This bill aims to protect children under 18 from potential harms associated with artificial intelligence (AI) chatbots, broadly defined to exclude certain specific systems. It requires providers to treat all unverified users as children and implement age estimation technology to distinguish between child and adult users. Providers must periodically review accounts and securely handle age data, limiting its use solely for age verification and prohibiting its sale or sharing. AI chatbot providers are mandated to conduct comprehensive risk assessments (pre-release, updates, annually) to identify foreseeable child safety risks, considering developmental stages. Based on these, they must implement mitigation measures and safeguards like age-appropriate warnings. A public-facing child safety policy detailing risk assessments, identified risks, and mitigation strategies, including parental settings, must be published and regularly updated. The bill prohibits AI chatbots from knowingly generating content promoting eating disorders, unlawful activities, graphic violence, sexually explicit conduct, or self-harm/suicide. Providers must establish a crisis-response protocol for at-risk users, including timely support, referrals, and parental notification for imminent risk. Data collected for crisis response must be used solely for that purpose. To prevent manipulation, AI chatbots must provide clear, periodic notices to child users that they are interacting with an AI, not a human. Providers are forbidden from designing chatbots to mislead children or foster inappropriate emotional dependence. Comprehensive parental settings are mandated, allowing parents to control memory use, data training, interaction preferences, usage limits, and feature access, with active promotion and notification of changes. The legislation strictly prohibits child-targeted advertising and the sale or sharing of children's personal information without verifiable parental consent. It also bans conditioning a child's use on such consent or on disclosing excessive personal information, and forbids deceptive design patterns that impair a child's or parent's autonomy or ability to use safety features. Providers must undergo annual independent audits by qualified, conflict-free auditors to assess compliance with child safety requirements. Audit reports are submitted to the Federal Trade Commission (FTC), with public summaries published by providers, and the FTC will publish aggregated findings and allow qualified researchers access to anonymized data. Violations are treated as unfair practices under the FTC Act, carrying civil penalties of $1,000 per user per violation, or $10,000 for willful violations related to sexual exploitation or false information, with the Act taking effect 180 days after enactment.