When Chatbots Start Acting Like Companions, Regulators Reach for the Brake Pedal
Italy and China are both circling the same hard problem: what happens when conversational AI is designed to feel human, especially for minors and other vulnerable users?
Not every chatbot is just a helpdesk tool. Some are built to remember context, mirror tone, and sustain a relationship-like exchange that can feel intimate rather than transactional. That design choice is now drawing regulatory attention in Italy and China, where the policy debate has shifted from simple content moderation to a broader question of product safety, transparency, and user protection.
Fast Facts
- A.C. 2813 is an Italian proposal centered on minors’ use of generative AI chat services.
- China has published measures aimed at anthropomorphic or emotionally interactive AI services.
- The policy themes include child protection, data handling, content control, and emotional dependence.
- These systems are treated as a distinct category, not as ordinary rule-based chatbots.
- The core risk is not only what the system says, but how it shapes trust and attachment.
TECHCROOK
From a technical perspective, the issue is a class of GenAI products that simulate ongoing human conversation. That matters because the risk surface is wider than toxic output alone. When a system is designed to sustain engagement, it can blur the line between tool and companion, which raises concerns around disclosure, age-appropriate design, retention of chat logs, and the handling of sensitive personal disclosures.
Italy’s A.C. 2813 appears to focus on that child-safety problem, but the exact compliance mechanics are not visible in the summary. China’s framework is more explicit in its regulatory intent: content controls, privacy safeguards, and limits aimed at reducing emotional dependence. Whether those measures are already in force or still moving through implementation should be checked against the full text before any hard claim is made.
For defenders and product teams, the lesson is straightforward. AI governance for companion-style systems cannot stop at prompt filters. It also needs disclosure that the user is speaking to a machine, age-aware access controls where minors are involved, careful log retention, and safety testing for manipulation, dependency, and self-harm scenarios. The available information supports a risk analysis, not a definitive claim that any one model is psychologically harmful by design.
Why this matters now
The bigger shift is architectural. A chatbot that feels emotionally responsive is not just a conversational interface; it is a trust system. That means engineering decisions about memory, persona, escalation paths, and session duration can become safety decisions. In practice, regulators are starting to treat these products more like vulnerable-user services than generic software.
At the same time, public information has not fully established the final scope of the Italian proposal or the exact legal status of the Chinese measures in the way a compliance team would need. That caution matters. The point is not to assume a universal rulebook, but to recognize that conversational AI is moving into a category where transparency, child protection, and data governance are becoming inseparable.
Conclusion
The lesson is bigger than one bill or one regulator. As AI systems become more humanlike, the hardest security questions are no longer only about model accuracy or content filters. They are about whether a product can create unhealthy attachment, hide its machine nature, or mishandle intimate data. For builders and defenders alike, the boundary between usability and manipulation is now a security control.
WIKICROOK
- Anthropomorphic chatbot: A conversational AI designed to sound or behave in a humanlike way.
- Generative AI: Models that create new text, images, audio, or other content from learned patterns.
- Age gating: Controls that restrict access based on a user’s age or age category.
- Data retention: The rules that determine how long conversation data is stored before deletion.
- Red teaming: Adversarial testing used to find safety, security, and misuse weaknesses before release.




