Binding law — not yet in force or stayed
AI companion chatbots must maintain a self-harm crisis protocol (Washington)
Under Washington HB 2225 Section 5, an operator may not deploy an AI companion chatbot unless it maintains a protocol to detect and address suicidal ideation or self-harm (including eating disorders), refer users to crisis resources (suicide hotline / crisis text line), prevent content encouraging self-harm, and publicly disclose the protocol details plus annual crisis-referral counts. Detect an AI-companion path with no self-harm detection + crisis referral.
Who it applies to
- Duty falls on: operator
- Systems covered: companion chatbot
- Operators of AI companion chatbots available to Washington users. Effective 2027-01-01. CPA private right of action.
The guard to add
Screen every user message for suicidal ideation and self-harm, return a crisis referral instead of the normal reply on detection, and block encouragement or method content.
In the chat handler, before the user's message reaches the model, run a self-harm check on every turn (moderation self-harm categories, Azure AI Content Safety SelfHarm, Llama Guard S11, or a dedicated crisis classifier). On detection, send the user a crisis-referral message naming crisis services suited to their location (in the US, the 988 Suicide & Crisis Lifeline and Crisis Text Line) instead of, or ahead of, the model reply, and flag the session so repeated signals escalate. The system prompt forbids encouragement and method details, and model output is screened for self-harm instructions before it is returned. A written protocol (for example docs/safety.md) describes the detection, referral, and escalation steps and is kept in step with the code.
Where it goes: 1 application source code, 7 prompt construction, 9 AI output handling, 14 user-facing text.
What this provision adds:
- Screen for eating-disorder expressions as well as suicidal ideation and self-harm.
- Publicly disclose the protocol details and annual crisis-referral counts.
Example (FastAPI + OpenAI SDK), before:
@app.post('/chat')
async def chat(req: ChatRequest):
reply = client.chat.completions.create(model=MODEL, messages=build_messages(req))
return {'reply': reply.choices[0].message.content}After:
CRISIS_REPLY = ("It sounds like you are going through something really hard. You can call or text 988 "
"(Suicide & Crisis Lifeline, https://988lifeline.org) or text HOME to 741741 (Crisis Text Line) any time.")
@app.post('/chat')
async def chat(req: ChatRequest):
c = client.moderations.create(model='omni-moderation-latest', input=req.message).results[0].categories
if c.self_harm or c.self_harm_intent or c.self_harm_instructions:
sessions.flag_crisis(req.session_id) # repeated flags escalate per docs/safety.md
return {'reply': CRISIS_REPLY, 'crisis': True}
reply = client.chat.completions.create(model=MODEL, messages=build_messages(req))
text = reply.choices[0].message.content
if screens_self_harm_instructions(text):
return {'reply': CRISIS_REPLY, 'crisis': True}
return {'reply': text}Control: Companion or conversational AI without a self-harm crisis protocol. The same guard addresses 7 items with binding law in 6 jurisdictions. Engineering guidance, not legal advice.
Related incidents
- Character.AI and Google agree in principle to settle teen-harm suits (2026-01-07; confirmed). Character.AI and Google agreed in principle to settle five lawsuits brought by families alleging that chatbot interactions contributed to teenagers' suicides or harm. Terms were not disclosed and there was no admission of liability; the underlying harms remain allegations. Source: Fortune · evidence grade: press of record · cited by Run a self-harm crisis protocol in any conversational AI that users may confide in
- Raine v. OpenAI wrongful-death complaint (2025-08; alleged (not proven)). A wrongful-death complaint filed in August 2025 alleges that ChatGPT acted as a 'suicide coach' to a teenager and that OpenAI's moderation flagged 377 of his messages for self-harm and tracked 213 mentions of suicide without intervening. OpenAI denies the allegations. Source: Complaint, Raine v. OpenAI (S.F. Superior Court) · evidence grade: primary · cited by Run a self-harm crisis protocol in any conversational AI that users may confide in
Rule id wa-hb2225.ai-companion-crisis-protocol · review status: primary source derived