AB 1609 changes covered customer service chatbot requirements
Oct 4, 2026 edition · GC-2026-0228 · Published 2026-10-04 · Version 2 · Final
AB 1609 establishes chatbot disclosure and human-support requirements for businesses above $500 million in national annual revenue. Its good-faith response options, existing-channel limits and healthcare-communication exception make applicability depend on the business and the particular service interaction.
What happened
California enacted AB 1609 on September 28, adding customer service chatbot rules for private businesses with more than $500 million in national gross annual revenue that provide goods and services to California customers. A covered business may not represent a chatbot as human and must clearly disclose its artificial identity in the interaction medium when a reasonable person is likely to be misled. During regular business hours it must provide a simple way to request a human customer service agent on its customer service platforms. The law requires a good-faith effort either to connect within 15 minutes or provide a specific appointment within one business day, with a separate one-business-hour callback option for businesses subject to the cited pharmacy regulation. The enactment is the event reported here; the applicable commencement of these provisions must be confirmed separately.
Good-faith duties also address later waits of more than 15 minutes and cumulative waits or escalation queues exceeding one hour. The section does not impose the 15-minute connection rule on email, web contact forms or voicemail and does not require a new communication platform beyond those made available as of January 1, 2027. The hospital exception covers communications related to providing, administering, paying for or coordinating healthcare, including scheduling, clinical services, billing and associated operations; it is not a general exemption for every health-technology business. Other exclusions include exclusive employee or business-to-business lines, specified compliant utility services and consumer reporting agencies. The law provides public-prosecutor enforcement, no private right of action, and an exception for inability to comply caused by specified circumstances beyond reasonable control or extraordinary emergencies.
Scope and timing
- Authority status
- Final
- Applicability
- Potentially applicable
- Audience
- Health systems, Provider networks, Health-tech
- Jurisdiction
- California
Why it matters
A patient-facing bot can serve scheduling, clinical or commercial functions, and those uses may produce different scope conclusions. The law provides alternatives and a good-faith standard, so treating every 15-minute delay as an automatic violation or treating all healthcare businesses as exempt would misstate the final text.
Recommended action
Confirm the applicable commencement before treating the new provisions as current duties. Prepare the following for implementation at that commencement: Check revenue, customer, service and channel definitions before assigning requirements. Document any hospital or other exception for the actual communication function. For covered uses, review artificial-identity disclosures, human-request prompts, appointment alternatives and wait-management procedures, including escalation during outages or emergencies.
Sources
- AB1609 enacted final textOfficial · California Legislature · 2026-09-28 · Source review 2026-10-05
Complete edition and supplemental material
This finding in the complete approved report →Regulatory horizons, CIA trends and implementation trackers remain in the full report.
Read the entire Compliance Sweep report →