AI chatbot regulatory developments: An international comparative analysis and practical takeaways – IAPP

Welcome to the forefront of conversational AI as we explore the fascinating world of AI chatbots in our dedicated blog series. Discover the latest advancements, applications, and strategies that propel the evolution of chatbot technology. From enhancing customer interactions to streamlining business processes, these articles delve into the innovative ways artificial intelligence is shaping the landscape of automated conversational agents. Whether you’re a business owner, developer, or simply intrigued by the future of interactive technology, join us on this journey to unravel the transformative power and endless possibilities of AI chatbots.
Where U.S., EU and U.K. laws converge and where they diverge.
Emily Jones
CIPP/E, FIP
Partner, Head of U.S. Office
Simmons & Simmons
Chiara Wirz
AIGP, CIPP/E, CIPP/US
General counsel
Get Claude LLC
At first glance, a Matryoshka doll and an artificial intelligence chatbot may seem to have little in common. But the comparison is worth taking seriously. 
Both are built in nested layers with the main difference being that, for a chatbot, those layers don't just sit inside each other; they all apply and are enforceable at once. There are chatbot- and AI-specific laws, privacy and data laws, consumer protection and safety laws — especially for minors — and online platform governance regimes that all continue to evolve and shape the legal landscape.
Specifically in the U.S., a wide array of bills related to AI chatbots and their deployment for different use cases and user interactions — customer support, health services and companion relationships, to name a few — have been enacted at the state level, including in California, Colorado, Connecticut, Georgia, Hawaii, Idaho, Iowa, Maine, Nebraska, New Hampshire, New York, Oregon, Rhode Island, Utah and Washington. 
Similarly, federal bills were introduced in the U.S. Congress. These including the bipartisan Guarding U.S. Authority for Removal and Detention Act, which mandates user accounts, age verification measures and AI disclosures, and prohibits the use of AI companion chatbots by verified minors; the Children’s Health, Advancement, Trust, Boundaries, and Oversight in Technology Act, which imposes family accounts for children and parental consent for teens using AI chatbots; and, most recently, the People-First Chatbot Act, which provides rules to ensure data privacy and security, transparency, safety-by-design and specific disclosures for the use of customer service AI chatbots. 
Each of these illustrates the high priority placed on filling regulatory gaps amid rapid AI development involving AI chatbot products, specifically in response to recent lawsuits involving teens and minors forming inappropriate relationships with AI chatbots.  
Emily Jones
CIPP/E, FIP
Partner, Head of U.S. Office
Simmons & Simmons
Chiara Wirz
AIGP, CIPP/E, CIPP/US
General counsel
Get Claude LLC
From original research reports and daily news coverage to legislative trackers and infographics, we have the information you need to stay ahead of change.
Make valuable professional connections through more than 160 local IAPP KnowledgeNet chapters in 70 countries.
Connect with top thinkers in privacy, AI governance and cybersecurity for fresh ideas and insights.
The IAPP is a policy neutral, not-for-profit association founded in 2000 with a mission to define, promote and improve the professions of privacy, AI governance and digital responsibility globally.
Certification
Training
Membership
Conferences and Events
Community
News and resources
Certification
Training
Membership
Conferences and Events
Community
News and resources
North America headquarters
Portsmouth, NH, US
EMEA headquarters
Brussels, Belgium
ANZ office
Sydney, Australia
© 2026 IAPP. All rights reserved.

source

Scroll to Top