Hawaii AI Disclosure and Safety Act

Overview

The Hawaii Senate Bill 3001 (SB 3001), officially known as the "Artificial Intelligence Disclosure and Safety Act," represents a landmark legislative effort in the United States to establish comprehensive consumer protections and transparency requirements for conversational artificial intelligence (AI) services operating within the state. This Act specifically addresses concerns related to generative AI systems, which are increasingly accessible to the public, including minors, through various digital platforms. The legislature recognized the potential for AI systems to simulate human emotions, create emotional dependency, and mislead users into believing they are interacting with a human, rather than an automated system.

The primary purpose of this legislation is to implement a framework of targeted, reasonable, and enforceable safeguards designed to protect consumers, particularly minors, from manipulative, deceptive, or unsafe design practices prevalent in conversational and companion-style AI systems. Key provisions include mandatory disclosures when users interact with AI, heightened safeguards for minors, protocols for addressing suicidal ideation and self-harm, prohibitions against certain manipulative profiling, and requirements for annual reporting on crisis intervention activities. The Act aims to balance innovation with public safety and accountability in the rapidly evolving landscape of artificial intelligence.

Definitions

The Artificial Intelligence Disclosure and Safety Act introduces several key definitions to clarify the scope and application of its provisions. An "AI companion" or "conversational artificial intelligence service" refers to an artificial intelligence system capable of generating text, images, audio, video, and interactive dialogue, and designed to simulate human conversation or companionship. This definition is crucial for identifying the types of AI systems regulated by the Act.

An "operator" is defined as any person who provides an AI companion or conversational artificial intelligence service to users in Hawaii. The Act also specifies what constitutes a "minor," referring to an individual under the age of eighteen. Furthermore, "sensitive data" is defined as personal data that reveals or infers a mental or emotional state, health information, biometric identifiers, or other information used for psychological profiling or emotional analysis. These definitions are fundamental to understanding the obligations and prohibitions outlined in the legislation.

Governance and Institutional Framework

The enforcement and oversight of the Artificial Intelligence Disclosure and Safety Act are primarily vested in existing state agencies, leveraging established consumer protection mechanisms. Violations of the Act are explicitly deemed an unfair or deceptive act or practice in the conduct of trade or commerce under Section 480-2 of the Hawaii Revised Statutes. This designation grants enforcement authority to the Department of the Attorney General and the Office of Consumer Protection, allowing them to pursue civil penalties, damages, and reasonable attorneys' fees and costs.

Additionally, the Act mandates that operators of AI companions submit annual reports to the Behavioral Health Administration of the Department of Health. These reports, commencing January 1, 2028, are required to detail crisis intervention referral activities and protocols implemented to address suicidal ideation and harmful interactions. This reporting requirement establishes a mechanism for ongoing monitoring and evaluation of the safety measures adopted by AI service providers, ensuring continuous accountability and public health oversight.

Key Focus Areas

The Artificial Intelligence Disclosure and Safety Act establishes several critical focus areas to ensure transparency and safety in AI interactions, particularly for vulnerable populations. Firstly, it mandates a clear and conspicuous notification from an operator if a reasonable person interacting with a conversational AI service would believe they are interacting with a human, indicating that the service is artificial intelligence and not human. This foundational disclosure aims to prevent deception and foster user awareness.

Secondly, the Act implements heightened safeguards for minors. If an operator has actual knowledge or reasonable certainty that a user is a minor, they must clearly and conspicuously disclose the AI interaction through a persistent visible disclaimer, or both at the beginning of each session and every three hours in continuous interactions. Operators are also required to adopt protocols for responding to user prompts regarding suicidal ideation or self-harm, including making reasonable efforts to refer users to crisis intervention service providers. The Act prohibits knowingly or intentionally programming a conversational AI service to provide professional mental or behavioral health care. Furthermore, operators are prohibited from profiling minor account holders or users for engagement optimization or behavioral manipulation and must offer tools for parents or guardians to manage a minor's privacy and account settings, as appropriate based on relevant risks. The bill also prohibits AI companions from producing or facilitating sexually explicit material or proposing sexually explicit content.

Implementation Framework

The implementation framework for the Artificial Intelligence Disclosure and Safety Act is designed to integrate its new requirements within Hawaii's existing legal and regulatory landscape. By classifying violations as unfair or deceptive acts or practices under Chapter 480-2 of the Hawaii Revised Statutes, the Act leverages established enforcement mechanisms. This approach allows the Department of the Attorney General and the Office of Consumer Protection to utilize their existing authority and resources to ensure compliance, rather than requiring the creation of entirely new enforcement bodies.

The Act's provisions are cumulative, meaning they add to, rather than replace, duties, remedies, or obligations imposed under other existing laws. This ensures that operators remain accountable under all applicable statutes. While the Act sets forth specific requirements for AI operators, it also includes provisions clarifying that it does not create liability for the developer of an artificial intelligence model for violations by a third-party AI system, nor does it create a private right of action to enforce its provisions directly. This structure aims to provide a clear regulatory path while supporting responsible innovation.

Monitoring and Evaluation

Monitoring and evaluation of the Artificial Intelligence Disclosure and Safety Act will be facilitated through a mandatory annual reporting mechanism. Beginning January 1, 2028, operators of AI companions are required to submit annual reports to the Behavioral Health Administration of the Department of Health. These reports must contain specific information regarding the crisis intervention referral activity and the protocols used by the AI service to address suicidal ideation and harmful interactions. This includes details on the methods used for measuring suicidal ideation and the effectiveness of the implemented protocols.

The purpose of these reports is to provide ongoing data and insights into how AI services are managing sensitive user interactions and fulfilling their safety obligations. This continuous feedback loop allows the Department of Health to monitor trends, assess the efficacy of the Act's provisions, and identify areas for potential improvement or further legislative action. The reporting requirement underscores the state's commitment to proactive oversight of AI technologies, particularly concerning mental health and minor safety.

Penalties, Liability, and Appeals

The Artificial Intelligence Disclosure and Safety Act establishes clear consequences for non-compliance, integrating them into existing consumer protection laws. Any violation of the provisions outlined in this Act constitutes an unfair or deceptive act or practice in the conduct of trade or commerce, as defined in Section 480-2 of the Hawaii Revised Statutes. This classification is significant as it triggers the enforcement powers of the Department of the Attorney General and the Office of Consumer Protection.

Penalties for such violations can include civil penalties, payment of damages to affected parties, and reimbursement of reasonable attorneys' fees and costs. This framework aims to deter non-compliance and provide avenues for redress for consumers harmed by deceptive or unsafe AI practices. It is important to note that the Act explicitly states that it does not create a private right of action for individuals to directly enforce its provisions or to support a private right of action under any other law. Furthermore, it clarifies that the developer of an artificial intelligence model is not liable for violations committed by an artificial intelligence system developed by a third party to provide an AI companion.

Relationship to Other Instruments

The Artificial Intelligence Disclosure and Safety Act is designed to augment existing legal frameworks within Hawaii, rather than supersede them. It explicitly amends Chapter 481B of the Hawaii Revised Statutes by adding a new section pertaining to artificial intelligence, conversational artificial intelligence services, disclosures, reports, and penalties. This integration ensures that the new AI-specific regulations are formally incorporated into the state's broader legal code.

A crucial aspect of the Act is its declaration that the duties, remedies, and obligations it imposes are cumulative to those imposed under other laws. This means that compliance with this Act does not relieve an operator from any responsibilities or liabilities arising from other existing statutes, such as general consumer protection laws, data privacy regulations, or child protection laws. This cumulative approach ensures a comprehensive and layered regulatory environment for AI services, promoting a higher standard of accountability across various legal domains.

National/Federal Alignment

The Artificial Intelligence Disclosure and Safety Act positions Hawaii as a proactive leader among U.S. states in establishing specific regulations for artificial intelligence. While federal AI regulations are still in nascent stages, Hawaii's Act contributes to a growing trend of state-level initiatives addressing the societal impacts of AI. The Act's focus on consumer protection, transparency, and the safety of minors in AI interactions aligns with broader national discussions and concerns regarding responsible AI development and deployment.

By enacting this legislation, Hawaii is contributing to a mosaic of state-specific AI laws that may eventually influence the scope and direction of future federal policies. The Act's emphasis on disclosure, mental health safeguards, and protections against manipulative design features for children reflects a common thread in proposed and enacted legislation across various jurisdictions. This state-level action demonstrates a commitment to addressing emerging technological challenges and may serve as a model or a point of reference for other states and potentially for future federal legislative efforts in the absence of a comprehensive national framework.

Implementation Timeline

Compliance Checklist

Sources and References