Congress gates AI chatbots behind age walls—but who verifies your age?

What it does

The GUARD Act requires AI chatbot companies to verify that users are adults before allowing access to AI companions—interactive chatbots designed to simulate emotional relationships. Companies must freeze existing accounts and require age verification to restore them, implement criminal penalties (up to $250,000) for knowingly exposing minors to sexually explicit or self-harm content, and clearly disclose that the chatbot is not human and cannot provide professional services. The bill treats age verification as a gating mechanism and imposes civil penalties up to $250,000 per violation for non-compliance.

Why we flagged it

The bill's core mechanism is a child-protection mandate—age verification gates and content prohibitions targeting AI companions. However, the operational mechanism (third-party age verification, data retention, encryption standards) creates secondary privacy and data-broker implications that complicate the public benefit.

What the text implies

• Age verification data collected by third parties may be retained and used for purposes beyond compliance if not strictly limited by regulation; the bill requires 'minimally necessary' retention but does not define enforcement mechanisms or audit rights.
• The definition of 'AI companion' is narrow (requires 'persistent identity' or 'emotional interaction'), potentially excluding chatbots that simulate relationships without explicit persona—creating regulatory arbitrage for companies that rebrand similar products.

The full analysis lists 5 implications of this text.

Who stands to gain

age-verification service providers; identity-verification vendors; data-security and encryption service providers