Bill
Bill > A5607
summary
Introduced
10/05/2026
10/05/2026
In Committee
10/19/2026
10/19/2026
Crossed Over
Passed
Dead
Introduced Session
2026-2027 Regular Session
Bill Summary
This bill establishes content and data privacy requirements for chatbot providers. Under the bill, chatbot providers are prohibited from: (1) processing personal data other than input data to inform chatbot outputs unless the processing of personal data is necessary to fulfill an express request made by a user and that user has provided affirmative consent; (2) processing a user's chat log under certain circumstances regarding advertisements; (3) processing a user's chat log or personal data under certain circumstances; (4) using any classification or designation of a user's personality or behavioral characteristics created through profiling beyond what is necessary to fulfill an express request made by a user; (5) selling a user's chat log; (6) retaining a user's chat log for longer than two years unless required by law; (7) discriminating or retaliating against any user for refusing to consent to the use of a chat log or personal data for training purposes or for accessing their own chat log; or (8) advertising or representing to the public that the output data is being provided by, endorsed by, or equivalent to those provided by certain professions or occupations or by the Judicial Branch of State government or the Administrative Office of the Courts. Additionally, a chatbot provider is required to: (1) make certain information about its chatbot available on the chatbot provider's Internet website; (2) retain in a portable and readily-usable format and make available for a user to access and download at any time any of the user's chat logs; (3) develop, implement, and maintain a comprehensive data security program that contains administrative, technical, and physical safeguards that are proportionate to the volume and nature of the personal data and chat logs maintained by the chatbot provider; (4) assess the chatbot for risks of harm to users on a monthly basis; and (5) mitigate any risks of harm pursuant to the rules promulgated by the Attorney General under the bill. Under the bill, a chatbot is considered a product for the purposes of a product liability action, and a chatbot provider has a duty to ensure that the use of its chatbot does not cause injury to a user. A chatbot provider that violates the bill's provisions is to be liable for a civil penalty in the amount of $5,000 for each violation, and the Attorney General may bring a civil action for injunctive relief against the chatbot provider. The bill also permits a user who has been harmed by a violation of certain provisions of the bill to bring an action in the Superior Court against a chatbot provider. If the suit is successful, an individual would be entitled to: (1) the greater of actual damages or $5,000 for each violation; and (2) reasonable attorney fees and court costs.
AI Summary
This bill establishes comprehensive data privacy, safety, and content requirements for providers of artificial intelligence chatbots, which are software applications that simulate human conversation. Under the legislation, chatbot providers are strictly limited in how they process personal data and user chat logs—meaning the records of user inputs and chatbot outputs—prohibiting them from using chat logs for targeted advertising, selling chat logs, or profiling users beyond what is strictly necessary to fulfill a direct request. The bill introduces strict age-based protections, requiring parental consent to process data for children under 13 and prohibiting the use of chat logs to train AI models for minors under 18 or adults without explicit, affirmative consent. Furthermore, providers must allow users to access and download their chat logs, delete chat logs after two years, maintain a robust data security program, and conduct monthly risk-of-harm assessments. To protect consumers from deception, providers are barred from falsely implying that a chatbot's outputs are endorsed by or equivalent to regulated professions (such as legal or medical fields) or the state's judicial branch. The bill uniquely classifies chatbots as products for the purposes of product liability, holding providers strictly liable for any user injuries caused by their chatbot regardless of negligence or the absence of a direct contract. Finally, the legislation empowers the state Attorney General to enforce violations with civil penalties of $5,000 per violation and seek injunctions, while also allowing harmed users to sue providers directly in court to recover the greater of actual damages or $5,000 per violation, along with attorney fees and court costs.
Committee Categories
Budget and Finance, Military Affairs and Security
Sponsors (3)
Last Action
Assembly Appropriations Hearing (12:00:00 10/22/2026 Committee Room 11, 4th Floor, State House Annex, Trenton, NJ) (on 10/22/2026)
Bill Topics
Banking, Finance, and Domestic Commerce
- ‐ Consumer Safety and Consumer Fraud
Civil Rights, Minority Issues, and Civil Liberties
- ‐ Right to Privacy and Access to Government Information
Space, Science, Technology, and Communications
- ‐ Internet and Computer Issues
Official Document
bill text
bill summary
Loading...
bill summary
Loading...
bill summary
| Document Type | Source Location | Created |
|---|---|---|
| State Bill Page | https://www.njleg.state.nj.us/bill-search/2026/A5607 | 10/06/2026 |
| Analysis - Statement APS 10/19/26 | https://pub.njleg.gov/Bills/2026/A6000/5607_S1.PDF | 10/20/2026 |
| BillText | https://pub.njleg.gov/Bills/2026/A6000/5607_I1.HTM | 10/06/2026 |
Loading...