New York passes safety laws for AI chatbots and baby monitors

New safety standards for nurseries

Governor Kathy Hochul recently signed two new bills designed to address digital safety risks for children in New York. These laws specifically target two types of technology that are increasingly common in modern homes: internet-connected baby monitors and artificial intelligence chatbots. The goal is to protect kids in nurseries and playrooms from unauthorized access and harmful interactions.

One of the primary concerns addressed by the legislation involves the privacy of children in their own homes. As more parents turn to internet-connected devices to keep an eye on their infants, the risk of strangers hacking into these feeds has become a significant safety issue. The new law, S.9508/A.5175A, aims to close these vulnerabilities by mandating specific hardware and software protections.

As WKTV reported, the law requires that any baby monitor sold within the state must have security features that block outsiders from watching or listening in. Additionally, these products must carry a clear warning label to inform consumers about the risks. This legislation is set to take effect 90 days after the official signing date.

Restricting harmful AI interactions

The second bill, S.9051B/A.10379C, focuses on the behavior of AI chatbots when they interact with minors. The state is moving to prohibit companies from offering features that could be psychologically harmful or exploitative. This includes chatbots that are designed to pretend they are human beings or those that encourage a child to develop an emotional dependency on the software.

The law also targets more severe forms of online harm. It explicitly bans AI chatbots from engaging in sexually explicit conversations with minors or promoting self-harm. By creating these boundaries, the state intends to prevent AI from being used as a tool for grooming or providing dangerous advice to children who may not understand the nature of the technology.

These rules are not just suggestions for tech companies; they are legal mandates. Companies must ensure that their AI models do not facilitate these specific types of interactions. The state wants to ensure that the rapid development of generative AI does not come at the expense of child safety or mental health.

New age verification requirements

To enforce these protections, the state is requiring companies to be more diligent about knowing who is using their services. The law mandates that companies must verify the ages of their users using more than one method. This is intended to prevent minors from easily bypassing filters by simply lying about their birth year.

Significantly, the law requires that at least one of these verification methods must not rely solely on a government-issued ID. This is a notable distinction because it forces companies to find alternative ways to confirm a user's age while still maintaining some level of privacy. It prevents a situation where the only way to access a safe service is to hand over sensitive government documentation.

Once a company has verified a user's age information, the law states that the data must be deleted after it is no longer needed. This helps limit the amount of personal data that companies can store over time. By requiring multiple methods and data deletion, the state seeks a balance between safety and data minimization.

Penalties and public oversight

The state has established significant consequences for companies that fail to comply with these new safety standards. Violations of the AI chatbot law can lead to civil penalties of up to $25,000 per violation. Beyond these fines, companies may also face other legal actions, including the payment of damages and restitution to affected parties.

The law also grants the state the power to order the destruction of unlawfully collected data. This includes any AI models that were trained on data gathered in violation of the new rules. This is a high-stakes penalty because it could potentially force a company to scrap an entire product if it was built using improper data collection methods.

To ensure these laws are followed, the attorney general will be responsible for oversight. A public website will be maintained specifically for New Yorkers to file complaints. This provides a direct line for parents and guardians to report instances where they believe a company is failing to protect children from unsafe AI features.

Impact on tech and consumers

For tech companies operating in New York, these laws mean a shift in how they design and market their products. Manufacturers of baby monitors will need to integrate stronger encryption and security protocols into their hardware before they can be sold in the state. This could lead to a more standardized level of security across the industry.

For parents, the laws provide a layer of protection against some of the most common fears regarding smart home devices. It gives them a legal basis to demand better security from the brands they purchase. It also offers a sense of security knowing that the state is actively monitoring the types of AI interactions available to their children.

Looking ahead, these laws may serve as a blueprint for other states considering similar regulations. As AI becomes more integrated into daily life, the tension between innovation and safety will continue to be a major point of discussion. New York's approach combines hardware requirements with behavioral restrictions on software to address these concerns.