KS HB2772

Requires online businesses likely accessed by minors to assess and mitigate risks of compulsive use, prohibits certain design features like infinite scroll and autoplay videos, bans personalized algorithmic recommendations for minors, and mandates highest privacy settings by default for users under 18

Prohibits covered businesses from collecting personal data beyond what is necessary for the requested service, using data for new purposes without consent, or sending push notifications to any user between midnight and 6:00 a.m.

Creates civil liability for unauthorized creation, distribution, or publication of digital replicas (deepfakes) of individuals without consent, with statutory damages of at least $5,000 and defenses for news reporting, satire, parody, and creative works with clear disclaimers

Regulates chatbot providers by prohibiting use of chat logs for advertising purposes, requiring clear disclosure that users are interacting with AI rather than humans, banning claims that chatbots provide professional services (legal, medical, financial), and establishing strict liability for user injuries caused by chatbots

Authorizes private right of action with $5,000 statutory damages per violation for the age-appropriate design code and chatbot provisions, grants attorney general enforcement authority, and takes effect January 1, 2027