Georgia’s New AI Chatbot Law and Your Firm’s Intake Bot: What SB 540 Actually Covers
A Tuesday morning reality check. You open your inbox and Georgia SB 540 is the headline waiting. Georgia has enacted a sweeping AI chatbot law,…
A Tuesday morning reality check. You open your inbox and Georgia SB 540 is the headline waiting. Georgia has enacted a sweeping AI chatbot law, with civil penalties reaching $10,000 per knowing violation.
Then you remember the chatbot sitting on your firm’s website. The one your marketing vendor installed. It answers questions about closing costs. It books consultations. It talks to prospective clients all day, without supervision, without a log you have ever reviewed.
Your first instinct is the correct one. Am I regulated now?
Read the statute and the answer is probably no. But the reason you sit outside the line matters more than the fact that you do.
Georgia Senate Bill 540 was signed on May 11, 2026, and does not take effect until July 1, 2027. It regulates AI companion chatbots, meaning systems designed to sustain human-like relationships, and it expressly excludes customer service chatbots. A law firm intake bot that answers questions and schedules consultations almost certainly falls outside the statute.
What did Georgia’s SB 540 actually do?
SB 540 regulates AI companion chatbots operating in Georgia. Governor Kemp signed it on May 11, 2026. It becomes effective on July 1, 2027. The law amends Chapter 5 of Title 39 of the Official Code of Georgia Annotated. It requires AI disclosure, age verification, parental controls, and crisis-response protocols for covered systems.
The statute reaches natural-language systems that give adaptive, human-like responses. Coverage turns on sustained interaction. A covered chatbot retains information across prior sessions, asks unprompted emotion-based questions, and carries on an ongoing personal conversation with the user.
For covered chatbots, the disclosure duty is recurring. The system must tell the user it is AI at the start of the chat. It must repeat that disclosure every three hours. For users under 18, the reminder comes every hour. Covered operators must also route users toward crisis resources, and they cannot present the chatbot as a licensed health care provider.
Enforcement sits with the Georgia Attorney General. There is no private right of action. The Attorney General may allow an optional 30-day cure period and may issue rules and guidance before the effective date.
The structural detail drawing national attention is the absence of exemptions for major platforms. Georgia declined to write the escape hatch that other states wrote.
The two dates that matter
| Date | What happened | What it means for your firm |
|---|---|---|
| May 11, 2026 | SB 540 signed into law | The law exists. No obligation attaches yet. |
| July 1, 2027 | Effective date | Covered operators must comply on this date. |
Signed is not in effect. Fourteen months separate the two. Any vendor telling you that Georgia firms must comply today is selling something.
Does SB 540 cover your firm’s intake chatbot?
Almost certainly not. The statute expressly excludes customer service chatbots, internal business support chatbots, and chatbots embedded in video games. An intake bot that answers practice-area questions and books consultations is a service tool. It is not a companion.
The exclusion carries a condition, and the condition is where attention belongs. A service chatbot loses its exclusion if it elicits emotional attachment, creates open-ended companionship, or sustains a relationship across multiple interactions.
Read that condition against a real closing practice. Your intake bot answers a question about earnest money and hands off to a paralegal. That is service. It stays excluded.
Now change one setting. Your vendor enables persistent memory across sessions. The bot greets returning visitors by name, references their last question, and asks how their home search is going. That is not a feature request you made. That is a product update you were never told about. Configuration drift is how an excluded tool walks toward the line. The tool changes without notice while you close files, and the behavior shifts with it.
The exclusion is not a permanent status. It describes behavior. Behavior is a function of settings, and settings change.
So why should you care?
Because the disclosure principle is spreading, and Georgia is one entry in a wave. California, Maine, Oregon, Utah, and Washington have chatbot laws on the books, with Washington’s taking effect January 1, 2027. Dozens more bills sit in legislatures across the country. Firms with clients in multiple states are not tracking one regime. They are tracking a patchwork.
The reality is that waiting for a rule to name you is not a governance posture. It is a delay. Georgia Rule of Professional Conduct 5.3 already requires supervision of nonlawyer assistance, and the State Bar of Georgia Generative AI Toolkit treats a technological tool that is not licensed to practice law as exactly that. National guidance points the same direction. ABA Formal Opinion 512 addresses a lawyer’s ethical duties when using generative AI, including competence, confidentiality, and supervision. Your chatbot is a nonlawyer assistant that speaks to prospective clients in your name.
Rule 1.6 sits underneath it. A prospective client who types a property address, a lender name, and a settlement date into your website has given your firm sensitive information. Where that information travels depends on your vendor’s terms, not on your intentions.
None of that waits for July 1, 2027. It applies now.
The 3-Step Fiduciary Audit
- Inventory every client-facing AI tool. Intake bots, scheduling assistants, website widgets, portal chat features. Include anything a vendor installed on your behalf. If you cannot name the tool and its vendor, you do not have an inventory.
- Confirm the tool is genuinely a service instrument. Check whether it retains memory across sessions, asks unprompted emotional questions, or encourages the user to return for conversation. Ask your vendor in writing. Keep the answer.
- Add a plain AI-disclosure line now. One sentence, before the first substantive response. State that the user is communicating with an automated assistant and that a member of the firm will follow up. This is best practice today, not a mandate. It becomes muscle memory before it becomes law.
What separates a governed firm from an exposed one?
The difference is not the tool. Two firms can run the same intake widget. One has an audit trail. One has a hope.
| Practice Point | The Wild West Firm | The Governance Way Firm |
|---|---|---|
| Tool inventory | Cannot name every AI tool on its own website | Maintains a written inventory with vendor and function |
| Scope analysis | Assumes exclusion applies, never verified | Documented the customer-service exclusion analysis in 2026 |
| AI disclosure | Silent. Visitors assume a human answered | Discloses on first response, as standing practice |
| Vendor terms | Never read the data-handling terms | Vetted terms for confidentiality under Rule 1.6 |
| Supervision | No one reviews chatbot transcripts | Assigned a supervising attorney under Rule 5.3 |
| Configuration changes | Learns of feature updates from a press release | Requires written vendor notice of behavioral changes |
| When the next law passes | Starts from zero, under deadline | Adjusts one line in an existing policy |
The Wild West firm is not violating SB 540. It is carrying an unmeasured position. When the next statute lands, and it will, that firm begins with discovery instead of compliance.
The Bottom Line
Georgia SB 540 was signed May 11, 2026, and takes effect July 1, 2027, regulating AI companion chatbots with disclosure duties, age verification, crisis protocols, and civil penalties up to $10,000 per knowing violation enforced by the Attorney General. A firm’s customer-service intake bot is expressly excluded, provided it does not sustain an emotional relationship across sessions. This law is not your emergency. It is your early warning.
Frequently Asked Questions
Does Georgia SB 540 apply to law firms? For most firms, no. SB 540 regulates AI companion chatbots and expressly excludes customer service and internal business support chatbots. A firm intake bot that answers questions and schedules consultations falls within that exclusion, as long as it does not sustain an emotional relationship with users across sessions.
When does Georgia’s AI chatbot law take effect? Governor Kemp signed SB 540 on May 11, 2026, but the law does not become effective until July 1, 2027. No compliance obligation attaches before the effective date. The Georgia Attorney General may issue rules and guidance during that period.
What is an AI companion chatbot under Georgia law? It is a natural-language AI system giving adaptive, human-like responses that sustains interaction with a user. The indicators include retaining information from prior sessions, asking unprompted emotion-based questions, and carrying on ongoing personal conversation. Coverage turns on relationship behavior, not on the underlying technology.
Do I have to tell clients my website chatbot is AI? SB 540 does not require it for an excluded customer-service bot. Georgia Rule of Professional Conduct 5.3 still requires supervision of nonlawyer assistance, and the State Bar of Georgia Generative AI Toolkit treats unlicensed technological tools as nonlawyer assistants. Voluntary disclosure is the governance-ready position.
What are the penalties under SB 540? The Georgia Attorney General enforces the statute and may seek civil penalties up to $10,000 per knowing violation. The Attorney General may extend an optional 30-day cure period. Penalties apply only to covered AI companion chatbot operators, and only on or after July 1, 2027.
Does SB 540 create a private right of action? No. The statute assigns enforcement to the Georgia Attorney General. Private individuals cannot sue an operator directly under SB 540. That structure concentrates enforcement risk in a single office rather than distributing it across private plaintiffs.
Should my firm change anything right now? Inventory your client-facing AI, confirm the customer-service exclusion applies to each tool, and add a plain AI-disclosure line as standing practice. None of that is mandated by SB 540 today. All of it shortens your response time when the next statute arrives.
Where does your firm actually stand?
Most Georgia attorneys reading this have a client-facing AI tool they have never inventoried. Some have three. The AI Liability Quiz measures your firm’s exposure in under four minutes and returns a specific risk tier, along with the governance gaps behind it.
Take the AI Liability Quiz and find out whether your firm is a Statutory Time Bomb, a Fragile Hybrid, or a Digital Fortress.
This article is provided for general informational purposes and does not constitute legal advice. It does not create an attorney-client relationship. Georgia attorneys should consult the Georgia Rules of Professional Conduct, the State Bar of Georgia Generative AI Toolkit, and the text of SB 540 as enacted before making compliance decisions for their own practices. Juniata C. Ford, Esq., Ford Innovations, P.C.
