Starting July 1, 2027, Idaho law requires covered public AI chat services to give users safety notices and crisis referrals, with added rules for minors.
Operators must disclose AI use when people could mistake a service for a human and adopt a plan to refer users who raise suicidal thoughts to crisis services.
Operators must give minors AI notices, take reasonable steps to prevent specified sexual or human-like responses, and offer account controls to minors and, as appropriate, their parents.
The attorney general may seek court orders and penalties from operators that break these rules; the law also limits private lawsuits and excludes certain AI model developers from liability.
Operators must disclose that a service uses AI when people could mistake it for a human, and adopt a plan for responding to prompts about suicidal thoughts. These duties apply to operators of public conversational AI services covered by the law's definitions. The law excludes several types of tools, including business-only services, narrow-topic tools, and some game chatbots. The AI notice is required when reasonable people could be misled into thinking they are interacting with a human. The response plan must make reasonable efforts to refer users to a suicide hotline, crisis text line, or other appropriate crisis service. These duties take effect July 1, 2027.
Operators must give minor account holders AI notices, use reasonable measures to prevent specified sexual and human-like responses, and offer privacy and account controls. A minor is someone under 18 when the operator knows or has reasonable certainty that the person is under 18. The notice may stay visible throughout use, or appear at the start of each session and at least every three hours during continuous use. Operators must not knowingly give minors unpredictable rewards intended to increase their use of the service. Parents or guardians of children under 13 must have privacy and account tools; tools for parents or guardians of older minors depend on relevant risks. These duties take effect July 1, 2027.
The attorney general may seek an injunction and civil penalties against operators that violate the law. The attorney general seeks civil penalties from operators that violate the law. The penalty is $1,000 per violation, capped at $500,000 per operator, or actual damages, whichever is greater. The law does not create a private right to sue to enforce these rules or support a private lawsuit under another law. It also excludes an AI model developer from liability for a violation by a third-party operator. These provisions take effect July 1, 2027.
No hearings or votes scheduled.