SB 624

As introduced: - Requires a health information chatbot license to operate a chatbot that deals substantially with health information. - Requires documentation, testing procedures, risk assessment and mitigation strategies, proof of insurance coverage, and application fees. Requires professional liability insurance. - Requires reporting data breaches to the Department within 24 hours and to affected consumers within 48 hours. - Requires user consent for data collection and use. Gives users a right to access and delete the data. Requires disclosures to the user and third-party audits. - Creates a duty of loyalty for chatbots with reasonable systems to detect and respond to emergency situations and emotional dependence. Requires clear disclosure to the user that the chatbot is artificial. Prohibits influencing trusting parties to achieve particular results against their interest. Prohibits collecting data against a trusting party's interest. Requires loyalty to best interest of the party in personalizing content. Requires loyalty in gatekeeping. - Requires a clear terms of service agreement. Requires certain disclosures to the user with consent required. Prohibits deceptive design elements. - Sets data privacy requirements. - Creates a private right of action.