to noncompliance, and how the attorney general’s office will interpret “commercially reasonable methods” for age estimation in practice remains to be seen once the requirements become operative on January 1, 2027. It is also not yet clear how enforcement will address chatbot platforms based outside Colorado but accessible to Colorado minors.
Analysis
HB26-1263 reflects a broader pattern of state legislatures moving to regulate AI chatbots aimed at or accessible to minors, an area where federal rules do not yet exist. As CBS News Colorado noted, the bill’s path to passage was shaped in part by the account of a Colorado parent who said her daughter’s death was linked to chatbot interactions — the kind of case that has driven similar legislative pushes in other states tracked by the Future of Privacy Forum. Whether Colorado’s specific combination of age-estimation, content-safeguard, and reporting requirements proves effective, or whether the “commercially reasonable methods” standard Montoya criticized ends up being read narrowly by regulators, will not become clear until the operator requirements take effect in January 2027.