Companion chatbot laws · what to count and keep · updated 9 October 2026

California SB 1119: Adam's Law

California's SB 1119 (Chapter 190, Statutes of 2026) adds child-safety duties for companion chatbots, most of them from 1 July 2027. Before a new or substantially modified chatbot is offered, the operator must “Perform and document a comprehensive risk assessment” (Cal. Bus. & Prof. Code § 21812 (SB 1119)) (read 9 October 2026 in the bill text), keep a crisis response protocol for child users, and submit to independent audits. From 1 January 2027 it also deletes SB 243's duties for users an operator knows are minors. The records it implies are documents (each assessment, protocol version and audit), not counts.

Each duty, in the bill's words

SB 1119, Chapter 190, Statutes of 2026: amends Cal. Bus. & Prof. Code § 22602 and adds a chapter beginning at § 21810; chaptered 10 September 2026; its amendment to § 22602 takes effect 1 January 2027, and most operator duties apply from 1 July 2027.

before making a new or substantially modified companion chatbot available, perform and document a comprehensive risk assessment, and repeat it annually

“Perform and document a comprehensive risk assessment”
Cal. Bus. & Prof. Code § 21812 (SB 1119)

Applies from 1 July 2027. To keep: each risk assessment, dated, and the mitigations it documents.

a crisis response protocol for child users; after a child user's death or serious self-harm, preserve the conversation records for at least three years (users known to be minors)

“Preserve in a usable and exportable form any record of a conversation”
Cal. Bus. & Prof. Code § 21812.5 (SB 1119)

Applies from 1 July 2027. To keep: the crisis response protocol, each version dated. The conversation records it asks for are kept in your own systems; this tool never reads them.

an independent child-safety audit (the first by 1 January 2029), with a summary to the Attorney General within 30 business days

“the operator shall submit a summary of that AI child safety audit report to the Attorney General”
Cal. Bus. & Prof. Code § 21814 (SB 1119)

Applies from 1 July 2027. To keep: each audit report and the date its summary went to the Attorney General.

A record these pages do not keep

After a child user's death or serious self-harm, § 21812.5 asks the operator to preserve the conversation records for at least three years. Those stay in your own systems; nothing here reads or keeps a conversation.

Read the chaptered text

These duties are listed from the bill text and the Legislative Counsel's digest as published by GovBuddy and CalMatters, and from the National Law Review's summary of 2 October 2026; the Legislature's own site answered a bot check when this was read. Read the chaptered text for the definitions, the remedies and the audit standard.

Public prosecutors, and civil actions by a child or a parent, per the Legislative Counsel's digest; read the chaptered text for the remedies.

A hosted record of your crisis-referral counts and notice cadence, with the Oregon and Washington public pages kept current for you, is not built

It would take your daily totals (never a conversation or anything about a user), keep them in a hash-chained log with each protocol version, and keep California's yearly draft and the Oregon and Washington pages current.

What exists today: these pages, and the counts and documents you keep yourself. okgate's hash-chained log records the tool calls AI agents make, not your app's events, so it cannot keep this record today.

I want that record