Arizona Children’s Privacy Laws (2026)

HB 2311 (2026, 57th Leg., 2nd Reg. Sess.)

Vetoed · AI companion · binds operators

Ages: Operator has actual knowledge or reasonable certainty the individual is under 18; parent or guardian tools for under 13

AI chatbot access for minors: Safeguards only (vetoed, never became law).

Requires: Would have required conversational AI services to disclose non-human status to every account holder through a persistent disclaimer or at session start plus every three hours of continuous interaction, with reasonable measures against sexual content for all account holders, minor-specific bans on unpredictable engagement rewards and human-impersonation outputs, parental tools for children under 13, and a suicide and self-harm referral protocol. It paired those duties with strict age-assurance privacy limits, including a ban on mandatory digital ID, warrant-only government access to age data, and annual destruction certification. Enforcement would have been Attorney General only, capped at the greater of actual damages or $1,000 per violation up to $500,000 per operator, with no private right of action, a developer shield, and a clause barring the AG from expanding the requirements by rule or settlement. Would have taken effect from and after September 30, 2027, that is on 2027-10-01.

Litigation: None; vetoed before effect. Passed the House 2026-02-24 (43-13) and the Senate as amended 2026-06-11 (28-0, after reconsideration of a 28-1 passage two days earlier); the House concurred and gave final passage 2026-06-12 (35-20). Governor Hobbs vetoed it 2026-06-19, writing that she would not protect big technology companies and AI chatbots more than children, and that the bill limits damages to families, prohibits families from bringing their own lawsuits, and ties the state's hands in bringing actions.

Entry last reviewed 2026-10-01