California SB 1119: What Adam's Law Means for AI Chatbots

California Governor Gavin Newsom signed Senate Bill 1119—known as Adam’s Law—into law on September 10, 2026. Now officially listed as Awaiting Entry under Chapter 190, Statutes of 2026, this landmark Act introduces sweeping child safety, privacy, and auditing requirements for conversational artificial intelligence tools designed for or accessed by children.

Although the statute officially takes effect on January 1, 2027, companies operating in California must navigate a phased regulatory roadmap over the coming years to ensure full legal compliance as enforcement milestones draw near.

What's changing

Adam’s Law creates specific legal guardrails for companion chatbots—AI applications designed to engage in human-like, interactive, or ongoing personal dialogue. Lawmakers introduced the Act to address growing concerns regarding youth interactions with generative AI, including emotional manipulation, exposure to inappropriate content, and privacy risks.

Rather than imposing a single immediate deadline, the Act outlines a structured timeline for compliance and enforcement:

January 1, 2027 (Statute Effective Date): SB 1119 officially enters force, establishing baseline legal definitions, scope, and foundational obligations for chatbot operators.
July 1, 2027 (Chapter 11.6 Operative): Chapter 11.6 becomes fully operative. Chatbot operators must have active safety features live, including default high-privacy settings, child-safety safeguards, and automated intervention protocols for unsafe interactions.
January 1, 2028 (Attorney General Reporting): The California Attorney General must launch a dedicated incident reporting mechanism allowing the public and affected users to submit reports regarding chatbot-related harms.
January 1, 2029 (Initial Audit Deadline): Covered operators face their first mandatory child safety audit, requiring formal evaluations of system safety, algorithmic bias, content moderation efficacy, and youth impact.
January 1, 2032 (Large-Operator Audit Phase-In Ends): The final compliance phase-in concludes for large-scale operators subject to staggered auditing cycles.

Under the Act, operators must implement content filtering mechanisms that block harmful output, build automated escalation protocols when a user expresses intent of self-harm, and enforce strict restrictions on collecting unnecessary child personal data.

Who is affected

SB 1119 applies to any commercial entity that provides or operates a companion chatbot accessible to minors in California. Jurisdiction is tied to the location of the end-user rather than where the business is incorporated.

Sectors Impacted: Developers of social AI companions, virtual avatar apps, educational conversational bots, gaming interfaces, and digital entertainment platforms using generative conversational engines.
Business Sizes: The Act covers commercial chatbot providers regardless of company headcount, though larger operators face distinct audit timelines and regulatory reporting cycles leading up to 2032.
Excluded Entities: Standard transactional chatbots—such as simple e-commerce customer support tools or banking balance lookup utilities—that do not engage in human-like companion interactions are generally outside the core scope of the Act.

If your organization offers an AI service that simulates personal relationships, ongoing conversation, or emotional support accessible to children in California, your service falls under SB 1119.

Three things to do this week

With SB 1119 now in Awaiting Entry status and taking effect on January 1, 2027, compliance and product engineering teams should take immediate action:

Conduct a product mapping and audience risk review: Evaluate all conversational AI products in your portfolio. Determine whether system prompts, user journeys, or interface designs qualify as a companion chatbot, and verify whether age checks currently restrict or identify underage California users.
Audit content safety and emergency protocols: Review current AI guardrails to ensure systems detect and safely handle sensitive disclosures, particularly self-harm, violence, or sexual content. Prepare technical specs to ensure default settings comply with the July 1, 2027 operative requirements for Chapter 11.6.
Build an internal auditing framework: Establish continuous logging, testing, and risk documentation practices now. Align your system metrics with the safety standards required for the initial January 1, 2029 child safety audit deadline and the Attorney General reporting framework coming in 2028.

Related context

SB 1119 is part of a broader push by California regulators to enforce strict consumer and child protections across AI technologies. Organizations should review Adam's Law alongside other California statutes:

California SB 243 - Companion Chatbot Disclosure Requirements: Requires clear disclosures ensuring users know when they are communicating with an automated bot rather than a human.
The California Age-Appropriate Design Code Act: Sets general online service design standards to prioritize the privacy and safety of children.
California AB 1979 — Health Care Services: Artificial Intelligence: Regulates AI applications used in healthcare delivery, complementing youth safety rules with medical-sector requirements.

Note: this article was drafted by AI - Google Gemini