The Crossing Report — April 2, 2026

State AI Chatbot Laws 2026: Washington January 1, 2027 + Oregon January 1, 2027 — What Professional Services Firms Must Do

Published April 2, 2026 · By The Crossing Report · 8 min read

Share on LinkedInShare on X

Summary

Washington HB 2225 and Oregon SB 1546 both take effect January 1, 2027 — but they are AI companion chatbot laws, not general AI disclosure laws. Both are modeled on regulations targeting Replika and Character.AI-type platforms. Both laws explicitly exclude standard customer service and business operations chatbots — which means most professional services intake bots, scheduling assistants, and FAQ tools are likely not covered. Your firm may be covered if your AI assistant retains client memory across sessions, sustains ongoing personal dialogue, and generates emotionally engaging responses. Oregon additionally creates a private right of action — $1,000 per violation, no cap — for systems that are covered.

Two AI Companion Chatbot Laws, Two January 2027 Deadlines

In the span of one week in March 2026, two state legislatures enacted AI companion chatbot laws — regulations targeting Replika and Character.AI-type platforms. Both laws include explicit carve-outs for business operations chatbots. Most standard professional services intake bots, scheduling assistants, and FAQ tools fall under those carve-outs and are likely not covered. Here is what both laws say and how to determine whether your firm's AI tools are in scope.

Washington HB 2225 — Signed March 24, 2026

  • •Effective date: January 1, 2027
  • •Requirement: Disclose AI status at start of every chatbot interaction; for minor users, repeat at least once per hour
  • •Enforcement: Washington Attorney General only — no private right of action
  • •Who it covers: AI companion chatbots — systems that sustain relationships across multiple sessions, retain user memory, and generate emotionally engaging outputs (think Replika, Character.AI). Standard intake bots, scheduling assistants, and one-session customer service tools are explicitly excluded.

Important: This is a companion chatbot law, not a general chatbot disclosure law

The bill defines a covered “AI companion chatbot” as one that exhibits anthropomorphic features, retains memory across sessions, and sustains ongoing personal dialogue. Customer service and business operations chatbots are excluded provided they don't sustain relationships across sessions or generate emotionally engaging outputs. If your firm's intake bot resets each session and handles scheduling, you are likely not covered.

Oregon SB 1546 — Signed March 31, 2026

  • •Effective date: January 1, 2027
  • •Requirement: Disclose AI status whenever a reasonable person could mistake the chatbot for a human; plus crisis referral protocols for self-harm/suicidal ideation
  • •Enforcement: Private right of action — $1,000 per violation, no stated cap, plus Oregon AG enforcement
  • •Who it covers: AI companions that simulate sustained personal relationships — systems that retain session memory, ask unprompted personal questions, and sustain ongoing personal dialogue. Customer service, patient care, education, financial services, and business operations chatbots are explicitly excluded.
  • •Why it matters:First US chatbot law individuals can enforce directly — but it applies to companion AI platforms, not general intake tools. If your firm's AI crosses into relationship-sustaining territory, the exposure is severe.

Key Takeaway

What is Washington HB 2225 and does it apply to my firm?

Washington HB 2225 is an AI companion chatbot law — it targets Replika and Character.AI-type platforms, not standard professional services intake bots. The law excludes customer service and business operations chatbots that don't sustain relationships across sessions. Most scheduling assistants, intake forms, and FAQ bots used by law, accounting, and consulting firms are likely not covered. Effective January 1, 2027, AG enforcement only.

Oregon's Private Right of Action: Why $1,000/Violation Changes the Risk Calculus

Most AI compliance laws to date have used government enforcement only — a state AG can investigate and fine, but individual users cannot sue. Oregon SB 1546 breaks that pattern. However, this private right of action applies only to covered AI companion chatbots — not to standard professional services intake bots. Oregon SB 1546 is an AI companion law that explicitly excludes customer service, financial services, and business operations chatbots. Standard intake bots and scheduling assistants used by law, accounting, and consulting firms are likely not covered.

For professional services firms that deploy AI assistants that do retain client memory across sessions and generate relationship-like interactions — and are thus covered — the exposure is significant. Any user of a non-compliant covered system can file directly for $1,000 in statutory damages per violation, with no stated cap:

  • •Each interaction without proper disclosure is a separate violation
  • •A chatbot fielding 500 interactions per month before compliance generates $500,000 in potential exposure — per month
  • •Class action risk is real: plaintiff attorneys can aggregate claims from multiple users

Key Takeaway

What is the $1,000 per violation exposure under Oregon SB 1546?

Oregon SB 1546 creates a private right of action — users can sue directly, without waiting for the state to act. $1,000 per violation, no cap. Each non-compliant chatbot interaction is a separate violation. For firms with active AI intake tools, the exposure compounds quickly. Washington HB 2225 uses AG enforcement only.

Georgia SB 540: The Pending Law With the Most Frequent Disclosure Requirement

GeorgiaPending — Governor Kemp deadline: May 12, 2026

Georgia SB 540 passed both chambers of the Georgia legislature in April 2026 and now sits on Governor Brian Kemp's desk. The signing deadline is May 12, 2026.

What Georgia SB 540 Requires

  • •Disclosure at conversation start: AI chatbots must disclose their non-human nature at the beginning of every interaction
  • •Disclosure every 3 hours: For extended conversations, disclosure must repeat every three hours — the most frequent re-disclosure requirement of any US state chatbot law enacted to date
  • •Disclosure every hour for minors: Interactions with users under 18 require re-disclosure at least once per hour
  • •Who it covers: Professional services firms using client-facing AI tools — intake bots, scheduling assistants, FAQ chatbots — that serve Georgia clients

Why Audit Now — Before the Signature

Don't wait for Kemp's signature to start your audit. Georgia SB 540's 3-hour re-disclosure requirement is stricter than both Washington and Oregon. If your firm uses multi-turn AI chatbots for client intake, document review, or Q&A sessions, your current disclosure setup almost certainly does not meet Georgia's standard. Firms that audit now can make one set of changes that satisfies all three states simultaneously.

Full analysis: Georgia SB 540 — What Professional Services Firms Must Do Before May 12

What Compliant Disclosure Language Looks Like

For AI tools that are covered under these laws (relationship-sustaining AI companion systems), both Washington and Oregon require clear, conspicuous disclosure that the user is interacting with an AI — not a human — at the start of the interaction. Standard one-session intake bots and scheduling assistants are excluded from these requirements under both laws' business operations carve-outs.

Compliant disclosure example:

“You are chatting with an AI assistant. This conversation is automated and not a human attorney [or accountant / consultant / advisor]. For questions about your matter, please call our office.”

Additional Washington HB 2225 requirements:

  • •For interactions involving minor users: repeat the disclosure at least once per hour during an active conversation
  • •Prohibits “manipulative” chatbot behavior — AI that simulates human emotional responses to encourage continued engagement
  • •Crisis referral protocols required for interactions involving signs of distress or self-harm

Additional Oregon SB 1546 requirements:

  • •Ongoing disclosure required whenever a reasonable person could mistake the AI for a human — not just at the start
  • •Crisis referral protocols (mental health/suicide hotline information) must be embedded in any AI assistant

Key Takeaway

What disclosure language is required for compliant AI chatbots?

Both laws require a clear, upfront statement that the user is interacting with AI — not a human. Washington additionally requires hourly re-disclosure for minor users and prohibits manipulative chatbot behavior. Oregon requires ongoing disclosure whenever confusion is possible, plus crisis referral protocols.

The Fastest Path to Compliance Before January 1, 2027

Both WA HB 2225 and Oregon SB 1546 are AI companion chatbot laws — they target relationship-sustaining AI platforms, not standard intake bots. Before doing anything else, confirm whether your firm's AI tools are actually covered. If your tools reset each session and handle routine scheduling or intake, you are likely not covered by either law. If your AI tools retain client memory, sustain ongoing personal dialogue, and generate emotionally engaging outputs — you should act before January 1, 2027.

Step 1: Determine whether your AI tools are covered (30 minutes)

Review each AI tool your firm uses that interacts with clients. Ask: Does it remember clients across separate sessions? Does it ask personal questions outside the immediate task? Does it generate emotionally engaging or relationship-building responses? If yes to any of these, the tool may be covered. Standard intake bots, scheduling assistants, and FAQ tools that reset each session are likely excluded from both laws.

Step 2: For covered tools — add AI disclosure to the first message (1–2 hours)

For any AI tool confirmed to be covered (relationship-sustaining, memory-retaining), update the opening message to include explicit AI disclosure. For platforms you control, this is a configuration change. For third-party platforms, confirm with your vendor that they are updating their disclosure defaults before January 1, 2027.

Step 3: Add crisis referral protocols (for Oregon; confirm for Washington)

Both laws require protocols for interactions involving signs of suicidal or self-harm ideation. At minimum, embed a response trigger: if a user's message contains crisis-related language, the chatbot must provide mental health/crisis hotline information (988 Suicide and Crisis Lifeline) before continuing.

Step 4: Update your engagement letters and privacy policy

Note the use of AI tools in client communications. This is already required under ABA Formal Opinion 512 for law firms. Add a plain-language paragraph addressing which AI tools you use, how client data is handled, and how to reach a human when needed.

Key Takeaway

What is the fastest path to compliance before January 1, 2027?

Audit every client-facing AI tool. Add AI disclosure to the first message in each interaction. Confirm your chatbot vendor is updating its defaults before January 1, 2027. For Oregon's January 1, 2027 deadline, additionally embed crisis referral protocols and review your vendor's compliance roadmap.

FAQ — State AI Chatbot Laws for Professional Services

What is Washington HB 2225 and does it apply to my firm?

Washington HB 2225, signed March 24, 2026, is an AI companion chatbot law — it regulates Replika and Character.AI-type platforms, not general professional services intake tools. The law defines a covered chatbot as one that sustains relationships across sessions, retains user memory, and generates outputs likely to elicit emotional responses. Critically, the law explicitly excludes chatbots used for customer service and business operations, provided the bot does not sustain a relationship across multiple interactions or generate emotionally engaging outputs. Most professional services intake bots, scheduling assistants, and FAQ tools are likely not covered. Your firm may be covered if your AI assistant remembers clients across sessions, builds rapport, and sustains relationship-like dialogue. Effective January 1, 2027. Enforcement is by the Washington Attorney General.

What does Oregon SB 1546 require and when does it take effect?

Oregon SB 1546, signed March 31, 2026, is an AI companion chatbot law — similar in scope to Washington HB 2225. It regulates AI systems that simulate sustained personal relationships: retaining user memory across sessions, asking unprompted personal questions, and sustaining ongoing personal dialogue. The law explicitly excludes customer service, financial services, education, healthcare, and business operations chatbots. Standard professional services intake bots are likely not covered. Oregon also requires crisis referral protocols (988 Lifeline references) for covered systems that encounter signs of suicidal or self-harm ideation. Oregon is the first US state to create a private right of action for AI chatbot violations — $1,000 per violation, no cap — but that enforcement applies only to covered companion AI systems. Effective January 1, 2027.

What is the $1,000 per violation exposure under Oregon SB 1546?

Oregon SB 1546 creates a private right of action — meaning individual users (not just the state) can sue your firm directly if your AI chatbot fails to comply. The statute sets damages at $1,000 per violation with no stated cap. For a firm with a non-compliant client intake chatbot fielding hundreds of interactions, this exposure compounds rapidly. Washington HB 2225 uses AG enforcement only, without a private right of action.

What disclosure language is required for compliant AI chatbots?

Both Washington HB 2225 and Oregon SB 1546 require that users be clearly informed they are interacting with an AI — not a human — at the start of the interaction. A compliant disclosure: “You are chatting with an AI assistant. This conversation is automated. For questions about your matter, please call our office.” Washington also requires repeated disclosure for minor users (at least once per hour during active interactions). Oregon requires ongoing disclosure whenever a reasonable person could be confused.

What is the fastest path to compliance before January 1, 2027?

First, determine whether your firm's AI tools are actually covered. Both WA HB 2225 and Oregon SB 1546 are AI companion chatbot laws — standard intake bots, scheduling assistants, and FAQ tools that reset each session are likely excluded. If your AI tools do retain client memory, sustain personal dialogue, and generate emotionally engaging responses, then: (1) add a clear AI disclosure to the first message; (2) for Washington — add hourly re-disclosure for minor users; (3) for Oregon — embed crisis referral protocols (988 Lifeline) for interactions involving signs of distress. Confirm your vendor's compliance plan before January 1, 2027.

What does Georgia SB 540 require for AI chatbots?

Georgia SB 540 passed both chambers in April 2026 and sits on Governor Kemp's desk until May 12, 2026. If signed, it requires AI chatbots to disclose their non-human nature at the start of every conversation AND every three hours for extended interactions — the most frequent disclosure requirement of any US state chatbot law so far. It applies to professional services firms using client-facing AI tools (intake bots, scheduling assistants, FAQ chatbots) that serve Georgia clients.

This is the kind of intelligence premium subscribers get every week.

Deep analysis, cross-sector patterns, and the frameworks that help professional services firms make the crossing.

Subscribe freeGo premium — $190/yr (save 17%)$19/mo

Related Reading

Get state-by-state AI chatbot law updates — and what they mean for your firm — in The Crossing Report — free.

Every week: the one AI development that matters most to professional services firm owners — pricing shifts, competitive threats, new tools — with specific next steps for your kind of firm.