Law / United States / Iowa
Conversational AI Services Act (Senate File 2417)
Iowa Code ch. 554J (2026 Iowa Acts, ch. 1068)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force in 288 days, effective 1 July 2027.
An AI transparency rule binding public and private bodies.
As of 6 September 2026.
What it requires
- This duty does not take effect until July 1, 2027, so it is a duty to prepare for rather than one to meet today.
- Disclose clearly and conspicuously to a minor account holder that they are interacting with artificial intelligence, using a persistent visible disclaimer or a disclaimer at the start of each interaction and at least once every three hours of continuous use.
- Disclose to any user that the service is artificial intelligence whenever a reasonable person interacting with it could otherwise believe they are talking to a human.
- Do not give a minor user points or similar rewards at unpredictable intervals meant to increase engagement.
- Take reasonable measures to prevent the service from producing sexual content involving a minor account holder, urging a minor toward sexual conduct, or sexually objectifying a minor account holder.
- Take reasonable measures to prevent the service from claiming to be sentient or human, or simulating a romantic, sexual, or emotionally dependent relationship with a minor account holder.
- Offer minor account holders, and the parents or guardians of minors under thirteen, tools to manage the minor's privacy and account settings.
- Adopt a protocol for responding to a user's expressions of suicidal ideation or self-harm, including referral to crisis services.
- Do not represent that the service provides licensed psychology or behavioral health services.
If you get it wrong
Criminal exposureNo
Private right of actionNo
Penalty structure
An operator that violates the chapter is liable for the greater of actual damages or this per-violation civil penalty, capped in aggregate per operator. The statute does not currently bind, since its applicability date is July 1, 2027.
- Rule
- Per violation only
- As of
- 6 September 2026
- Currency
- USD
- Fixed cap
- 500,000
- Per violation unit
- Violation
- Per violation amount
- 1,000
Who enforces it
Enforcement body
Iowa Attorney General
What it reaches
Obligation class
Content labelling, Design code
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
An operator of a conversational AI service accessible to the public must clearly and conspicuously disclose to a minor account holder that the minor is interacting with artificial intelligence, and must disclose to any user that the service is artificial intelligence whenever a reasonable person could otherwise believe they are interacting with a human.
An operator may not give a minor user points or similar rewards at unpredictable intervals intended to increase engagement, must take reasonable measures to prevent the service from producing sexual content involving a minor account holder, urging a minor toward sexual conduct, sexually objectifying a minor, claiming to be sentient or human, or simulating a romantic or emotionally dependent relationship with a minor.
An operator must offer minor account holders, and the parents or guardians of minors under thirteen, tools to manage privacy and account settings, must adopt a protocol for responding to suicidal ideation or self-harm, and may not represent that the service provides licensed psychology or behavioral health services.
The Act was signed into law on May 2, 2026 as 2026 Iowa Acts chapter 1068, but its own applicability section defers every duty in the chapter to July 1, 2027, and it does not create a private right of action.
The chapter does not limit an operator to a private actor, and Iowa's general definitions statute includes a government or governmental subdivision or agency within the word person unless a chapter otherwise provides, so a government body operating a covered conversational AI service is bound in the same way as a private one.
When LexLint raises it
deploys_chatbotgenerates_contentserves_minorsprocesses_voice