Does Georgia AI Companion Chatbot Safeguards (SB 540) require Incident Reporting?
Georgia • enacted
Yes — 1 provision
Requirements at a glance
This regulation imposes 3 specific requirements for Incident Reporting across 1 provision:
- Publish protocol summary — Publicly disclose, on the operator's website and within any application through which the chatbot is made available, a plain-language summary of the severe-harm protocol required by § 39-5-6(f) (§ 39-5-6(g)(1))
- Annual referral count — Publicly disclose, annually, the aggregate number of crisis referral notifications issued in the preceding calendar year (§ 39-5-6(g)(2))
- No personal identifiers — No personally identifiable information may be disclosed in that reporting (§ 39-5-6(g)(2))
Crisis Protocol and Referral Disclosure #
Georgia routes the same crisis-referral count that California SB 243 § 22603 sends to the Office of Suicide Prevention straight to the public website instead. There is no regulator to file with and no prescribed form, so the disclosure becomes evidence available to the Attorney General and to plaintiffs without any request. Mapped to incident-reporting for comparability with SB 243's annual crisis reporting, though the channel is public disclosure rather than a filing with an authority.
Requirements
| Requirement | Details |
|---|---|
| Publish protocol summary | Publicly disclose, on the operator's website and within any application through which the chatbot is made available, a plain-language summary of the severe-harm protocol required by § 39-5-6(f) (§ 39-5-6(g)(1)) |
| Annual referral count | Publicly disclose, annually, the aggregate number of crisis referral notifications issued in the preceding calendar year (§ 39-5-6(g)(2)) |
| No personal identifiers | No personally identifiable information may be disclosed in that reporting (§ 39-5-6(g)(2)) |
Penalties
| Violation | Fine |
|---|---|
| Attorney General civil action | Up to $10,000 per knowing violation plus compensatory damages, costs and fees, and injunctive relief (§ 39-5-6(k)(1)) |
| Per-day, per-user accrual | Each day in violation is a separate violation for each user affected (§ 39-5-6(k)(2)) |