IA, US · AI law tracker
HSB 647 — IA, US
HSB 647 is an AI governance legislation from IA, currently introduced. The bill introduces new obligations for chatbot deployers regarding user safety, data collection, and minor access [1], [3]. AIGI tracks 1 primary-source update on this bill; the most recent was published on 2026-01-29.
Status & timeline
- Regulatory stage
- introduced
- Bill status
- introduced
- Authority / governing body
- Iowa Legislature
- Chamber
- house
- Document type
- legislation
Next deadline: No fixed deadline — current bill proposes obligations.
Subscriber only
Full obligation matrix
| Actor | Obligation | Deadline | Source |
|---|---|---|---|
| deployer | Implement and maintain protocols to detect, respond to, report, and mitigate harm the chatbot may cause a user in a manner that prioritizes the safety and well-being of users over the deployer’s interests. | — | — |
| deployer | Limit the collection and storage of user information collected by the chatbot to what is necessary to fulfill the deployer’s purpose for making the chatbot publicly available. | — | — |
| deployer | Implement reasonable age verification measures to ensure that a minor cannot use or purchase a chatbot the deployer makes publicly available. | — | — |
| deployer | Ensure the chatbot was designed for the primary purpose of providing mental health support, counseling, or therapy by diagnosing, treating, mitigating, or preventing a mental health condition, if making it available for a minor's use. | — | — |
| deployer | Provide a clear and conspicuous disclaimer at the beginning of each interaction with the chatbot that the chatbot is an artificial intelligence and is not a licensed professional, if making a mental health chatbot available for a minor's use. | — | — |
| deployer | Ensure the chatbot was recommended for the minor’s use by an individual licensed under chapter 154B or 154D after performing an evaluation of the minor, if making a mental health chatbot available for a minor's use. | — | — |
| deployer | Ensure the chatbot’s developer has significant documentation of how the chatbot was tested, if making a mental health chatbot available for a minor's use. | — | — |
| deployer | Ensure peer-reviewed clinical trial data exists demonstrating the chatbot would be a safe, effective tool for the minor’s diagnosis, treatment, mitigation, or prevention of a mental health condition, if making a mental health chatbot available for a minor's use. | — | — |
| deployer | Provide clear disclosures of the chatbot’s functions, limitations, and data privacy policies to the individual recommending the chatbot and to the minor’s parents, guardians, or custodians, if making a mental health chatbot available for a minor's use. | — | — |
| deployer | Develop and implement protocols for testing the chatbot for risks to users, identifying possible risks, mitigating risks, and quickly rectifying harm, if making a mental health chatbot available for a minor's use. | — | — |
Subscriber only
Enforcement risk score
25
/ 100
Announced regulation; enforcement footprint still forming.
Subscriber only
Role-based compliance checklist
- compliance_officer Review existing chatbot deployments for compliance with proposed harm mitigation and data collection limits.
- engineering Develop and implement protocols for detecting, responding to, reporting, and mitigating chatbot-induced harm, prioritizing user safety.
- privacy_officer Update data privacy policies and implement mechanisms to limit user data collection and storage by chatbots to necessary purposes.
- product_manager Implement robust reasonable age verification measures for all public-facing chatbots to prevent minor access.
- general_counsel Evaluate if mental health chatbots intended for minors meet all strict design, disclaimer, professional recommendation, testing, clinical data, and disclosure requirements.
- board_director Oversee the organization's preparation for potential enforcement actions from the Attorney General or civil penalties from parents if violations occur.
Subscriber only
Vendor impact assessment
- Vendor risk class
- high
- Procurement categories
- customer_service_ai, healthcare_ai, productivity_assistants, other
Vendors providing chatbots for public use, especially those potentially accessible by minors or offering mental health support, will need to demonstrate sophisticated harm mitigation, data minimization, and age verification capabilities to comply with these proposed regulations. Significant documentation and clinical evidence will be required for mental health applications.
Sample vendor questions
- What protocols do you have in place to detect, respond to, report, and mitigate harm caused by your chatbot, prioritizing user safety?
- How do you ensure user information collected by your chatbot is limited to what is strictly necessary for its intended purpose?
- What age verification measures are implemented to prevent minors from using or purchasing your chatbot, and how robust are they?
- If your chatbot is intended for mental health support for minors, can you provide documentation of testing, peer-reviewed clinical data, and proof of professional recommendation mechanisms?
- What are your data privacy policies and disclosure practices for chatbots, especially concerning interactions with minors?
Intelligence briefs (1)
legislation introduced 1/29/2026
Iowa HSB 647 Proposes Chatbot Deployer Obligations and Minor Protections
The bill introduces new obligations for chatbot deployers regarding user safety, data collection, and minor access [1], [3].
This legislation signals an emerging state-level focus on specific AI applications and user protection, particularly for vulnerable populations and healthcare AI.
Deadline: No fixed deadline — current bill proposes obligations.
Primary source →Frequently asked questions
- What is HSB 647?
- Iowa House Study Bill 647 (HSB 647) introduces proposed requirements for chatbot deployers, focusing on harm mitigation protocols and user information limitations [1], [2]. The bill mandates reasonable age verification to prevent minor usage or purchase of chatbots [3]. Specific conditions are outlined for mental health support chatbots made available to minors, including clinical data requirements and disclosures. Enforcement mechanisms, including civil penalties and a private right of action for parents, are also established. Primary source →
- Why does HSB 647 matter?
- This legislation signals an emerging state-level focus on specific AI applications and user protection, particularly for vulnerable populations and healthcare AI. Primary source →
- Who does HSB 647 affect?
- This bill impacts deployers of publicly available chatbots, particularly those operating in Iowa or offering services to Iowa residents. Organizations developing or deploying chatbots for mental health support are specifically addressed, requiring stringent documentation, clinical validation, and parental disclosures if made available to minors. The scope includes any entity that 'owns an artificial intelligence available for public use' where that AI 'interacts with users by simulating human conversation'. Primary source →
- What are the key dates for HSB 647?
- No fixed deadline — current bill proposes obligations. Primary source →
- What is the current status of HSB 647?
- As of the last published update, HSB 647 is at the "introduced" stage, with bill status "introduced". Primary source →
- Where can I find the primary source for HSB 647?
- The primary source for the most recent update is at https://www.legis.iowa.gov/publications/search/document?fq=id:1596720&q=artificial+intelligence. AIGI publishes the full citation chain plus every approved brief on this bill. Primary source →
Related
Stay informed