People-First Chatbot Act

The People-First Chatbot Act imposes strict privacy and safety regulations on companies that create or distribute AI chatbots, requiring them to obtain explicit user consent before using personal data for training or advertising purposes. The bill mandates that providers clearly disclose when users are interacting with an AI rather than a human, prohibit the sale of chat logs, and limit data retention to five years unless required by law. Additionally, companies must conduct monthly risk assessments for potential harms such as emotional dependence or compulsive usage, with specific safeguards required to protect minors from features that could cause significant injury. Enforcement is handled by the Federal Trade Commission, while state attorneys general and private individuals are granted the right to file lawsuits against providers who violate these provisions.