Back to Colorado

HB26-1263 • 2026

Conversational Artificial Intelligence Service Operator Requirements

The act defines a 'conversational artificial intelligence service' as an artificial intelligence system that is accessible to the general public and that primarily simulates human conversation and int

Children Education Healthcare Parental Rights Privacy Technology
Enacted

This bill passed the Legislature and reached final enactment based on the latest official action.

Sponsor
Rep. S. Camacho, Rep. J. Mabrey, Sen. J. Carson, Sen. I. Jodeh, Rep. J. Bacon, Rep. A. Boesenecker, Rep. C. Clifford, Rep. M. Duran, Rep. J. Jackson, Rep. J. Joseph, Rep. S. Lieder, Rep. M. Lindsay, Rep. J. McCluskie, Rep. K. McCormick, Rep. K. Nguyen, Rep. N. Ricks, Rep. M. Rutinel, Rep. E. Sirota, Rep. L. Smith, Rep. R. Stewart, Rep. B. Titone, Sen. N. Hinrichsen, Sen. C. Kipp
Last action
2026-05-29
Official status
Governor Signed
Effective date
Not listed

Plain English Breakdown

The official summary states that content moderation practices inconsistent with the U.S. Constitution are not authorized; this was summarized as a general limit on rights in 'limits_and_unknowns' to maintain readability.

Rules for Public Chat AI Services

This law sets rules and restrictions for companies that run public chat artificial intelligence services, with special protections when minors use them.

What This Bill Does

  • Defines a conversational AI service as an online system open to the public that simulates human conversation through text, images, or sound.
  • Requires operators to estimate user ages using reasonable methods and provide specific disclosures if they know a user is under 18.
  • Prohibits giving points or rewards to minors to encourage them to use these services more often.
  • Mandates technical measures to stop the AI from creating sexual content, intimate images, or messages that simulate emotional dependence for minors.
  • Requires operators to tell users they are talking to an AI and not a licensed professional like a doctor or lawyer.
  • Orders companies to report annually to the Attorney General about how they handle prompts related to suicide or self-harm.

Who It Names or Affects

  • Companies, partnerships, corporations, or individuals that develop or offer public conversational AI services (operators).
  • Users of these services who are minors.
  • Parents and guardians of minor users regarding account settings and privacy tools.
  • The state Attorney General's office which receives annual reports.

Terms To Know

Conversational artificial intelligence service
An AI system available to the public that mainly mimics human conversation using text, visuals, or audio.
Operator
A person or business that creates a conversational AI service and makes it available for people to use.
Account holder
A user who has created an account or profile to access the artificial intelligence service.

Limits and Unknowns

  • The law does not limit a person's right to access information under the state constitution.
  • The law does not force operators to share confidential information with others.
  • The effective date is January 1, 2027.

Amendments

These notes stay tied to the official amendment files and metadata from the legislature.

H.001

Committee of the Whole

Lost

Plain English: This amendment would add a rule that stops conversational AI services from encouraging children to hide information from their parents or other trusted adults.

  • It adds a new requirement labeled (g) on page 6 of the bill.
  • The amendment text does not explain how this rule would be enforced or what penalties exist for breaking it.
  • This specific amendment was voted down and did not pass in committee, so these changes are not part of the final law.
L.001

HOU Business Affairs & Labor

Passed [*]

Plain English: This amendment updates the definition of conversational AI to include systems that recognize human emotions and adds specific exceptions for tools used in business, healthcare, video games, and theme parks.

  • Adds 'adaptive' to the description of how these services work.
  • Updates the definition to cover AI that uses algorithms to detect or respond to human feelings.
  • Creates an exception for programs designed only for shopping, payments, customer service, or other business tasks.
  • Excludes from regulation tools used in healthcare facilities if they follow privacy laws, as well as chat features limited strictly to video games or theme park activities.
  • The provided text only shows the changes made by this amendment and does not include the full original bill language needed to see how these new rules fit into the complete law.
  • Some technical terms like 'HIPAA' are mentioned without a simple explanation of what those privacy requirements specifically involve.
L.002

HOU Business Affairs & Labor

Passed [*]

Plain English: This amendment updates the bill to define new terms like 'emotional recognition algorithm' and changes references from general users to specific account holders who must have their age estimated.

  • Adds a definition for 'Emotional Recognition Algorithm,' which is AI that detects human emotions through text, movement analysis, or physical signals.
  • Adds a formal definition for the federal law known as HIPAA regarding health insurance and data privacy.
  • Changes all references from 'user' to 'account holder' to specify people who have created an account or profile to use the service.
  • Requires operators of these services to use reasonable methods to estimate the age of their account holders.
  • The amendment text does not explain exactly how operators must verify ages, only that they must try to estimate them.
  • Some technical details about how emotional recognition works are listed but do not include specific rules on when it can be used.
L.003

HOU Business Affairs & Labor

Passed [*]

Plain English: This amendment updates the rules for AI chatbots to require clear answers when users ask if they are human, adds audio warnings for voice-only devices, and strengthens safety measures regarding user data and crisis support.

  • AI services must now answer directly when a user asks if the system is human or artificially sentient.
  • Products without screens, like smart speakers, must play an intermittent audio warning instead of just showing text.
  • The law updates definitions to cover how AI structures responses and warns about users becoming isolated from real-world support.
  • Safety protocols now require operators to refer users in crisis to professional help services.
  • The amendment text only shows specific line changes without the full original context, so some details about how these rules fit into the whole bill are unclear.
L.004

HOU Business Affairs & Labor

Passed [*]

Plain English: This amendment tightens the rules for conversational AI services by requiring operators to knowingly and recklessly mislead users, clarifying that only licensed mental health professionals can provide therapy, adding new safety reporting requirements, and protecting underlying model developers from liability unless they also operate the service.

  • Operators must now 'knowingly and recklessly' state false information about their AI being human to face penalties, rather than just implying it.
  • The law specifies that only licensed, certified, or registered mental health professionals can provide therapy through these services.
  • Service operators must report extra data on how well their safety tools work if the Attorney General decides those metrics are needed.
  • Developers of basic AI models cannot be held liable for rule violations by third-party companies using their model, unless the developer also runs the public service themselves.
  • The amendment text does not define exactly what specific 'additional metrics' the Attorney General might require.
  • The full context of Section 32 of Article II and Part 4 of Title 25 is not included, so it is unclear how this affects existing rights to access information.
L.019

SEN Business, Labor, & Technology

Passed [*]

Plain English: This amendment changes the rules for AI chatbots by replacing a requirement to 'maintain' safety with an encouragement, adding exceptions for tools that do not simulate emotional relationships, and redefining who counts as an operator of these services.

  • Changes the rule so companies are encouraged rather than required to maintain certain standards regarding AI interactions.
  • Adds a new exception for software features that do not try to act like an emotional companion or encourage users to become emotionally dependent on them.
  • Updates the definition of 'operator' to include anyone who develops, makes available, or offers these conversational AI services to consumers.
  • The amendment text removes several lines without showing exactly what was deleted, so some specific details about age restrictions and settings are unclear.
  • Because the full context of the removed sections is missing, it is impossible to explain every change made to how these services handle users under thirteen years old.
L.020

SEN Business, Labor, & Technology

Passed [*]

Plain English: This amendment expands who must follow the new AI rules, clarifies that medical facts are not considered sexually explicit content, and changes how operators handle information about minors.

  • The law now applies to companies providing services on behalf of covered entities, such as healthcare providers under federal privacy laws.
  • Sexually explicit conduct no longer includes evidence-based medical information or factual descriptions of reproductive health care.
  • Operators are prohibited from willfully ignoring clear proof that a user is a minor, and estimating a user's age counts as knowing they are underage.
  • The list of restricted content changes by removing 'sexual innuendo' and adding restrictions on AI used for companionship.
  • The amendment text does not define what specific actions constitute 'companionship' or exactly which federal laws apply to covered entities beyond the section numbers listed.
  • Some technical legal phrases like 'willfully disregard clear and convincing information' are kept in their original form because they have no simple everyday equivalent.
L.005

Second Reading

Passed [**]

Plain English: This amendment changes how a 'conversational artificial intelligence service' is defined by adding specific exclusions for voice assistants, healthcare tools, and school educational software.

  • It excludes AI systems that act as voice or text-activated virtual assistants on consumer devices if they cannot generate sexually explicit content or discuss suicidal ideation.
  • It removes the requirement to regulate AI used by doctors, hospitals, or other healthcare providers covered under federal privacy laws.
  • It adds an exemption for narrowly tailored educational tools in schools that are designed only for instruction and do not simulate emotional companionship.
  • The amendment text refers to specific sections of the law (Section 6-1-1708) without explaining exactly what those rules say about sexually explicit content or self-harm.
  • Some parts of the original bill's definition were removed, but this summary only describes the new exclusions added by the amendment.
L.006

Second Reading

Passed [**]

Plain English: This amendment updates the bill to include specific rules for protecting children using conversational AI services by defining who counts as a minor user and requiring operators to use reasonable methods to estimate their age.

  • Defines 'minor user' as someone an operator knows or reasonably believes is under 18 based on commercial or generally accepted age-checking methods.
  • Expands the bill's requirements so they apply not just to account holders, but also directly to minor users.
  • Updates language throughout the text to ensure protections cover both adult account holders and children using the service.
  • Adds a qualified dietitian as an acceptable professional for certain parts of the law.
  • The amendment does not explain exactly what 'commercially reasonable methods' or 'generally accepted methods' are, so it is unclear how operators must prove they checked ages.
  • Some changes refer to specific line numbers and sections that were struck out without showing the full original text, making some context hard to see.
L.007

Second Reading

Passed [**]

Plain English: This amendment updates the bill to include protections for minor users, clarifies that AI content is not human-made, and adds rules ensuring operators do not have to reveal trade secrets or break free speech laws.

  • Adds 'minor users' as a specific group mentioned in the report alongside other stakeholders.
  • Changes language to state clearly that artificial intelligence generates content that is not human.
  • Protects companies from having to share secret business information when asked for data about their AI systems.
  • Ensures the bill does not allow rules that would limit people's right to access information or violate U.S. free speech laws.
  • The amendment text refers to specific page and line numbers from a committee report, so it is unclear exactly what other parts of the original document are being changed without seeing that full context.
  • The exact definition or scope of 'minor users' in this bill cannot be determined solely from this short amendment.
L.008

Second Reading

Passed [**]

Plain English: This amendment tightens rules for AI chatbots by banning them from discussing sex or self-harm, requiring clear labels that they are not human, and increasing penalties for breaking these safety laws.

  • AI services must be limited to specific topics and cannot generate content about sexual acts or encourage thoughts of suicide and self-harm.
  • The definition of an 'operator' is updated to include any partnership, corporation, or entity that controls access to a public AI chat service.
  • Safety requirements for the system only need to meet what is technically possible rather than just reasonable standards.
  • AI services must clearly state they are artificial and not human in every interaction or through a visible notice on the screen.
  • The text refers to specific legal sections (6-1-1708) for details on sexual content that are not included here.
  • The amendment mentions new 'escalation procedures' for crisis situations but does not explain exactly what steps operators must take.
L.011

Second Reading

Lost [**]

Plain English: This amendment adds a new rule that bans conversational artificial intelligence services from using specific behaviors designed to build trust with minors for the purpose of increasing their dependence.

  • Defines 'grooming behavior' as actions like mirroring emotions, encouraging secrecy, or pushing for more intimacy to make a minor dependent on the AI.
  • Prohibits conversational artificial intelligence services from engaging in any form of grooming behavior toward minors.
  • The amendment was marked as 'Lost' during its second reading stage, meaning it did not pass and is not part of the final bill.
  • The text does not explain how these rules would be enforced or what penalties exist for breaking them.
L.013

Second Reading

Lost [**]

Plain English: This amendment would require companies running public chat AI systems to keep records of conversations that break the rules for at least two years and share them with state officials if asked.

  • Operators must save copies of any AI chats flagged as breaking this law's rules.
  • These saved records must be kept for a minimum of two years.
  • The Attorney General can ask to see these records, and the operator must provide them.
  • This amendment was voted down (lost) in the House during its second reading.
  • The text mentions 'privacy protections' but does not explain exactly what those rules are or how they work.
L.015

Second Reading

Lost [**]

Plain English: This amendment would add a new rule requiring operators of conversational AI services to stop their systems from encouraging minors to hide information from parents or trusted adults.

  • Adds a specific prohibition against AI tools that encourage children to withhold information from guardians.
  • The amendment was marked as 'Lost', meaning it did not pass and is not part of the final bill.
  • The text does not define what actions count as 'encouraging' a minor or specify penalties for breaking this rule.
L.016

Second Reading

Lost [**]

Plain English: This amendment would stop companies from using conversations with children to show them targeted ads or make money in other ways.

  • Companies cannot use chat data from users who are minors for targeted advertising.
  • Companies cannot create profiles of minor users based on their AI interactions.
  • Companies cannot sell or monetize the conversation history of children using these services.
  • This amendment was voted down and did not become part of the final bill, so it does not change current law.
  • The text only specifies rules for 'minor users' but does not define exactly what age counts as a minor in this context.
L.017

Second Reading

Lost [**]

Plain English: This amendment requires the Colorado Attorney General to create detailed rules for conversational AI services by January 2027 after consulting with experts and holding public meetings.

  • The Attorney General must write new rules that clearly define terms, set safety standards, explain how companies should tell users they are talking to an AI, and describe methods for checking a user's age.
  • Before writing these rules, the Attorney General must hold a meeting with experts from technology, child development, privacy groups, and both large and small AI companies.
  • The process includes giving the public at least 60 days to write comments on proposed rules and holding at least one open hearing for people to speak.
  • When making final decisions, the Attorney General must consider if the rules are technically possible, how much it costs different sized businesses, limits of current technology, and constitutional rights.
  • This amendment was marked as 'Lost' in the legislative process, meaning these specific requirements were not approved.
  • The exact details for age-checking methods or safety standards are not defined yet because they depend on future rules created by the Attorney General.
L.021

Second Reading

Passed [**]

Plain English: This amendment removes a specific mental state requirement for breaking the law and deletes an entire section of text from the bill.

  • Removes the words 'KNOWINGLY OR RECKLESSLY' on page 9, which changes how intent is required to prove someone broke the rules.
  • Deletes lines 1 through 10 on page 11, removing a whole section of the bill's text.
  • The amendment does not explain what new words replace 'KNOWINGLY OR RECKLESSLY' or if that phrase is simply removed entirely.
  • Because lines on page 11 are deleted without showing replacement text, the specific rules in that section cannot be explained.
L.025

Second Reading

Lost [**]

Plain English: This amendment would remove several proposed rules for AI chatbots and replace them with a statement that current laws already ban the sexual exploitation of minors.

  • Removes specific requirements for suicide prevention protocols, false representation warnings, annual reporting, and existing minor protection standards from the bill.
  • Adds a new section stating that federal and state laws already prohibit the sexual exploitation of minors.
  • Declares that relying on 'technically feasible measures' is not enough to stop harmful conduct against children.
  • Updates legal references in other parts of the text to match these deletions.
  • The amendment was marked as 'Lost', meaning it did not pass and will likely not change the final law.
  • Because this is a list of page numbers, line strikes, and substitutions without the full original text, some specific details about what rules were removed cannot be fully described.
L.027

Second Reading

Passed [**]

Plain English: This amendment expands the bill's rules to include business partners of covered entities and clarifies that certain software tools are not considered conversational AI services.

  • The definition now includes 'business associates' in addition to just 'entities'.
  • Software applications, web interfaces, or computer programs used by these groups will no longer be automatically classified as the conversational artificial intelligence service itself.
  • The amendment text does not define what a 'business associate' is.
  • It is unclear exactly which software tools are excluded from being called an AI service without more context on how they function.
L.032

Second Reading

Passed [**]

Plain English: This amendment adds new rules requiring conversational AI services to stop and prevent interactions involving explicit sexual conduct with minors.

  • It defines 'explicit sexual conduct' and 'intimate digital depiction' using existing state laws.
  • It updates the list of prohibited activities for these AI systems to include producing intimate digital depictions.
  • It requires operators to create a rule that stops their AI from engaging in explicit sexual conversations with minors.
  • The amendment refers to specific sections of other laws (Section 13-21-1502) for definitions, so the exact details depend on those separate rules.
  • The text does not explain how companies must technically build these safety protocols.
L.034

Second Reading

Passed [**]

Plain English: This amendment clarifies that the definition of explicit sexual conduct does not cover medical facts or descriptions about reproductive health care.

  • Adds a new rule stating that evidence-based medical information is not considered explicit sexual conduct.

Bill History

  1. 2026-05-29 Governor

    Governor Signed

  2. 2026-05-28 Governor

    Sent to the Governor

  3. 2026-05-28 Senate

    Signed by the President of the Senate

  4. 2026-05-28 House

    Signed by the Speaker of the House

  5. 2026-05-12 House

    House Considered Senate Amendments - Result was to Concur - Repass

  6. 2026-05-11 Senate

    Senate Third Reading Passed - No Amendments

  7. 2026-05-08 Senate

    Senate Second Reading Special Order - Passed with Amendments - Committee, Floor

  8. 2026-05-05 Senate

    Senate Committee on Business, Labor, & Technology Refer Amended to Senate Committee of the Whole

  9. 2026-05-04 Senate

    Introduced In Senate - Assigned to Business, Labor, & Technology

  10. 2026-04-21 House

    House Third Reading Passed - No Amendments

  11. 2026-04-20 House

    House Second Reading Special Order - Passed with Amendments - Committee, Floor

  12. 2026-03-31 House

    House Second Reading Laid Over Daily - No Amendments

  13. 2026-03-26 House

    House Committee on Business Affairs & Labor Refer Amended to House Committee of the Whole

  14. 2026-02-19 House

    Introduced In House - Assigned to Business Affairs & Labor

Official Summary Text

The act defines a 'conversational artificial intelligence service' as an artificial intelligence system that is accessible to the general public and that primarily simulates human conversation and interaction through adaptive textual, visual, or aural communications.
Effective January 1, 2027, the act creates requirements and prohibitions for a person, partnership, corporation, or entity that develops and makes publicly available a conversational artificial intelligence service or offers a conversational artificial intelligence service to a consumer (operator).
An operator is required to use commercially reasonable methods or generally accepted methods to estimate the age of a consumer who has or opens an account or profile to use a conversational artificial intelligence service (account holder) and the age of other users of a conversational artificial intelligence service. If an operator knows that an account holder or user is a minor, an operator is:
Required to provide certain disclosures;
Prohibited from providing the minor account holder or minor user with points or rewards to encourage engagement with the conversational artificial intelligence service;
Required to institute technically feasible measures to prevent the conversational artificial intelligence service from producing explicit sexual conduct, intimate digital depictions, or statements that simulate emotional dependence;
Required to implement a protocol for a conversational artificial intelligence service to stop engaging in response to a user prompt regarding sexual conduct with a minor; and
Required to provide tools for the minor account holder or minor user or a parent or guardian of the minor account holder or minor user to manage the minor account holder's or minor user's privacy and account settings.
The act also requires an operator to provide a disclosure to a user that a conversational artificial intelligence service is artificial intelligence, implement a protocol for user prompts regarding suicidal ideation or self-harm, and annually report to the attorney general's office information regarding the protocol the operator is implementing. The act prohibits an operator from stating that any output data provided by a conversational artificial intelligence service is provided by, endorsed by, or equivalent to services provided by certain licensed or certified professionals.
The act clarifies that nothing in the act limits an individual's ability to access certain information and resources pursuant to the state constitution, requires an operator to disclose confidential information, or authorizes content moderation practices inconsistent with the United States constitution.
(Note: This summary applies to this bill as enacted.)