AI Regulation Tracker / US state legislation
Oklahoma SB1521 Would Require ID-Verified AI Chatbot Accounts
Oklahoma Senate Bill 1521 would require a covered entity to make every individual create a user account before using an AI chatbot, and to verify age through a process authenticated by uploading a valid state-issued form of identification. Self-reported age would not be enough. If verification shows a user is a minor, the entity would have to block that minor from any AI "companion." The measure has passed the Oklahoma Legislature but has not been enacted into law. The bill would set an effective date of November 1, 2026, and would provide for Attorney General enforcement and civil penalties up to one hundred thousand dollars per violation.
The mechanics are specific. Under the bill, a covered entity "shall require each individual accessing an artificial intelligence chatbot to create a user account in order to use or otherwise interact with such chatbot." At account creation the entity would have to request age data and verify the user's age through a reasonable age verification process, then classify each user as a minor or an adult. For accounts that already exist when the law would take effect, the entity would have to freeze them and require age data before restoring functionality.
What makes this stricter than most is the definition of the verification method. A "reasonable age verification measure" would mean, in the bill's words, "a method of age verification that is authenticated through the upload of a valid state-issued form of identification." The bill is explicit that requiring a user to confirm they are not a minor, or to type a birthdate, is not sufficient. It would also bar basing verification on shared IP addresses or hardware identifiers. In short, self-attestation is out, and a document check is in.
What happens to minors and to companions
If the age verification process determines that an individual is a minor, the covered entity would have to prohibit that minor from accessing or using any AI "companion" it makes available. The bill defines an AI companion as a chatbot that provides adaptive, human-like responses and is designed to encourage or facilitate simulated interpersonal or emotional interaction, friendship, or similar bonds. Entities would also have to periodically re-check previously verified accounts. Separately, the bill would prohibit chatbots from content that encourages, promotes, or coerces suicide, non-suicidal self-injury, or imminent physical or sexual violence.
An entity could use a third-party vendor to run the verification, but doing so would not relieve it of its obligations or its liability under the act. So outsourcing the ID check would not outsource the legal exposure.
Enforcement and the practical cost
The bill would authorize the Attorney General to enforce the act and bring a civil action to enjoin violations and seek civil penalties, which the bill would cap at one hundred thousand dollars for each violation, with each individual violation treated separately. If enacted, it would take effect November 1, 2026.
Here is the part I would flag for any operator. Document-based age verification is not a small feature. It means collecting, transmitting, and often retaining copies or derived data from government IDs, which turns the provider into a holder of exactly the kind of sensitive identity data that regulators and plaintiffs scrutinize. The friction also pushes away adult users who do not want to hand an ID to a chatbot service. And ID-upload mandates in adjacent areas have drawn First Amendment and privacy challenges, so I would not treat the November effective date as settled certainty until any litigation shakes out.
Why this matters beyond Oklahoma
If you build or deploy consumer AI chatbots, SB1521 is the strict end of the 2026 state spectrum, and it is a useful stress test for your roadmap. A provider that can stand up account creation, document-based age verification, minor classification, and companion-blocking for Oklahoma has built machinery that partly transfers to other states moving in the same direction, even where the verification standard is lighter. My practical read is to design the identity and age-gating layer as a configurable module, strict where the law demands documents and lighter where it allows other signals, rather than hard-coding one state's rule. That keeps you adaptable as these bills multiply and as courts test the document-upload approach. The bill would set the requirement; your engineering and privacy judgment decides how to meet it without creating a new data-breach surface.
Questions professionals are asking
Does self-reported age satisfy SB1521?
No. The bill defines a reasonable age verification measure as a method authenticated through the upload of a valid state-issued form of identification, and it states that asking a user to confirm they are not a minor or to enter a birthdate is not sufficient. A document check is required.
What must covered entities do at account creation?
The bill would require the user to create an account before using the chatbot, request age data, verify age through a reasonable age verification process, and classify the user as a minor or an adult. Existing accounts would be frozen when the law takes effect until age data is provided.
What happens if a user is verified as a minor?
The covered entity would have to prohibit that minor from accessing or using any AI companion it offers, meaning a chatbot designed to encourage simulated interpersonal or emotional interaction. Entities would also have to periodically re-check previously verified accounts.
How would it be enforced and when would it take effect?
The bill would authorize the Oklahoma Attorney General to seek injunctions and civil penalties up to one hundred thousand dollars per violation, each violation counted separately. It states an effective date of November 1, 2026, if enacted. The measure has passed the Oklahoma Legislature but is not yet law.
RELATED BRIEFINGS
Browse the full AI Regulation News tracker
Informational analysis for working professionals, not legal advice. Confirm how any bill or statute applies to your situation with qualified professionals in the relevant jurisdiction.