This bill establishes comprehensive content and data privacy requirements for chatbot providers in New Jersey. It prohibits chatbot providers from processing personal data beyond what is necessary to fulfill a user's express request unless affirmative consent is obtained. Specific restrictions include not processing a user's chat log for advertising purposes, not retaining chat logs for longer than two years without legal necessity, and not selling chat logs. Additionally, chatbot providers are required to maintain transparency by making information about their chatbots available online, allowing users to access and download their chat logs, and implementing a robust data security program.
The bill also classifies chatbots as products for liability purposes, holding providers accountable for any user injuries resulting from their use. Violations of the bill's provisions can result in civil penalties of $5,000 per violation, and users harmed by such violations may pursue legal action for damages. The Attorney General is empowered to enforce the bill through civil actions for injunctive relief and to establish necessary rules and regulations for implementation. Overall, the legislation aims to enhance user protection and privacy in interactions with chatbot technology.