PA Passes AI Chatbot Protections for Kids — Business Impact

Pennsylvania just passed the most detailed AI chatbot safety bill in the country

The Pennsylvania Senate voted 49-1 to pass the SAFECHAT Act (Senate Bill 1090), a sweeping set of requirements for any AI chatbot that interacts with minors. The bill now moves to the state House, where Gov. Josh Shapiro has already signaled support for AI chatbot regulation.

If you run a business in Pennsylvania — or neighboring West Virginia, Virginia, or Ohio — and your website includes any kind of AI chat, intake form, or automated assistant, this bill sets the template that your state will likely follow.

What the SAFECHAT Act requires

The SAFECHAT Act targets “companion chatbots” specifically, but its requirements have implications for any AI-powered conversation tool. Here are the key provisions:

• AI disclosure: Chatbots must clearly notify users that they are interacting with AI, not a human. This applies whenever a reasonable person might believe the chatbot is human.
• Break reminders: AI chatbots must remind young users at least once every three hours that the chatbot is not human and suggest taking a break.
• Self-harm protocols: Chatbots must detect high-risk language and direct users to appropriate crisis resources. They cannot generate content that encourages self-harm, suicide, or violence.
• Explicit content ban: AI chatbots are prohibited from engaging in sexually explicit conduct or generating sexually explicit images in conversations with minors.
• Enforcement: The state attorney general can fine tech companies $10,000 per violation.

The bill was sponsored by state Sens. Tracy Pennycuick and Nick Miller after a 16-year-old Florida boy died by suicide following interactions with a companion chatbot.

The growing patchwork of state AI chatbot regulations

Pennsylvania is not acting alone. California’s SB 243 took effect January 1, 2026. Oregon passed SB 1546 with a 26-1 Senate vote. Washington gave final passage to HB 2225 just last week. New York has 11 AI chatbot bills advancing through committee.

The trend is clear: over 35 states have introduced AI chatbot legislation targeting minors. The common threads across these bills include:

• Disclosure requirements — telling users they are talking to AI
• Age-specific safeguards — stricter rules when minors are involved
• Crisis intervention protocols — detecting and responding to self-harm language
• Private rights of action — allowing individuals to sue, with statutory damages up to $1,000 per violation in California and Oregon

We covered the broader landscape in our roundup of 78 state chatbot bills and the federal KIDS Act. Pennsylvania’s SAFECHAT Act is significant because it passed with near-unanimous bipartisan support — 49-1 — signaling that chatbot regulation is no longer a partisan issue.

How AI chatbot regulations affect small businesses

You might think these laws only target Character.AI and Replika. They don’t. Most chatbot bills define covered entities broadly. If your business website has a chat widget, an AI-powered intake form, or an automated customer service assistant, you could fall under these rules depending on how your state defines the scope.

Here is what matters for small business owners:

If you use Hollr or a similar AI intake tool: Most business chatbots already disclose their AI nature, but check that your disclosure is prominent and appears before the conversation starts — not buried in a terms page.

If you built a custom chatbot: Review whether it could be accessed by minors. If your tool is publicly available on your website without age gating, most of these laws would apply. The easiest compliance step is clear, upfront AI disclosure.

If you operate in multiple states: You will need to comply with the strictest applicable law. Right now, that is California’s SB 243, but Pennsylvania’s SAFECHAT Act and New York’s pending bills could raise the bar further.

If you use a third-party chatbot platform: Check with your vendor about compliance features. Most reputable platforms are already adding disclosure banners and break reminders in response to California’s law.

Steps to keep your AI tools compliant

You do not need to panic, but you should not ignore this either. Here is a practical checklist:

1. Audit your AI touchpoints. List every place on your website or app where a customer interacts with AI — chat widgets, intake forms, automated email responders, voice assistants.
2. Add clear AI disclosure. Make sure every AI interaction begins with a statement that the user is communicating with an AI assistant, not a human. This is the single most common requirement across all state bills.
3. Review content filters. If your chatbot could be accessed by minors, ensure it cannot generate or facilitate harmful content. Most AI providers include content safety filters — make sure they are enabled.
4. Document your compliance. Keep records of what safeguards you have in place. If a state attorney general or regulator comes knocking, documentation is your first line of defense.
5. Watch your state legislature. If you are in West Virginia, Virginia, or Kentucky, expect similar bills in 2026 or 2027.

What to watch next

The SAFECHAT Act still needs to pass the Pennsylvania House, but with a 49-1 Senate vote and the governor’s stated support, it is likely to become law. The bigger question is whether Congress will pass the KIDS Act and preempt some of this state-by-state patchwork — or whether the 36 state attorneys general opposing federal preemption will prevail.

For now, the safest bet is compliance with the strictest standard you might face. The core requirements — disclosure, content safety, crisis protocols — are not onerous. They are good practice regardless of what the law says.

If you need help ensuring your AI tools meet these standards, talk to our consulting team. We work with businesses across Appalachia to implement AI responsibly.