Our compliance with kids' AI and privacy laws
HeyOtto is built for kids and teens ages 8 to 18. Below is where we stand on each law that protects them, including laws that don't take effect until 2027. Schools, parents, and policymakers can request the details.
Last reviewed: October 14, 2026. Next review: January 2027
Status
Where we stand
Status key
- Compliant
The law is in effect and HeyOtto meets it today.
- Ready early
The law takes effect later. HeyOtto already meets it.
- Tracking
A proposed bill, or a law we're reviewing HeyOtto against now. We update the status when the review is done.
| Law | Description | Effective | Status | Read the law |
|---|---|---|---|---|
| Federal | ||||
| COPPA (amended FTC rule) | Children under 13 | Apr 22, 2026 | Compliant | Read the law (opens in a new tab) |
| FERPA | Student education records · for school accounts | In effect | Compliant | Read the law (opens in a new tab) |
| COPPA 2.0 | Extends protections to teens · passed Senate Mar 2026 | Proposed | Tracking | |
| Kids Online Safety Act (KOSA) | Online safety for minors | Proposed | Tracking | |
| State | ||||
| California SB 243 | AI chatbot safety | Jan 1, 2026 | Compliant | Read the law (opens in a new tab) |
| California student privacy (SOPIPA) | K–12 student data | In effect | Compliant | Read the law (opens in a new tab) |
| Connecticut Public Act 26-15 | Youth online safety and AI | Oct 1, 2026 | Compliant | |
| Colorado HB26-1263 | AI chatbots and minors | Jan 1, 2027 | Ready early | Read the law (opens in a new tab) |
| Oregon SB 1546 | AI chatbot safety | Jan 1, 2027 | Ready early | Read the law (opens in a new tab) |
| Washington HB 2225 | AI chatbot safety | Jan 1, 2027 | Ready early | Read the law (opens in a new tab) |
| California SB 1119 (Adam's Law) | Child chatbot protections | Jan 1, 2027 | Ready early | Read the law (opens in a new tab) |
| New York SAFE for Kids Act | Feeds and notifications for minors | Jan 25, 2027 | Ready early | Read the law (opens in a new tab) |
| North Carolina HB 301 | Social media and AI safety | Proposed | Tracking | Read the law (opens in a new tab) |
| California Kids AI Safety Act | Ballot initiative | Nov 2026 ballot | Tracking | |
| European Union and United Kingdom | ||||
| GDPR | EU data protection · parental consent age set by each country (13–16) | In effect | Tracking | |
| EU AI Act: AI transparency (Art. 50) | Users must know they're talking with AI | Aug 2, 2026 | Tracking | |
| EU AI Act: AI content labeling | Machine-readable marks on AI-generated content | Dec 2, 2026 | Tracking | |
| EU AI Act: prohibited practices (Art. 5) | Includes exploiting vulnerabilities due to age | Feb 2, 2025 | Tracking | |
| Digital Services Act (Art. 28) | Protection of minors on online platforms | In effect | Tracking | |
| UK GDPR and Children's Code | Age Appropriate Design Code | In effect | Tracking | |
| UK Online Safety Act | User-to-user services | In effect | Tracking | |
Status reflects our own review as of the date above. It is not a certification by any government agency, and it is not legal advice.
In the product
How HeyOtto does it
These are the protections behind the statuses above, in plain terms. Schools and partners can request the full details.
Otto always says it's AI
Kids are reminded they're talking with AI and encouraged to take breaks. Otto never claims to be a person.
Help when a child is struggling
If a child mentions self-harm, Otto points them to crisis resources and trusted adults.
Built to help, not to hook
No romantic behavior, no excessive flattery, and nothing designed to keep kids hooked.
Age-appropriate from the start
Protections are on by default, every account needs a parent's consent, and parents stay in control.
Less data, kept for less time
We collect only what HeyOtto needs, never sell it, and never use it for targeted ads to kids or teens.
Student data stays with the school
Schools control their students' accounts and data under a data privacy agreement.
Want to know how we comply?
We share compliance documentation with schools, districts, parents, and policymakers on request. Tell us who you are and which laws you're asking about, and our team will follow up.