Law / United States

Youth AI Privacy Act

S. 4199, 119th Congress

In committee, dated , as of .

An AI prohibited practices rule binding private bodies.

Obligation class
Content labelling, Design code, Prohibition
Audit expectation
none

As of .

Where it has got to

The text described here is S. 4199 as introduced in the Senate. That print is S. 4199 IS, published .

Locally, this stage is ordered to be reported by the Senate Committee on Commerce, Science, and Transportation with an amendment in the nature of a substitute.

The stage above is recorded at www.congress.gov.

More on this stage

Introduced and referred on . The committee ordered it reported with an amendment in the nature of a substitute on ; the congress.gov record shows no later action.

What it requires

  • Introduced and ordered reported by committee, not enacted, so this binds nobody yet; what follows is what it would require as introduced.
  • If you make an AI chatbot available and know a user is under 18, disclose at the beginning of every session, and at least every 30 minutes, that the user is not interacting with a human and that the chatbot's content is AI-generated.
  • Do not configure an AI chatbot, for a user you know is under 18, with rewards or incentives based on frequency of use, push notifications, outputs the user did not prompt, or typing indicators, once the Federal Trade Commission's regulations prohibit them.
  • Do not configure an AI chatbot to advertise to a user you know is under 18, and do not process that user's personal data to profile the user or to train a covered algorithm, other than to test for and address risks of harm.
  • Do not retaliate against an individual who raises a concern about, or reports, a violation of the Act.

These lines are LexLint's reading of the law's text, as of .

If you get it wrong

Private right of actionYes

Penalty structure

As introduced, a violation of section 4, 5 or 6 is treated as a violation of a rule defining an unfair or deceptive act or practice under 15 U.S.C. 57a(a)(1)(B), the chain that draws the civil penalty of 15 U.S.C. 45(m)(1)(A), a nominal $10,000 per violation adjusted for inflation to $53,088 (2025 figure) by 16 CFR 1.98.

Rule
Per violation only
As of
Currency
USD
Per violation unit
Violation
Per violation amount
53,088

Who enforces it

Enforcement body

Federal Trade Commission; State attorneys general as parens patriae; a parent or legal guardian of a minor in a civil action.

What it makes you log

Logging duty

The bill requires a recurring disclosure to the user, regulations limiting the use of a minor's data, and a ban on compulsive-use features, advertising and profiling. No section requires a deployer to create, keep or produce a log or record.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Senator Markey introduced the bill on , and it was referred to the Senate Committee on Commerce, Science, and Transportation. On the committee ordered the bill to be reported with an amendment in the nature of a substitute. As introduced, a deployer that knows a user of an AI chatbot is a minor would have to disclose that the user is not interacting with a human and that the chatbot's content is AI-generated.

The disclosure would have to occur at the beginning of every session and recur at least once every 30 minutes during a session. The Federal Trade Commission would have to issue regulations barring a deployer or developer that knows a user is a minor from configuring an AI chatbot with features such as rewards for frequency of use, push notifications and typing indicators. A deployer or developer that knows a user is a minor could not configure a chatbot to advertise to that user.

A deployer that knows a user is a minor could not process the user's personal data to profile the user. Subject to exceptions for testing and addressing risks of harm, the deployer could not process the minor's personal data to train a covered algorithm or transfer it to a third party for that purpose. The Federal Trade Commission would enforce section 4, 5 or 6 of the bill as a violation of a rule defining an unfair or deceptive act or practice.

A parent or legal guardian of a minor could sue a deployer or developer for a violation of section 4 or 5 of the bill. In that action the court could award actual damages, punitive damages, reasonable attorney's fees and litigation costs.

When LexLint raises it

When your app profile says your app deploys a chatbot or serves under-18s.

Back to the example  ·  Lint your app