Introduction
Increasingly sophisticated generative AI chatbots are moving into one of the most sensitive areas of healthcare: mental health support. Consumers seeking to improve their mental health or well-being may now seek assistance from a multitude of online ‘therapy bots’ and related digital tools specifically designed to provide mental health or well-being support without the intervention of a human health professional. Consumers may also choose to interact with online services that do not specifically offer this expertise, but appear capable of providing it, including through AI companions and general-purpose generative AI chatbots. The use of AI for therapy has a historical precursor. Eliza, an early chatbot, was developed in 1966 by MIT computer scientist Joseph Weizenbaum to demonstrate the possibility of human–machine conversation (Weizenbaum, Reference Weizenbaum1976). The Eliza chatbot used a Rogerian psychotherapy technique, reframing users’ statements as questions (Weizenbaum, Reference Weizenbaum1976: 3). For some, these human–machine interactions illustrated the potential for machine therapists, a potential now being revisited. Others were not so sure. Weizenbaum himself warned against such uses, arguing that Eliza’s seemingly natural conversational ability would lead people to attribute non-existent powers of judgment to it. Weizenbaum also argued that there were certain things a chatbot ought not to do (Reference Weizenbaum1976: 269–270; Tarnoff, Reference Tarnoff2023), to which lawyers might add: at least not without regulation.
Renewed interest in therapy bots has been driven by a combination of factors, including a lack of accessible mental health support, the ability to deliver services directly to consumers via smartphone or computer, the language capabilities of generative AI and a general drive to automation. These factors mean that consumers can directly access a range of digital tools designed to provide mental health or well-being support through mindfulness exercises, symptom tracking and cognitive behavioural therapy. Yet, despite significant interest and investment, the merits of therapy via AI remain uncertain. Therapy bots and related digital mental health support tools are made available without the involvement of a mental health professional, who might otherwise guide consumers on appropriate use, and the value of the use, especially without such oversight, is uncertain. The developers of therapy bots and other direct-to-consumer digital mental health support tools often claim a ‘scientific’ basis for their products that randomised clinical trials have not comprehensively established. To some extent, this reflects the reality that clinical trials take time and may be outpaced by the rapidly evolving technology. In any event, direct-to-consumer mental health support tools often fall outside therapeutic goods regulation and the oversight this regime exercises over medical devices. Nonetheless, therapy bots and other direct-to-consumer mental health support tools raise other kinds of risks, including breaches of confidentiality, erosion of privacy, low levels of accuracy, and bias against users who already experience unequal access to resources. Like any consumer product, the services of therapy bots risk being over-promoted by misleading marketing and undermined by overreaching exclusion and limitation clauses.
Whatever their therapeutic merits, the market for specifically designed therapy bots is being challenged by other AI-informed offerings. Recent studies suggest that consumers are seeking mental health support in AI companions, which are chatbots marketed to provide friendship, romance or companionship through avatars of attractive humans, fantasy figures or anime characters. Further, consumers are using general-purpose generative AI chatbots, such as ChatGPT, Gemini, Grok or Claude, to provide personalised mental health support and advice, bypassing completely the more specialised options. Unlike the tools designed for mental health support, AI companions and general-purpose generative AI chatbots do not purport to provide established clinical or mindfulness support. They do not claim, and often explicitly disclaim, mental health expertise, although they may make suggestions about such matters. Instead, they are trained to prolong conversation by engaging and pleasing the user (Gilbert, Reference Gilbert2025). This combination of a lack of expertise and a tendency to sycophancy (Cheng, Reference Cheng2026b) may have adverse health consequences in the longer term. Notably, AI companions and general-purpose generative AI have been linked to instances of self-harm and suicide by providing inappropriate responses to users or even actively encouraging such conduct (Duffy, Reference Duffy2025).
Any effective response to concerns about AI used in mental health must come from the co-ordinated efforts of mental health professionals, technologists and people with lived experience. Law may also play a role. Until recently, digital tools offering mental health support, whether as a dedicated service or as part of a more general offering, have not attracted any sustained attention by relevant regulators. As with Eliza, therapy bots have been seen as largely innocuous and potentially helpful. They have not been subject to regulatory scrutiny, leaving the possibility of cumulative harms unaddressed. That position is changing. The role of AI companions and general-purpose generative AI chatbots in multiple tragic suicide cases has drawn attention to the entire sector (Hall, Reference Hall2025b; De Freitas & Cohen, Reference De Freitas and Cohen2025). Calls are growing for new laws to regulate AI chatbots that specifically or incidentally address mental health as part of their service (American Psychological Association, 2025). However, identifying an effective regulatory response is not straightforward.
One difficulty is that direct-to-consumer therapy bots and related digital mental health support tools span several legal categories: therapeutic goods, AI, online safety, data protection and consumer protection. Critical commentary has tended to address the issues of concern that arise in one category, such as privacy or therapeutic effect, without galvanising a whole-of-sector response (Wheeler, Reference Wheeler2025). The growing use of AI companions and general-purpose generative AI chatbots for mental health support further complicates the regulatory response. Protecting consumers from general-purpose generative AI chatbots providing inappropriate advice in a field in which they do not claim expertise is very different from demanding clinical validation of digital tools specifically designed for mental health support. Moreover, while the design and purposes of the various offerings differ, they may be poorly distinguished from the consumer’s perspective. Consumers may not be concerned with the credentials of an AI-informed service provided it appears to work for them. This means interventions that are well targeted in isolation may fail to improve the overall landscape of AI used for mental health support, either because they do not address the full range of risks or because they fail to engage with consumers’ own experiences.
These varied considerations mean that no one legal (or policy) intervention is likely to provide an effective response to the many concerns about the risks of direct-to-consumer therapy bots or address the use of AI companions and generative AI chatbots for mental health support. Considering separately the different kinds of laws that might apply to therapy bots or companion AI will fail to address the full suite of integrated concerns. Yet even put together, it seems unlikely these various laws can be connected in a cohesive linear strategy. A different perspective is needed.
This Element suggests that a more effective approach to responding to concerns about direct-to-consumer mental health support tools, and the less specialised alternatives, lies in conceiving the relevant laws and regulators as a ‘regulatory network’ operating across the domain. A network perspective on regulation also means recognising other actors and institutions, such as mental health professionals, representative bodies and consumers, as part of that regulatory network (Drahos & Krygier, Reference Drahos, Krygier and Drahos2016). These stakeholders also influence the operation and understanding of digital mental health tools and the other available options for mental health support. The approach further means treating the relevant laws and responsible regulators not merely as a network but as a distributed network, in which different regulatory ‘nodes’ may respond to different kinds of risk at different points in time. This perspective enables an agile response to the affordances of therapy bots and other direct-to-consumer digital mental health support tools, rather than a one-size-fits-all approach to risks of harm.
In this regard, the challenges of developing an effective legal response to the opportunities and risks of direct-to-consumer therapy bots and related digital mental health support tools reflect the wider debate about how to regulate AI. It suggests that the AI debate should not focus exclusively on laws directed specifically at the technology. Nor should it become preoccupied with trying to shape existing laws to this new field of concern. Rather, tracing the interactions between laws, actors and institutions is necessary to ensure a coherent and effective response to concerns about this now largely ubiquitous technology. Implementing adequate legal safeguards around AI-informed tools also creates space to consider the social implications and limits of their use as matters of policy and values, without being distracted by the reactive need to address the immediate harms the tools may carry.
In the following discussion, Section 1 outlines the kinds of direct-to-consumer digital mental health support tools on offer and notes the key features of AI companions and general-purpose generative AI chatbots that might be used for mental health support. Section 2 examines the technology relevant to these domains. Section 3 examines the risks arising from therapy bots and related mental health support tools and the laws that address them. Section 4 brings these themes together to examine the impact of regulatory silos and the contrasting framework of distributed regulatory networks.
The analysis focuses on four key categories or ‘lenses’ of risk and response: therapeutic benefit, data protection, responsible AI principles and consumer protection. These categories have been chosen on the basis of their relevance to the question of how to regulate direct-to-consumer therapy bots and digital mental health support tools. Uncertain therapeutic benefit is often raised as a concern in analyses of these products, as are confidentiality and data privacy. Ethical or responsible AI considerations are increasingly considered important governance touchpoints in any AI deployment, especially where they are aimed at the public. Consumer protection matters are considered on the basis that the services of therapy bots are sold as consumer products and hence should meet the standards of safety and fairness expected in that domain.
In this analysis, the main focus is direct-to-consumer mental health support tools, especially therapy bots. Companion AI and general-purpose generative AI chatbots are considered in so far as they are being used for mental health support, but the wider concerns about these offerings, such as misinformation and their particular risks for children, are not discussed. As the Element is primarily about legal regulation, its treatment of mental health, therapeutic benefit and technology informing the relevant tools is necessarily descriptive rather than clinical.
1 Therapy Bots: An Overview
Consumers today have a wide-ranging choice of digital tools promoted directly to them for the explicit purpose of improving well-being or reducing symptoms of poor mental health, such as anxiety or sleeplessness. Consumers can also purchase AI companion services that, in offering ‘friendship’ or even romantic attachment, implicitly promise to reduce loneliness, a known precursor to poor mental health. General-purpose generative AI chatbots, which generate text or image outputs in response to users’ prompts, present another readily available and apparently insightful source of mental health support and advice. This Section explores the reasons underlying demand for digital mental health support, the services being offered and the technologies informing those services.
1.1 Reasons for the Interest
The proliferation of direct-to-consumer therapy bots – and the use of AI companions and general-purpose generative AI chatbots for mental health support – is not entirely surprising given the unmet demand for traditional mental health services in many countries. Considerable investment in and use of online options for consumers seeking support underlines this unmet need and the urgency of attention being given to the growing domain of digital mental health support.
1.1.1 Unmet Demand
Deloitte reports that the COVID-19 pandemic exacerbated mental health concerns and triggered declines in well-being, with a dramatic rise in the prevalence of depression, anxiety, post-traumatic stress symptoms and stress (Aiyer et al., Reference Aiyer, Bucaille and Westcott2021; Clark & Boulos, Reference Clark and Boulos2022: 8). The World Economic Forum estimates that over 970 million people worldwide live with a mental illness (Klopper, 2025), while the World Health Organisation estimates more than one billion people worldwide live with a mental health condition (World Health Organisation, 2025: vii). Accessing professional mental health support is often difficult, slow and costly (Heaney, Reference Heaney2025; Hickie, Reference Hickie2023; Stringer, Reference Stringer2023), for example, only one in ten people with depression worldwide receive adequate treatment (World Health Organisation, 2025: viii). The economic costs of poor mental health are predicted to exceed $16 trillion by 2030 (Klopper, 2025). The issue is particularly acute for young people: the prevalence and impact of poor mental health are increasing at an alarming rate, yet only a small proportion of young people receive appropriate care (McGorry et al., Reference McGorry, Mei and Dalal2024).
In this context, the appeal of developing chatbots and related digital tools for mental health support is clear (World Economic Forum and Deloitte, 2021). Since the advent of the mobile phone (Flore, Reference Flore2023: 33), digital mental health interventions have expanded in both voluntary and coercive settings (Bossewitch et al., Reference Bossewitch, Brown and Gooding2022; Gooding, Reference Gooding2019). In voluntary settings, direct-to-consumer digital mental health support tools operate in different ways. Some link consumers with a mental health professional (e.g., 7 Cups; BetterHelp), while others are designed for use within a professional mental health counselling service (e.g., SilverCloud; Thrive). Others support diagnosis and treatment advice by mental health professionals, such as through experiments in digital phenotyping (Tekin, Reference Tekin2021: 450). Finally, and the focus of this Element, specifically designed therapy bots provide mental health support directly to consumers, while the more general offerings, AI companions and generative AI chatbots, may also be used by consumers for mental health support.
1.1.2 Growing Investment and Use
The numbers involved in the direct-to-consumer digital mental health support market are not trivial. In 2021, the American Psychological Association calculated that app stores offered 10,000 to 20,000 products expressly purporting to provide mental health support (The Economist, 2021; World Economic Forum and Deloitte, 2021: 5). In 2025, Deloitte observed that $10 billion had been invested in innovative mental health and well-being companies since 2020 (Gates, Reference Gates2025).
The figures for AI companions are also impressive. In 2025, there were 337 active for-profit AI companion apps worldwide, which had been predicted to generate over $120 million by the end of that year (Perez, Reference Perez2025). Use of these products is rising. The Economist reports a 2025 survey finding that 42% of high school students had interacted with, or had a friend who had interacted with, an AI as a friend, and 18% as a romantic companion (Economist, 2025a). Character.AI alone is reported to have 20 million active users in 2025 (Economist, 2025a).
Consumers are also seeking mental health support from general-purpose generative AI chatbots, such as ChatGPT, Gemini or Claude. A 2025 study reported that 13.1% of a representative sample of young adults in the United States used general-purpose AI chatbots for mental health advice (McBain et al., Reference McBain, Bozick and Diliberti2025). Increased reliance on chatbots for mental health support among young people has also been reported in the United Kingdom (Hall, Reference Hall2025a) and Australia (Cross et al., Reference Cross, Bell and Nicholas2024).
Whether due to their greater conversational engagement or their less demanding approach to mental health, general-purpose generative AI chatbots and companion AI may be outpacing purpose-built therapy bots and other direct-to-consumer digital mental health support tools in delivering mental health support. The Economist reports that
25% of survey respondents had used AI for therapy or would consider doing so. Of those who had turned to AI for therapy, 74% had used ChatGPT, while 21% had used Gemini; 30% had used Meta AI, Grok, Character.AI, or another general-purpose chatbot. Just 12% had used an AI tool specifically designed for mental health work.
Although these various products differ in the support they offer to provide for well-being or good mental health, as the next Section discusses, the underlying technologies are likely similar, albeit with varying guardrails.
1.2 The Services Being Offered
As Figure 1 indicates, the service provided by tools designed specifically for digital mental health sits very close to the use that may be made of less specialised offerings, namely: companion AI and general-purpose generative AI chatbots (Figure 1).
Kinds of services being offered

The following Sections describe in more detail the services provided by direct-to-consumer mental health support services, as well as the service offered by companion AI and general-purpose generative AI chatbots relevant to mental health support.
1.2.1 Digital Tools Specifically Designed for Mental Health Support
Digital mental health support tools use web and app-based interfaces – including recommendations, dashboards and, increasingly, chatbots – to provide services relevant to mental health support. Some of the popular or commonly discussed direct-to-consumer mental health support tools and their self-described service are listed in Table 1.
| Name | Service | Marketing description used to promote the product |
|---|---|---|
| Calm | Meditation and mindfulness recommendations | ‘Our goal is to help you improve your health and happiness’ (Calm) |
| Headspace | Meditation and mindfulness recommendations | ‘Everyday support for a healthier, happier you’ (Headspace) |
| Apple State of Mind | Symptom and mood tracker | ‘Track your mental well-being by logging your moods and emotions, and by taking standardised mental health assessments to understand your current risk of depression and anxiety. If you have concerns about your mental health, consult a clinician’ (Apple State of Mind) |
| Bearable | Symptom and mood tracker | ‘Quick and easy symptom tracking for any chronic health issue or disorder. Discover what improves and worsens your symptoms so that you can find better ways to manage your health and well-being’ (Bearable) |
| aHead | Therapy bot | ‘The Duolingo for your emotional intelligence’ (aHead) |
| Ebb (Headspace) | Therapy bot | ‘Ebb is an empathetic AI companion that helps you navigate life’s ups and downs, anytime, anywhere’ (Ebb) |
| Flourish | Therapy bot | ‘Meet Flourish, your science based mental health wellbeing buddy’ (Flourish) |
| Elomia | Therapy bot | ‘Self-care for depression’ (Elomia) |
| MoodMission | Therapy bot | ‘An app for dealing with low moods, stress and anxiety’ (Moodmission) |
| Sensa | Therapy bot | ‘Your mental health is important, Sensa gives you the tools to help you improve it’ (Sensa) |
| Youper | Therapy bot | ‘Youper AI is your Emotional Health Assistant designed to help you feel your best’ (Youper) |
| Wysa | Therapy bot | ‘Mental health redefined’ (Wysa) |
As the descriptions in Table 1 show, it is not always clearly apparent what kind of service a direct-to-consumer mental health support tool provides. A review of popular tools available on the market suggests that they offer three main categories of service: mindfulness recommendations, mood tracking and, increasingly, therapy bots.
Mindfulness and meditation recommender tools provide curated recordings, videos and written content to support consumers in these practices. The tools may seem only loosely connected to mental health support. However, developers promote the close relationship between mindfulness and mental health, primarily in their capacity for reducing symptoms of poor mental health, such as anxiety or sleeplessness, with meditations, mindfulness techniques and general lifestyle advice.
Mood tracking tools allow consumers to record their experiences of mental health and then provide dashboards and other visualisations to assist them in tracking those symptoms. Mood tracking may be combined with monitoring physical health, notably, a service offered through the Apple Health app. Mood tracking and recommender tools, although tailored to the customer, are essentially static tools, providing resources with little interaction with the user, leading to interest in chatbots for mental health support.
Therapy bots use established clinical practices to support consumers in managing symptoms of poor mental health. A common support provided through therapy bots is cognitive behavioural therapy (‘CBT’). Cognitive behavioural therapy is a form of structured psychotherapy that emphasises identifying and replacing unhelpful thought patterns and behaviours with more adaptive ones. It is used to treat a number of mental health conditions, such as depression, anxiety and eating disorders (InformedHealth.org). The attraction of combining established therapeutic techniques with chatbot functionality is in providing an interactive conversational exchange that engages the user, as opposed to merely directing information at them.
Therapy bots purport to replicate clinical practice, and this means that their interactions with consumers are restricted to conversations that mimic established clinical practice. They do not ‘just chat’; they recommend. It appears that consumer users may prefer greater companionship and fewer dictates from their therapy bots. The retention rates of digital mental health tools are relatively low: studies have found that user engagement typically drops off after just fifteen days (Baumel et al., Reference Baumel, Muench, Edan and Kane2019; Adams et al., Reference Adams, Davies, Wattanatakulchat, Galante, Miller, D’Alfonso and Van Dam2026).
1.2.2 AI Companions
The phenomenon of AI companions refers to app or web-based chatbots that provide ‘friendship’ through text-based conversation and varying degrees of emotional, romantic and sexual intimacy (Purtill, Reference Purtill2023; Muldoon, Reference Muldoon2024). Consumers may create and interact with AI companions in a game-like virtual world experience using avatars they have chosen or designed. Some of the more well-known AI companions and their self-described service are set out in Table 2.
| Name of AI Companions | Self-description |
|---|---|
| Character.ai | ‘AI chat reimagined’ (Character.ai) |
| Chai.AI | ‘With our advanced technology, our chatbots think and reply like real characters, complete with authentic voices. … Whether you’re chatting with your favourite celebrity, a beloved character from a movie or TV show, or a historical figure, you’ll feel like you’re talking to a real person’ (Chai.AI) |
| Kindroid | ‘Your AI friend with lifelike memory, intelligence, appearances, voices and personalities’ (Kindroid) |
| Pi | ‘Pi, your personal AI: A Smart and Supportive Companion 24/7’ (pi) |
| Replika | ‘The AI companion who cares. Always here to listen. Always on your side’ (Replika) |
| Xiaoice | ‘在亿万⼈之中,我只属于你’ [among billions of people I belong only to you] (Xiaoice) |
As can be seen from Table 2, AI companions promote their capacity for lifelike interactions. While these interactions may have a purpose of entertainment, they mimic human companionship and may be used in much the same way that humans relate to friends or partners (Bernardi, Reference Bernardi2025). Studies have shown that AI companions are being used by consumers for online virtual or imaginary companionship and as a way of exploring social or sexual identity. AI companions are also being used as a resource for responding to relationship problems, loneliness or poor mental health (Cann, Reference Cann2025). This is a form of support that humans often look to from their friends. It is, therefore, perhaps unsurprising that consumers might also seek this kind of support from an AI companion. Indeed, from the perspective of consumers, the boundary between AI tools providing mental health support based on established psychological practices and offerings providing companionship may be highly porous.
Both specifically designed therapy bots and AI companions make claims to the kind of insights that might be seen as supporting mental health, at least in the vernacular sense, along with friendship, understanding or care. Notably, some AI companions promote their capacity to address symptoms of poor mental health. For example:
Feeling down, anxious, having trouble getting to sleep, or managing negative emotions? Replika can help you understand, keep track of your mood, learn coping skills, calm anxiety, work toward positive thinking goals, stress management & much more. Improve your overall mental well-being with your Replika!.
Conversely, therapy bots also promote humanlike interactions that bring them close to the space occupied by AI companions. For example:
We believe the future combines technology with a human touch to get the most effective and efficient outcomes.
An ‘empathetic AI companion [that allows users to u]npack relationship challenges, work stress, sleep issues, and more’.
The mixed messaging in these claims may be confusing for consumers: are they interacting with a lifestyle product with health benefits or a chatbot trained in established psychological techniques? Of course, AI companions only promote companionship. It is possible that consumers may expect a higher level of expertise from general-purpose generative AI chatbots.
1.2.3 Generative AI Chatbots
Outside the relatively specialised services provided by therapy bots and the imaginary friend-like services offered by AI companions, humans are turning to general-purpose generative AI chatbots, such as ChatGPT (OpenAI), Claude (Anthropic) or Gemini (Google), for mental health advice and support (Haensch, Reference Haensch2025; Hall, Reference Hall2025a; Wallace, Reference Wallace2025a). General-purpose generative AI chatbots are conversational programs powered by generative AI, which is based on large language models. The same models may inform other kinds of chatbots, such as those used specifically for therapy (see 2.2.1). The contrast is that general-purpose chatbots are not restricted to any one particular use.
For consumers, the attractions of using general-purpose generative AI chatbots for mental health may lie in a combination of factors. Generative AI chatbots are easy to access (Cross et al., Reference Cross, Bell and Nicholas2024: 6). They interact in a fluent and conversational style. General-purpose generative AI chatbots do not try to assist users to change their behaviours or suggest therapeutic practices (Wallace, Reference Wallace2025a). It is also possible that consumers hold unrealistic expectations about the level of expertise, responsiveness and care that can be expected from generative AI chatbots given their underlying technology.
2 What Kinds of Technologies Are Being Used?
For many specifically developed therapy bots and other direct-to-consumer digital mental health support tools, ‘AI’ is a key promoted feature of the offering. For example:
[We use] a combination of rule-based algorithms and large language modelling to listen and respond intelligently to the thoughts and emotions that you express. As well as listening and responding through conversation, Wysa also recommends skills and techniques that may be helpful for the particular difficulty that you are experiencing. These skills are evidence-based and aim to help you improve your mental resilience and well-being
[our] proprietary technology combines psychology and artificial intelligence to understand patients’ emotional needs and recommend evidence-based behavioural intervention.
Although the use of AI is often promoted by developers, the technology that actually underlies the service is rarely described in any detail, and indeed opacity is an issue across the field (Section 3.3.1). This lack of clarity may be for commercial reasons. The underlying technology is also no doubt regularly changing to keep up with more widespread advances in the field. Notably, however, transparency about the underlying architecture is important in identifying the kinds of risks therapy bots and related tools pose and the kinds of laws applying to them.
The following Sections consider the likely technologies used in direct-to-consumer therapy bots and the promoted features of the tools, as well as comparing companion AI and generative AI chatbots.
2.1 ‘AI’ as a Concept
‘AI’ is a nebulous concept and what is captured by the term in common use has changed as technology advances. At one time, the term was used to describe what are now viewed as simple hand-coded, decision tree-style algorithms. ‘AI’ has also been used to describe artificial general intelligence, as opposed to narrow AI, which surpasses human intelligence (Manning, Reference Manning2020). The term ‘AI’ may describe machine learning algorithms, which use statistical processing techniques to find patterns in large volumes of data from which predictions about future events, proclivities or behaviours can be made (Manning, Reference Manning2020). More recently, ‘AI’ has evolved to describe, almost exclusively, generative AI built on large language models, such as text-generating ChatGPT, Gemini or Claude.
The capacities and processes of these various technologies differ, and they may be subject to different guardrails or other protections for users. From the perspective of consumers using therapy bots or other digital mental health tools, the precise technology utilised is less important than the service being provided. Technical boundary-drawing should not distract from the fundamental need for the service to live up to its promoted performance capacity.
2.2 The Underlying Technologies
Therapy bots and other direct-to-consumer digital mental health support tools are commonly promoted on the basis of their capacity to provide personalised recommendations, which means individualised responses to entered information or interactive conversations with consumer users. The different kinds of systems underlying these products are considered in the following sections, noting that they may overlap, and tools may utilise more than one option.
2.2.1 Recommender Systems
Some direct-to-consumer digital mental health support tools rely on recommender systems to provide broadly relevant information to consumers about meditation, mindfulness or other healthy practices (see, e.g., Calm, sign up). The tools collect information about the user through an initial questionnaire and, typically, interactions between the tool and the consumer. This data may then be processed by a machine learning model to provide targeted recommendations based on inferences about the individual user’s likely preferences or interests (Chen & Nakamori, Reference 70Chen and Nakamori2021). For example, the Headspace mindfulness app is promoted as ‘the mental health app for every moment’, while the underlying technology is described as follows:
Machine learning chatbots are core to our user experiences by offering recommendations that engage our users with new relevant, personalized content that builds consistent habits in their lifelong journey.
2.2.2 Dashboards
Mood tracking tools rely largely on dashboards to represent information entered by consumers, often combined with recommendations relating to the patterns of behaviour or mood revealed by that information. Even more personalised insights into users’ preferences and emotional state might be gleaned from collecting biometric data. In particular, Apple offers an emotion tracking tool that combines insights from biometric data collected from the Apple Watch (Apple). This kind of data is no doubt highly valuable to the developers of the tool, in refining their services, developing new products, for research or commercial endeavour (see further Section 3.2).
2.2.3 Rule-Based, NLP and Generative AI Therapy Chatbots
Recommender systems simply provide content. Chatbots are software programs designed to decode written language and respond appropriately to questions, requests or statements. Chatbot technology allows real-time, responsive interactions with users. Modern chatbots vary in their language capacity (Onlim, 2024; Pierce, Reference 82Pierce2024).
Chatbots can provide a more interactive experience for consumers, including advice for better mental health and structured therapeutic interventions, such as cognitive behavioural therapy. Chatbots are becoming increasingly prominent forms of digital mental health support, including for example through aHead, Elomia, Youper, Woebot and Wysa. In 2025, the provider of recommendations for mindfulness practices, Headspace, introduced a chatbot, ‘Ebb’, for well-being and mindfulness support (Headspace, ‘Meet Ebb’). AI companions also make use of chatbot technology. For example, ‘Replika uses a sophisticated system that combines our own Large Language Model and scripted dialogue content to create more natural and engaging conversations’ (Replika, How Does Replika Work).
Chatbots themselves may operate in different ways. Some use rule-based programs to determine their response to statements made by the user, while others combine natural language processing, a form of machine learning, with rule-based systems (Adamopoulou and Moussiades, Reference Adamopoulou and Moussiades2020; Caldarini et al., Reference Caldarini, Jaf and McGarry2022) and, increasingly, deploy generative AI to inform text-based interactions.
Rule-Based Chatbots
Rule-based chatbots use word or pattern recognition in text that correspond to predefined categories of questions, requests or statements, called ‘intents’. The intent will trigger a predetermined response using rules based on if-then-else reasoning (Khanna et al., Reference Khanna, Pandey and Vashishta2015: 278). Eliza, mentioned at the start of this Element, was a rule-based chatbot. As described by Weizenbaum, ‘the program was constructed in a two-tier arrangement, the first tier consisting of the language analyzer and the second of a script’ (Weizenbaum, Reference Weizenbaum1976: 3). Decision-tree chatbots are a standard implementation of ‘rules-based’ chatbots, which prompt the user to select from one of several predefined questions or prompts, with each selection determining the follow-up question or prompt in the fashion of a ‘guided conversation’ (Pierce, Reference 82Pierce2024).
NLP Chatbots
Chatbots using natural language processing (‘NLP’) algorithms (e.g., Siri, Alexa and Google Assistant) use sophisticated statistical techniques to decipher patterns in language instead of relying on predetermined rules written by a human. These chatbots do not understand the language in the sense of deriving meaning from an utterance. Instead, they rely on natural language processing algorithms trained on large volumes of data in order to predict the ‘intent’ of a human utterance or prompt. At this point, they can provide a response based on predetermined rules or a more free-flowing response to the text based on generative AI. Generative AI has provided chatbots with greater language capacity and adaptivity. They can therefore provide a range of more fluent responses to a human’s prompt than rule-based chatbots.
Generative AI Chatbots
Generative AI chatbots are built on large language models and generative pretrained transformer techniques, which together allow for greater language capacity and the ability to generate novel outputs. However, this very generative capacity means that generative AI chatbots are more likely to generate inappropriate or incorrect responses to user queries, sometimes known as ‘hallucinations’. The risk of inaccuracy or inappropriate responses can be reduced through a combination of fine-tuning or guardrails placed on the AI. However, many of the generative AI chatbots made available on a free or for-fee basis are trained to prioritise user engagement, which leads to them being described as ‘sycophantic’. The combination of a tendency to err combined with a programmed goal of engagement clearly presents risks in mental health contexts and is demonstrated by the increasing numbers of legal actions against the developers of general chatbots and companion AI (Tech Justice Law Project and Social Media Victims Law Center, 2025). By contrast, rule-based approaches and guardrails go some way to ensuring that chatbot therapists respond in ways that are safe and appropriate. However, these restrictions make the chatbots less adaptive and responsive than generally available generative AI chatbots, and for this reason, potentially less attractive to users (Economist, 2025b).
Initially, many of the therapy bots, such as now defunct therapy bot Woebot (Darcy, Reference Darcy2023), as well as Youper and Wysa (Wysa, FAQ), relied on rule-based systems to ensure that the chatbot’s responses were kept within designated limits. With this approach comes a certain rigidity of response. Thus, a recent study of Wysa reported that users experienced limitations in the chatbots’ understanding of context and a rigid, repetitive conversation style (Chaudhry et al., Reference Chaudhry and Debi2024).
Advances in generative AI in retrieving information and providing naturalistic conversations have seen increasing reliance on this technology. In 2024, Wysa advised that ‘we are now integrating Gen AI into Wysa, both to meet user needs and to demonstrate how the risks associated with this technology can be addressed responsibly’ (Aggarwal, Reference Aggarwal2024). Recent entrants to the market, such as Therabot, explicitly refer to the use of generative AI, within appropriate guardrails for a more conversational experience (Economist, 2025b).
2.3 The Promoted Attractions of AI for Mental Health Support
In appealing to consumers, the commonly promoted attractions of therapy bots and other digital mental health tools are their accessibility, capacity for a personalised service and empathy or insight. These promoted features may be more influential in consumers’ decision-making about which tool to engage with than the actual technology utilised.
2.3.1 Accessibility and Ease of Use
Direct-to-consumer therapy bots and other direct-to-consumer digital mental health support tools are commonly promoted as offering an easy to use and accessible response to the otherwise unmanageable demand for mental health services. Improving access to psychotherapy was among the attractions attributed to Eliza: ‘If the method proves beneficial, then it would provide a therapeutic tool which can be made widely available to member hospitals and psychiatric centres suffering a shortage of therapists’ (Weizenbaum, citing Colby, Reference Weizenbaum1976: 5). Similarly, the developers of many current direct-to-consumer mental health support chatbots state a purpose of making mental health care ‘accessible for everyone’ (Youper). For example:
We recognised a critical gap in mental health care: while traditional therapy is invaluable, it’s not always immediately available when people need support. Our AI bridges this gap, providing immediate support while working alongside traditional mental health services.
At their best, direct-to-consumer therapy bots serve people who are not in crisis. This may in turn reduce demands on human mental health professionals, allowing them to respond to more complex or critical cases. These services can be delivered at relatively low cost, at any time and from any location. For some, the attractions of digital mental health support tools go beyond efficiency or accessibility. They may also appeal to consumers with low levels of trust in formal medical systems (Lucas et al., Reference Lucas, Gratch, King and Morency2014). Young people, in particular, may feel more comfortable receiving mental health support from a chatbot or app (Keirerleber, Reference Keirerleber2022). Tools that utilise generative AI offer the promise of personalised, expert and convenient support (Ghose, Reference 75Ghose2021). They appear to allow anonymity (consider whether the extensive data collection practices accompanying these tools genuinely allow this), seem empathetic, and are never judgmental.
These promoted attractions of direct-to-consumer therapy are in some ways amplified for AI companions and general-purpose generative AI. Not only are the latter options easily available; companion AI and general-purpose generative AI chatbots carry no agenda of encouraging the consumer to ‘work’ towards better mental health, they appear purely to entertain or serve. And they are sometimes said to ‘know’ the needs of the consumer user.
2.3.2 Personalisation
Therapy bots and other direct-to-consumer digital mental health support tools are often promoted for their capacity to provide a personalised response to consumers as opposed to the generic (and often static) information provided through online portals or webpages (Chen & Nakamori, Reference 70Chen and Nakamori2021; Robb, Reference Robb2024). Therapy bots, in particular, are promoted not merely as offering ‘off the shelf’ content but also as using technology to tailor material directly to ‘you’, the consumer.
For example:
[Ebb is] an empathetic AI companion that helps you navigate life’s ups and downs, anytime, anywhere.
Youper’s proprietary technology combines psychology and artificial intelligence to understand patients’ emotional needs and recommend evidence-based behavioural interventions.
This promoted capacity for personalisation in therapy bots may be more limited than the headline statements of the developers suggest, and may not correspond with consumers’ expectations.
Notably, the data profiles on which direct-to-consumer therapy bots and other direct-to-consumer digital mental health support tools rely are not drawn from the personal knowledge that might arise from the interactions that occur between health professionals and consumers. Instead, responses are based on statistical correlations between the individual user and the profiles or segments drawn from the training data to develop the digital mental health support tool. Thus, recommendations or predictions based on data profiles are only ever an approximation of what might be suitable for individual consumers because the data is merely a proxy for the attribute the tools are trying to predict (Hildebrandt, Reference Hildebrandt2022). Generative AI works in a similar way, because any response to a human prompt is based on probabilities learnt from the training data set not a deep understanding of language, or emotion. Nonetheless, the combination of an interactive conversation and personalised content may give rise to an impression that therapy bots ‘care’ about their consumer users.
2.3.3 Empathy, Expertise and Insight
Along with personalisation, the promotion for direct-to-consumer digital mental health tools often stresses the capacity of their chatbot offerings for empathy, expertise and insight. For example:
Think of us as your emotional companion, someone who’s there for you every day, not just in moments of crisis. We’re like that friend who truly listens, helps you untangle your thoughts, celebrates your wins, and gives you a gentle nudge when you need it. Our role is to support you in building emotional skills, forming healthier habits, and feeling more grounded in your daily life.
Ebb is an empathetic AI companion that helps you navigate life’s ups and downs, anytime, anywhere.
The marketing for AI companions similarly often emphasises their capacity for humanlike emotion. For example:
[designed to show] empathy and understanding
supportive, empathetic, and intelligent conversational AI.
Consumers may attribute similar characteristics even to general generative AI chatbots. Research by Myra Cheng et al. has found that US consumers ‘perceive AI as warm and competent’ (Cheng, Reference Cheng2026b).
Opinions may differ on whether humans should be turning to chatbots for mental health advice. Specialist therapy bots may provide useful mental health advice, as indeed may companion AI and general-purpose generative AI chatbots (Gilbert, Reference Gilbert2025). It is less clear they provide empathy or care. For a consumer, talking to a chatbot might feel like talking to a friend or therapist. But AI chatbots are neither friends nor therapists in the way those terms are normally understood. AI chatbots only ever mimic human manifestations of care, empathy or other interpersonal interactions; they do not feel them (Paterson, Reference Paterson2025). For consumers, mimicked emotion may not detract from the sense of connection they experience in interacting with a chatbot. Humans interacting with Eliza found the experience meaningful. Nonetheless, there may be normative objections to this kind of ‘fabricated’ interaction (Ciriello et al., Reference Ciriello, Hannon, Chen and Vaast2024; Sharkey & Sharkey, Reference Sharkey and Sharkey2021).
AI chatbots cannot exhibit the sort of genuine empathy that comes with friendship or the insight that comes with a genuine therapeutic relationship between a human health professional. It seems problematic and even misleading to suggest the contrary. Additionally, AI companions and generative AI chatbots are commercial products sometimes made available for a fee or at the cost of personal data collection for training, which must affect any loyalty they might show to the human consumer.
Relatedly, although they may purport to ‘care’, AI companions and general generative AI chatbots have no purported expertise in the field of mental health. Indeed, companion AI and generative AI chatbots have been criticised for failing to recognise and appropriately respond to suicidal ideation (Turc, Reference Turc2022; Daws, Reference Daws2020; Atillah, Reference Atillah2023; Xiang, Reference Xiang2023a; Duffy, Reference 72Duffy2024) or even encouraging such behaviours (Duffy, Reference Duffy2025; Chatterjee, Reference Chatterjee2025). Generative AI chatbots have a tendency to sycophancy, in the sense of reflecting back the apparent preferences of the user, which Myra Cheng et al. observe is harmful to ‘social judgment’ (Cheng et al., Reference Cheng, Lee and Rapuano2026a) and has led to reports of AI psychosis (Hudon & Stip, Reference Hudon and Stip2025; Moore et al., Reference Meese and Tan2026).
At this point in time when AI is relatively new, there is therefore considerable scope for humans to misunderstand the nature of their relationship with a chatbot therapist, who has neither insight nor empathy for the human, even if they are able to offer suggestions for better mental health that have some validity (Khawaja & Bélisle-Pipon, Reference Khawaja and Bélisle-Pipon2023). Weizenbaum himself worried that ‘if, as appears to be the case, the public’s attributions are wildly misconceived, then public decisions are bound to be misguided and often wrong’ (Reference Weizenbaum1976: 8). Perhaps the somewhat confused nature of the relationship between humans and AI therapy bots might be forgiven if these tools are providing significant therapeutic benefits. However, therapy bots carry a number of as yet unresolved risks and limitations.
3 Risks and Regulation for Therapy Bots
Specifically designed therapy bots might prove effective in providing assistance to consumers who are experiencing poor mental health or want to sustain a general sense of well-being. However, as yet, these effects remain to be securely established, even more so with AI companions or general-purpose generative AI. There are other risks of use as well, going beyond utility and covering failures in data protection, bias, error and one-sided contract terms that shift risk to consumers. All of these possible harms are concerning, but in many cases, there are laws and regulation that should mitigate the risks. As the following discussion shows, however, these regimes are infrequently and unevenly applied.
Part of the issue is that therapy bots, and other direct-to-consumer digital mental health support tools, operate across several key legal categories: therapeutic goods, confidentiality/data privacy, AI and online safety and consumer protection. These categories can be used as a lens for understanding the risks that the products may present for consumers and organising the various legal responses. It is useful to consider each category separately, and previous scholarly work has focused particularly on risks to privacy and of therapeutic benefit in the use of digital mental health support tools. However, this should not be taken to mean there is an impenetrable dividing line between the categories. Assessing the risks and benefits of the tools requires an understanding of their operation across legal categories. Additionally, as argued in Section 4, an effective regulatory response to the risks and opportunities of therapy bots must move beyond legal silos.
The next Section assesses the operation of therapy bots and related direct-to-consumer digital mental health support tools, as well as companion AI and general-purpose generative AI chatbots, through the lens of therapeutic benefit, confidentiality/data privacy, responsible AI and consumer protection. It also considers the application of relevant law in these categories.
3.1 Therapeutic Benefit
A first lens for considering the benefits and risks of direct-to-consumer digital mental health tools is therapeutic benefit. In making assertions about assisting with mental health in their marketing and promotional materials, the developers of therapy bots and other direct-to-consumer digital mental health support tools implicitly, if not expressly, represent that the tools are effective in reducing the symptoms of poor mental health or improving overall well-being. Certainly, cognitive behavioural therapy, commonly the underlying basis for direct-to-consumer therapy bots, has a strong evidence base in its core applications when delivered by trained professionals (Hofmann et al., Reference Hofmann, Asnaani, Vonk, Sawyer and Fang2012).
However, cognitive behavioural therapy does not always work well for consumers or for some conditions. It requires a close therapeutic relationship between consumers and therapists, as well as a commitment to the practice by consumers. The effectiveness of mindfulness practices as a response to symptoms of poor mental health is less well established, even when delivered in person, still less online (see, for example, the MYRIAD study of school-aged children (Kuyken et al., Reference 78Kuyken2022)).
It is possible that therapy bots and other direct-to-consumer digital mental health support tools will show a similar pattern of outcomes. It is also possible that the products work best when used in conjunction with human mental health professionals. The clinical results may also be different for digital tools used without human interaction or oversight. Human therapists may simply provide services with more insight and compassion than an artificial agent (Tasioulas, Reference Tasioulas2022: 237). In the context of mental health, Tekin notes that ‘[b]uilding a therapeutic alliance is a relational process, in which the therapist gives uptake to the patient’s concerns, and the patient feels recognized and cared for’ (Tekin, Reference Tekin2021: 456). Tekin is sceptical that ‘this type of alliance can be formed between a person and a bot’ (Tekin, Reference Tekin2021: 456). Achtyes et al. express concern that direct-to-consumer mental health chatbots may even have harmful consequences such as misdiagnoses and delayed treatment (Achtyes et al., Reference Achtyes, Glenn and Monteith2023: 265–266).
These observations do not rule out the possibility that well-designed direct-to-consumer interventions may play a role in improving access to mental health support in a way that is both safe and meaningful for consumers and professionals. However, they underline the importance of testing, review and oversight of the products.
3.1.1 Studies and Surveys
There is relatively little empirical or clinical evidence about the long-term performance of therapy bots and other direct-to-consumer digital mental health support tools. This may not be surprising given the products are relatively new to the market. But it does mean they should not be over-promoted by developers.
Clinical Studies of Direct-to-Consumer Digital Mental Health Tools
Several developers of digital mental health support tools seek to promote the effectiveness of their products by reference to ‘scientific’ backing in the form of clinical research studies. For example:
MoodMission’s [mindfulness exercises] are taken from scientific research, made accessible to you through the app, so you can learn exactly how what you’re doing is helping.
[Headspace mindfulness and mental health chatbot is] the leading mental health companion, but the only way to know if we’re truly accomplishing that is to measure, test, and study its impact. That’s where our research comes in.
These kinds of scientific support claims are commonly overstated, with headline statements exaggerating the probity of the findings. For example, mindfulness support tool provider, Headspace, refers to the benefits of meditation in responding to anxiety and regulating emotions as follows:
Anxiety is a cognitive state connected to an inability to regulate emotions … a consistent meditation practice reprograms neural pathways in the brain and, therefore, improves our ability to regulate emotions.
Notably, the study cited by Headspace in support of this statement did not involve meditation apps. It covered experienced meditation practitioners who, on average, ‘had 9.1 ± 7.1 years of meditation experience and practiced 6.2 ± 4.0 h per week’ as well as having participated in an ‘at least 1 week-long Insight meditation retreat, which entails approximately 10 h of meditation per day’ (Lazar et al., Reference Lazar, Kerr and Wasserman2005: 1894).
Published studies, external scientists, prestigious research organizations and our science team have shown Headspace can improve mental, emotional, and social health.
Some of the Headspace studies do report positive outcomes for app use, for example, in reducing mind-wandering (Bennike et al., Reference Bennike, Wieghorst and Kirk2017), producing compassion (Lim et al., Reference Lim, Condon and DeSteno2015) or reducing depression (Flett et al., Reference Flett, Hayne and Riordan2019) and stress (Bostock et al., Reference Bostock, Crosswell, Prather and Steptoe2018). However, there are limitations to these studies. Some were conducted by Headspace researchers, reducing their independence (Economides et al., Reference Economides, Martman, Bell and Sanderson2018. See also Cachia et al., Reference 69Cachia2025, discussing Flourish). Other Headspace studies involved small, discrete cohorts of users or produced only qualified findings (Wylde et al., Reference Wylde, Mahrer, Meyer and Gold2017) or negligibly positive outcomes (Noone & Hogan, Reference Noone and Hogan2018). The published Headspace studies typically only tracked app use over a short period of time.
The marketing for other direct-to-consumer digital mental health support tools that purport to rely on ‘scientific’ studies show similar limitations (Economist, 2025b). Systematic reviews of published studies on the digital mental health support tools have found only limited effectiveness (Marshall et al., Reference Marshall, Dunstan and Bartik2020). Chandrashekar reports that, for products treating depression and anxiety for which clinical trials that have been conducted, meta-analysis of outcomes reveals that there are benefits for particular cohorts and not others: ‘smartphone-based therapies yield the greatest benefits for individuals with mild to moderate, rather than major, depression’. As for ‘anxiety-focused mobile tools’, these ‘delivered the greatest reductions in anxiety symptoms when paired with face-to-face or internet-based therapies’ (Chandrashekar, Reference Chandrashekar2018: 2; see also Cross et al., Reference Cross, Nicholas and Bell2023: 302–305). Goldberg et al. suggest that, at most, existing studies showed a ‘proof of concept’:
Taken together, these results suggest that mobile phone-based interventions may hold promise for modestly reducing common psychological symptoms (e.g., depression, anxiety), although effect sizes are generally small and rarely do these interventions outperform other interventions intended to be therapeutic (i.e., specific active controls).
A further concern that has been raised about many of the studies of direct-to-consumer digital mental health support tools is their omission of any ‘discussion of adverse events’ that might cast doubt on ‘the safety of these interventions’ (Goldberg et al., Reference Goldberg, Lam and Simonsson2020: 15). Torous et al. suggest that adverse outcomes for consumers using the tools are not well reported (Torous, Reference Torous, Linardon and Goldberg2025: 159. Also Department of Health, 2021: 10). Direct-to-consumer digital mental health support tools have not been well investigated for use by people from often marginalised groups, such as from linguistically or culturally diverse communities and neurodivergent people, nor developed with users (Balcombe, Reference Balcombe2026). Furthermore, such products do not themselves address the social conditions that may create and escalate mental distress in their users (Mathias, Reference 79Mathias2022; Tekin, Reference Tekin2021: 457).
User engagement with digital mental health support tools has been shown to be difficult to sustain and tends to decline in a matter of weeks (Torous et al., Reference Torous, Linardon and Goldberg2025). Lowrey (Reference Lowrey2021) notes that in the reported studies, app ‘attrition rates are high’. Research by Valentine et al. (Reference Valentine, Hinton and Bajaj2025) found that there was no standardised measure for tracking engagement. The drop in engagement is most apparent with static tools, mood tracking and recommender apps (Baumel et al., Reference Baumel, Muench, Edan and Kane2019), perhaps due to a level of user frustration over their lack of responsiveness (Haque & Rubya, Reference Haque and Rubya2022). Thus, for example, one study found that ‘nearly half of the participants allocated to the popular Headspace and Smiling Mind apps reported never using the app again after ten days’ (Torous et al., Reference Torous, Linardon and Goldberg2025: 163, citing Flett et al., Reference Flett, Hayne and Riordan2019).
It may be that therapy bots are more engaging and effective. A randomised controlled trial of generative AI therapy bot, Therabot, found sustained engagement over four weeks and positive outcomes for participants over eight weeks in reducing the symptoms of a major depressive disorder (Heinz, Reference Heinz2025), while recognising the need for further research (see also Gratch & Essig, Reference Gratch and Essig2025). However, to the extent that the focus of even generative AI therapy bots is therapeutic interventions, such as CBT, they still may prove less compelling to users than the more conversational, and even sycophantic, interactions with an AI companion or general-purpose generative AI chatbots (Wallace, Reference Wallace2025a).
Overall, Torous et al. conclude that:
Despite significant advancements …, recent industry failures and research critiques have highlighted the need for more rigorous approaches, including use of AI placebos in controlled trials, generalizable and pre-registered chatbots, and greater transparency in data sharing. Much of recent research has focused on how a particular app or artificial intelligence program might work but has not produced mechanistic and generalizable evidence that the field can utilize to build a strong scientific base.
In many therapeutic contexts, these kinds of studies would be demanded to establish the efficacy and safety of a product. They would be relevant to being assessed and approved by the therapeutic goods regulators responsible for drugs and diagnostic devices. However, as discussed in 3.1.2, therapy bots and other direct-to-consumer mental health support tools have largely been treated as outside therapeutic regimes, largely because they continue to be viewed as low-risk ‘lifestyle’ products. Even if more is demanded, random clinical trials take time and may fail to overcome the lack of user overall engagement with direct-to-consumer digital mental health support tools. In the interim, specialised products may be overtaken by interactions with AI companions or general-purpose generative AI chatbots, for which there is no expectation or promise of clinical efficacy.
Studies on the Impact of AI Companions
AI companions may be viewed as a fantasy world encounter, but they are promoted as having real-world impacts such as companionship or reducing loneliness (Reddit, Replika Official and Reddit, Stanford Study). The empirical literature on the mental health effects of AI companions is nascent but developing in response to well-publicised examples of AI companions encouraging self-harm. A study by Zhang et al. suggested companion AI use is associated with lower levels of well-being, especially for already isolated individuals, concluding they are not a substitute for human connection (Zhang et al., Reference Zhang, Zhao and Hancock2025). De Freitas et al. found that AI companions can help alleviate loneliness but observed that, in the longer term, the apps may create dependencies that work against well-being (De Freitas et al., Reference De Freitas, Oğuz-Uğuralp, Uğuralp and Puntoni2026; also, Maples et al., Reference Maples, Cerit, Vishwanath and Pea2024). The longer-term outcomes of these interactions are less clear (Economist, 2025b). Several studies have found that AI companion apps and generative AI chatbots are poor at identifying and responding to signs of distress or suicidal ideation in users (De Freitas et al., Reference De Freitas, Uğuralp, Oğuz-Uğuralp and Puntoni2024; Pichowicz, Reference Pichowicz, Kotas and Piotrowski2025). While there is little empirical or clinical research on the impact of generative AI chatbots used for mental health, at the time of writing reports of AI induced psychosis have begun to emerge (Hudon & Stip, Reference Hudon and Stip2025; Moore, et al., Reference Moore2026).
3.1.2 Regulating Therapeutic Products
Therapeutic devices, such as products used to diagnose and treat medical conditions, are typically subject to safety protocols imposed by drug or therapeutic goods laws. These laws are in turn overseen by designated regulators such as the Therapeutic Goods Administration (‘TGA’) in Australia, the Medicines and Healthcare Products Regulatory Agency (‘MHRA’) in the UK or the Food and Drug Administration (‘FDA’) in the US.Footnote 1 The goal of regulators is to ensure that medical devices are effective and safe before entering the market. Product safety requirements for medical devices are scaled according to the assessed risk of the product, with higher risk products requiring clinical evaluation (e.g. randomised controlled trials), documentation and monitoring.Footnote 2
The therapeutic device regulators in the US, UK and Australia have tended to exercise only a light-touch regulatory approach to digital mental health support tools. In this regard, the approach taken by the FDA in the US has been influential, given that many therapy bots have been developed in that jurisdiction (Duggal et al., Reference Duggal, Brindle and Bagenal2018; Wallace & Pestaina, Reference Wallace and Pestaina2023). In 2016, following changes to its constituent legislation, the FDA stated it would not regulate devices intended only ‘for maintaining or encouraging a healthy lifestyle’ (Food and Drug Administration, 2016, 2026).
So-called ‘wellness’ tools have typically been subject to minimal regulatory oversight on the ground that they do not fall within the FDA category of medical device (Shuren et al., Reference Shuren, Patel and Gottlieb2018). This approach has been justified by the FDA on the grounds that ‘active FDA oversight would provide little to no public health value while unnecessarily delaying patient access to potentially beneficial technologies’ (Shuren et al., Reference Shuren, Patel and Gottlieb2018: 338). This approach has been criticised. Scatterday argues that it represents a policy decision to ‘decrease the “regulatory burdens” associated with app development to drive marketplace innovation and technological advancement’ (Reference Scatterday2022: 653; see also, Taylor, Reference Taylor2021: 2281). Mattioli observes that since the FDA ‘put its waiver into effect, makers of unapproved apps branded as “wellness” tools rebranded their products as medical interventions’ (Mattioli, Reference Mattioli2021: 10). Torous et al. observe that ‘well over 99% of publicly available mental health related apps [are] marketing themselves as well-being and not health devices’ (Torous, Reference Torous, Linardon and Goldberg2025: 160).
A similar approach has been taken in Australia and the UK. In both jurisdictions, tools that are considered ‘health products’ (Department of Health, Disability and Aging, 2025), and do not involve ‘assessing risk, diagnosing, predicting, monitoring, treating or preventing mental health conditions and/or symptoms’, are outside the ‘software as a medical device designation’ (MHRA, 2025: 10). Examples of such tools include sports performance (MHRA, 2025: 8, 17) and healthy sleep monitoring (MHRA, 2025: 16). In Australia, there is an exception for tools that are ‘based on established clinical guidelines that are referenced and displayed in the software in a manner that is reviewable by the user’ (Department of Health, Disability and Ageing, 2024).
More recently, the FDA has addressed the interest in using generative AI to inform mental health support tools, and the rise of AI therapists. In 2025, the FDA committed to ongoing oversight recognising that:
The utilization of generative AI within digital mental health medical devices may offer unique benefits to patients and public health, but their use and adoption also comes with specific risks and complexities that necessitate careful consideration of effective and tailored approaches to regulatory oversight.
The UK regulator has released guidance that includes considering the level of functionality of a mental health tool in classification for the purposes of the regulatory regime (MHRA, 2025: 13). This means a tool using a chatbot for interactions will have higher functionality, and hence more stringent oversight, than a tool that provides information as fixed text (MHRA, 2025: 22–23). In Australia, the TGA recommended a review into digital mental health tools using AI, considering that the current exclusions from regulation may no longer be appropriate (Department of Health, Disability and Ageing, 2025). In the UK, regulatory guidance considers promotional material in characterising the device as falling inside or outside the ‘software as a medical device regime’ (MHRA, 2025: 8, 17), and this has also been suggested in Australia (Department of Health, Disability and Ageing, 2025: 13). It is clear that more research and clinical evidence on the efficacy and safety of digital mental health tools in responding to anxiety and depression is required (Torous et al., Reference Torous, Linardon and Goldberg2025). Such research takes time and, in the interim, there is still a need for the products to be acceptably safe.
In this light, statements that the products produce genuine therapeutic or clinical benefits should be viewed with caution. Therapy bots and other direct-to-consumer digital mental health tools are not mediated through trained health professionals who could explain the limitations of the underlying studies or assess whether the product is suitable for a given user. This context may justify demands for care in promotional statements, or even support concerns that some promotional statements pointing to qualified health benefits are misleading. This is a topic that is considered in more detail in Section 3.4.2. The absence of a medical practitioner in providing mental health support also raises issues of privacy and confidentiality, along with data protection.
3.2 Data Privacy and Confidentiality
A second lens for considering the risks, and legal/regulatory responses, associated with therapy bots and other direct-to-consumer digital mental health support tools is data privacy and confidentiality. Mental health support tools not only typically sit outside therapeutic goods regimes; because they are provided directly to consumers, they also fall outside the stringent legal and ethical duties of confidentiality that attach to therapists. This in itself may surprise consumers, although it may still be possible to argue that information provided to a therapy bot should be treated as confidential as this was the obvious intention behind the disclosure.
The harms that may arise from voluminous data collection, insecure storage and broad data sharing practices, such as reputational, psychological, autonomy and discrimination harms (Citron & Solove, Reference Citron and Solove2022), clearly have a resonance in the context of mental health support tools. Here the sharing, leaking or theft of sensitive personal mental health data will clearly be unsettling to individuals, or may place them at personal or professional risk (see Clifford et al., Reference Clifford, Richardson and Witzleb2022). Data sharing practices raise legitimate concerns about the risk of discrimination, such as in insurance, employment or access to government benefits (World Economic Forum and Deloitte, 2021: 17–18; Steindl, Reference Steindl2023). Concerns about such risks may reduce trust in such tools for the future, even where they may potentially be helpful (see Dove et al., Reference Dove, Taylor and Richardson2026). Data protection law provides some response; although, as discussed in Section 4, it works best in co-ordination with other regimes.
This Section considers practices that intrude on privacy or confidentiality and the regulatory responses available.
3.2.1 Data Practices
Any product claiming to provide personalised recommendations will rely on collected and processed personal data to some degree, and in the case of therapy bots and other digital mental health support tools, potentially sensitive personal data about health-related matters. Indeed, this lies at the heart of these kinds of self-monitoring or self-help tools. Ghose (Reference 75Ghose2021) describes health support tools generally as leading to ‘the “quantified self”, a phenomenon where individuals start tracking their behavioural, physiological, biological, and other kinds of health markers’. Flore (Reference Flore2023: 39) describes mental health and well-being tools as enacting ‘self-care in a moment of habitual data tracking and monitoring’. Consumers engaging with such tools will understand they are sharing sensitive personal data and have an expectation that data will be kept securely and stored discreetly. They may not understand the breadth of data being collected nor the uses made of that data.
Data Collected
Most digital mental health support tools collect personal information such as the user’s name, email address, age and gender directly from the user. Some mental health, well-being and mindfulness tools also collect data from third-party tools, social media and online conduct. For example, Calm (a mindfulness app) collects data from advertising partners, research platforms, business contact databases, geolocation data, internet activity and browsing behaviour; and draws inferences from this data on a user’s product interests to obtain purchasing insights (Calm Privacy Policy). Youper (a mental health chatbot) collects user files such as photos and videos, lists of friends, likes and other social media activity to create a detailed profile of their users (Youper, Privacy Policy).
The breadth of the data collected may come as a surprise to many consumers, who may reasonably expect their profiles to be limited to information that they have directly provided and not the inferred information from their device use or social media interactions. These sources of data may raise concerns about the accuracy of the individual consumer profile created and undermine consumers’ control over the data they provide about themselves.
Data Shared
The developers of therapy bots and related digital mental health support tools may not actually sell data, and most probably do not;Footnote 3 but data sharing practices are widespread in the field. A number of tools use personal data for targeted marketing, including disclosing that information to marketing companies. For example, Calm, Youper and Headspace’s privacy policies reveal that personal data is used for marketing, which allows for user targeting. Targeted advertising is problematic in the context of mental health support. This is because the very sending of advertisements promoting mental health support may conceivably trigger symptoms in those experiencing poor mental health. Such advertising may also employ insights revealed by users to manipulate their preferences with the aim of encouraging them to buy more products provided by the company or its affiliates. Users may opt out of targeted advertising by changing their preferences on Google or on social media, but this is not a preferred ‘privacy by design’ approach, which would instead require an opt-in approach to targeted advertising.
Some digital mental health support tools offer the option for a sponsor, such as an employer, school or university, to provide the app to its employees or students for free or at a reduced rate.Footnote 4 The quid pro quo of this arrangement is that those tools may share data with the third-party sponsors. For example:
In limited cases, we may provide certain personal information to your Benefit Sponsor, including your name, email address, your registration date, and the date on which you last used our Platform. Generally, we restrict this sharing to not include specific details of your in-app activity or any details about your use of Services, like therapy. This restriction may not apply where sharing some of your activity is necessary for your treatment, payment, or healthcare operations such as if your Benefit Sponsor is your other healthcare provider, health insurance provider, or health plan).
Sometimes, your Institutions or their appointed representatives might share or ask you to share your personal data with the app, like your contact details, so we can offer you our services. Where required by your Institution, and without affecting your rights, We [sic] may also share your usage and safety data with them.
This degree of sharing may be beyond consumers’ expectations, and if understood, may reduce consumers’ willingness to use the tool under workplace plans.
Many of the privacy policies of therapy bots and related tools state that consumers’ data will be shared for research purposes, which are then used to promote the quality of the product (Headspace, Privacy Policy). Research based on app data may have many benefits to consumers, such as improving understandings about the role of such tools in mental health and improving their efficacy. There is also interest in using data from smartphone interactions for digital phenotyping, which uses the contextual data collected from ubiquitous computing methods (such as smartphone interactions) to ‘objectively monitor mental health’ (Moura et al., Reference Moura, Teles and Viana2023). Consumers may feel comfortable with some of these uses and not others. The term ‘research’ reveals little about the scope of the intended use of the data. Moreover, it gives little indication of how and by whom the research may be done. Universities typically mandate that organisations must follow certain guidelines when using individuals’ personal data for medical research (National Health and Medical Research Council, 2024). Yet Kemp (Reference Kemp2023) argues that, in the context of ‘femtech’ tools for ovulation and fertility tracking, sharing for ‘research’ purposes is an ambiguous phrase that does not guarantee that the data will be used for research approved through the ethics procedures used by publicly funded research institutions and universities.
In most cases, only de-identified or anonymised information and aggregated data are shared with researchers and sponsors; but even this use may cause discomfort to some users. It is not clear from the privacy policies what methods are used to anonymise or de-identify data. De-identification typically only involves the removal of that information which meets the criteria of ‘personal information’. Other identifiers, such as IP address or information ‘relating to an individual’ that would enable easy identification, are not removed from the shared dataset (Kemp, Reference Kemp2023: 18). Additionally, re-identification of anonymised data is recognised as an increasingly straightforward process, particularly with smaller data sets or for individuals who are outliers in the data (Culnane et al., Reference Culnane, Rubinstein and Teague2019; Hern, Reference Hern2019). Aggregation of data is also not free from risk for consumers. Aggregation allows third parties to drive insights into predicted behaviours and preferences (Parker et al., Reference Parker, Halter, Karliychuk and Grundy2019a: 198–199), which can then be used to price consumer products and determine access to goods and services (Pasquale, Reference Pasquale2015: 206).
3.2.2 Data Privacy Laws
Consumers of therapy bots and related mental health support tools may have some protections against harms arising from data breaches, unauthorised sharing or other misuse of personal information under data protection legislation. As in other areas, one functional limitation of these measures lies in consent, which may legitimate data collection despite being obtained through arguably manipulative practices.
Private Rights of Action
There are a number of options for private rights of action by consumers of therapy bots in circumstances where their personal data has been misused. Consumers may be able to pursue private rights of action under data protection regimes, privacy torts or actions for breach of confidence, which some argue can be drawn on to formulate a nascent approach to fiduciary-like duties held by data controllers (Dove et al., Reference Dove, Taylor and Richardson2026). Where the privacy policy does not match actual practice, consumers may have claims for misrepresentation, as well as being supported by possible regulator action. This strategy has already been successful against digital platforms (see, e.g., Fair, Reference Fair2019; Paterson et al., 2024) and games provider Fortnite (FTC, 2022). In 2023 the FTC issued a proposed order banning BetterHelp, which provides an online counselling service, from sharing consumers’ health data for advertising contrary to the terms of its own privacy policy (FTC, 2023b). This followed enforcement action in 2021 against Flo Health, an app for tracking menstrual and fertility cycles, for sharing data with third parties contrary to its privacy policy (FTC, 2021b). However, the issue in this context arises less from unauthorised data sharing than from overreaching privacy policies that may allow such conduct.
Consent and Deceptive Design Techniques
Many developers of therapy bots and related digital mental health support tools disclose in their privacy policies that they collect data from a variety of sources and list the ways in which that data may be shared or used (albeit in sometimes vague terms). The privacy policies seek consent to these practices from consumers at the time of signing up. Seeking consent reduces the threat of enforcement action by regulators for unauthorised sharing of personal data. However, it is unlikely to inform the decisions of consumers (Federal Trade Commission, 2021a). As this information is only disclosed in the fine print of a privacy policy, consumers may not be aware of their support tool’s data practices. This means that when answering questions about their mental health, sleep cycle and productivity patterns, consumers may not realise this sensitive information will be collected, used and shared, including potentially with employers or for training generative AI chatbots. There should be greater clarity from mental health and well-being tools about their sharing practices and the opportunity for users to opt out of these practices, or better still, to opt in. For example, it may be useful to implement a pop-up notification that informs consumers, at the point of interacting with certain features, about the nature of the data they may be sharing with the app and seeks their consent to process such information.
There is also a prevalence of ‘deceptive design’ techniques (Consumer Policy Research Centre, 2022; Norwegian Consumer Council, 2018) in the user interfaces of therapy bots, and other direct-to-consumer digital mental health support tools, which may amplify concerns about overreaching data collection and barriers to consumers who seek to leave these platforms (Ananthapadmanaban & Paterson, Reference Ananthapadmanaban and Paterson2023). For example, the sign-up processes for some tools are overreaching in exploiting the ‘free trial’ period, bundling or inferring consent or using dark patterns to nudge users attempting to unsubscribe against following through on this decision. These problematic practices are in most cases deliberate design choices and are neither necessary nor inevitable in providing digital mental health support in a commercial setting. Increasingly, many countries are taking deliberate action to prohibit deceptive design choices (Ananthapadmanaban & Paterson, Reference 67Ananthapadmanaban and Paterson2026). The overarching imperative, however, is that concerns about the privacy impacts of data sharing practices are not resolved merely by demanding clearer privacy policies or putting faith in increasingly stringent concepts of consent, but rather by facilitating the fuller conception of responsibility and agency, as promoted in Bosua et al. (Reference Bosua, Clifford, Qian and Richardson2025: 44).
Consumers might, in some circumstances, be prepared to trade personal data for digital mental health support. But this trade-off assumes that the underlying technologies are safe, accurate and free from objectionable bias to an acceptable level, having regard to their function. There is a circularity to the problems of data protection in this space. More training and stronger guardrails may improve the capacity of therapy bots, as well as the general-purpose AI chatbots or companions being used to support consumer mental health and well-being. Yet the apparently simple suggestion of collecting more training data to ensure AI chatbots are responsive to mental health challenges raises another concern. Consumers using mental health tools, companion AI apps or generative AI chatbots are already sharing large amounts of personal and sensitive data to obtain the support they seek, potentially eroding privacy in a field that carries considerable stigma and possible vulnerability to manipulation by unscrupulous commercial developers of such tools. These issues would, ideally, be addressed by frameworks for ethical, safe and responsible AI.
3.3 Ethical, Safe and Responsible AI
A third lens for assessing the risks of and responses to therapy bots and related direct-to-consumer digital mental health support tools lies in the extent to which such products are designed and deployed in a way that meets emerging standards for ethical, safe and responsible AI (Coghlan et al., Reference Coghlan, Leins and Sheldrick2023; Parviainen & Rantala, Reference Parviainen and Rantala2022). The ideal of ethical AI is informed by an aspiration to thoughtful design and deployment that enriches the lives of the humans dealing with it (Halsband & Heinrichs, Reference Halsband and Heinrichs2022; OECD, 2024). There are many formulations of ethics principles, and they may be expressed in different ways (European Commission, 2019). Nonetheless, there are some common themes (Mittelstadt et al., Reference Mittelstadt, Allo and Taddeo2016; Jobin et al., Reference Jobin, Ienca and Vayena2019; Tsamados et al., Reference Tsamados, Aggarwal and Cowls2022), including transparency, explainability and accountability, as well as fairness and inclusion (National Artificial Intelligence Centre, 2024). These latter requirements mean ensuring AI-informed products do not discriminate against groups based on protected attributes and that diverse stakeholder perspectives are accommodated, with regard paid to the experiences and expertise of groups that are often marginalised or experience vulnerability (National Artificial Intelligence Centre, 2024: 43). AI safety is sometimes associated with the existential risk of AI threatening the future of humanity. As a concept, it also applies to a commitment to protecting those who may be subject to AI-informed decisions or practices which materially impact their lives. Principles of responsible AI overlap with those for ethical and safe AI, and further emphasise good governance and accountability for AI that is deployed in contexts affecting humans.
Principles for ethical, safe and responsible AI have been criticised as an ineffective measure for ensuring that AI-informed products genuinely benefit and do not harm humans. They may be too easily dismissed. Although not legally binding, such principles can inform decision-making about AI design, development and deployment. They may further have a ‘horizontal’ effect in influencing how existing laws are applied to AI developers and deployers. Commitments to ethical, safe and responsible AI are also embodied in governance instruments, technical standards (see, e.g., IEEE, CertifAIEd), risk management frameworks that increasingly inform expectations of good corporate governance (see, e.g., Australian Voluntary AI Safety Standard, 2024) and legislation (see, e.g., EU AI Act, 2024).
The following Section considers the AI-specific harms that principles of ethical AI seek to redress and the legal responses to those kinds of concerns.
3.3.1 AI-Specific Harms
In the main, principles of ethical and safe AI seem to have had little impact on the design or deployment of digital mental health tools. Through the lens of ethical, safe and responsible AI principles, the key risks associated with therapy bots and other digital mental health support tools are bias and errors, inaccuracies and inappropriate content and opacity or lack of transparency. Failure to engage with these principles may result in products that are, at best, ineffective for some groups of users and, at worst, unsafe.
Bias and Failures of Inclusion
Bias is a significant concern in the outputs of AI, whether that be generative AI or predictive analytics based on machine learning algorithms. The concept of algorithmic bias expresses the risks of amplifying and replicating existing discrimination arising from human-based decision-making and social policies or practices. Data that reflects historical discrimination will replicate that in data-driven outcomes (Barocas & Selbst, Reference Barocas and Selbst2016). Unjustified bias in outcomes may also arise where data is not representative of social demographics or when a model trained on data from one context is applied outside those key parameters (Tsamados et al., Reference Tsamados, Aggarwal and Cowls2022: 220; Leslie et al., Reference Leslie, Mazumder and Peppin2021).
Concerns about unfair bias have been identified in the use of AI in numerous health contexts (see, e.g., Bichell & Anthony, Reference Bichell and Anthony2021; Davis, Reference Davis2021; Koplin et al., Reference Koplin, Johnston and Webb2025; Valbuena et al., Reference Valbuena, Seelye and Sjoding2022), including mental health (Cross et al., Reference Cross, Bell and Nicholas2024: 2). In the context of therapy bots, a primary concern relates to advice that perpetuates discriminatory stereotypes to the disadvantage of already marginalised people, such as people from low socioeconomic status, culturally and linguistically diverse backgrounds or people with disabilities. Automated technologies may give unsuitable advice to people in these groups because they have not been considered in the tool’s design or included in the training data.
Strong precautionary responses to algorithmic bias require processes and policies implemented in the technology’s design, development and deployment to reduce the potential for harm. These might, for example, include care in testing, reviewing and cleaning the data; auditing outcomes to look for patterns of disadvantage for protected attributes or groups; counterfactuals or weightings to identify factors that distort outcomes; and ongoing governance to ensure complaints are responded to and reviewed. It is not unreasonable to expect these issues to be addressed in the governance of digital mental health support tools (see, e.g., Department of Health, 2021: 9). Going further, we might also expect a commitment to inclusion and equity to ensure that the tools are suitable by design for the breadth of the cohort who might use them (Zowghi et al., Reference Zowghi and Bano2024).
Some developers of therapy bots do explicitly recognise concerns of diversity or bias. For example:
Ebb has been rigorously tested through exercises specifically designed to identify and mitigate potential biases.
We design our products and services with accessibility and inclusivity in mind.
Wysa ‘tests rollouts’ to ensure Gen AI is free of ‘unfair or biased statements’.
None of the tools appear to evince a commitment to involving people with lived experience of mental illness or poor mental health in their design (Gilbert, Reference Gilbert2025).
Errors, Inaccuracies and Inappropriate Content
As discussed in Section 2.2.3, rule-based chatbots reduce the risk of irrelevant or inappropriate conversation. No doubt for this reason, at their early stages of development, the developers of therapy bots Wysa and (the now defunct) Woebot expressly affirmed the value of rule-based approaches to chatbots in keeping the product within manageable guardrails. Indeed, the developers of the now defunct Woebot expressed the view that mental health is not ‘ready for generative AI’, noting the risks of misinformation, the erosion of trust and unsettling anthropomorphism (Darcy, Reference Darcy2023).Footnote 5 Nonetheless, rule-based chatbots can fail to provide contextually meaningful responses if the rules do not fit the scenario presented or if the chatbot cannot decode the initial prompt (White, Reference White2018).
Chatbots relying on natural language processing models or generative AI present greater challenges of relevance, accuracy and safety. For example, Tay, a Microsoft chatbot on Twitter, was shut down in less than twenty-four hours after learning to make racist and inflammatory statements (Lee, Reference Lee2016). Gilbert et al. point to the risks arising from the combination of lack of context and generative AI’s tendency to fabricate a plausible response to queries. They observe:
[I]t is questionable whether their tendency to suggest harmful or false, yet highly plausible, information can ever be controlled …. In their current state, LLMs do not ask for missing information needed to provide an accurate answer, provide no accompanying indication of relative certainty or confidence, and generally provide no genuine sources.
In the context of mental health, the risk of unscripted conversation lies in the chatbot not only hallucinating content but also failing to recognise indicators of escalating ill-health or self-harm, or indeed, as alleged in recent litigation, encouraging such conduct (Duffy, Reference 72Duffy2024, Reference Duffy2025; Chatterjee, Reference Chatterjee2025). Nonetheless, as discussed in Section 2.2.3, the attractions of an adaptive conversational style have meant some therapy bots are utilising generative AI, albeit with safeguards of fine-tuning and guardrails.
Outside these safeguards, the tendency to sycophantic interactions, combined with the underlying reality that generative AI chatbots, like AI companions, do not have a basis in mental health support, makes it close to inevitable that they may prove insufficiently attentive to the mental health of the user. A study by Ben-Zion et al. found that emotion-inducing prompts can exacerbate bias and error in generative AI chatbots, which may work against the interests of their users (Ben-Zion et al., Reference 68Ben-Zion, Witte and Jagadish2025). These are risks that no specialist AI mental health tool would wish to countenance. Any developer seeking to incorporate generative AI capabilities in a therapy bot should accordingly seek to implement strong safeguards against such responses, although the limitations of these approaches have possibly led to an overreliance on disclaimers (discussed in Section 3.4.2).
Lack of Transparency
The field of responsible AI, principles of AI transparency and explainability (interpretability) of AI perform a central role. These principles require sufficient information for users to understand how an AI tool produces its outputs. The demands may be satisfied by information about the LLM model underlying the tool, the data used for training and the guardrails imposed. It may be more granular as to how any particular output was reached, or at least the counterfactuals, that is, what change in the input would have produced a different output.
Not all consumers will be interested in transparency (Paterson, Reference Paterson2024). However, as argued by Frank Pasquale, rights to transparency and explanations provide an opportunity for consumers and their advocates to identify unlawful biases or other flaws in AI-informed decisions and hold the deploying firms to account (Pasquale, Reference Pasquale2025). There is little transparency about the combinations of technologies used in therapy bots and other direct-to-consumer digital mental health support tools. Nor is there much by way of explicit concern about bias. Developers have shown some concern to improve the accuracy and reduce the risk of inappropriate responses.
3.3.2 Developer Responses to Misaligned or Inappropriate Outputs from Therapy Chatbots
The developers of therapy bots have, to some extent, aimed to embrace the adaptivity and responsiveness of AI, and impose some guardrails around the use of their tools. These safeguards primarily manifest as training for chatbots for expertise in mental health and warnings to consumers about the circumstances in which the tools should not be used.
Fine-Tuning
As indicated in Section 2.2.3, one way of managing the risk of hallucination is simply to rely on rule-based rather than generative AI chatbots. Other developers have been seeking to ‘fine-tune’ the LLMs underlying generative AI chatbots on smaller, more reliable datasets to improve accuracy in specialised domains, including for mental health support (Gilbert et al., Reference Gilbert, Harvey and Melvin2023: 2397), as well as imposing guardrails against inappropriate responses.
Thus, Wysa has advised that ‘we are now integrating Gen AI into Wysa, both to meet user needs and to demonstrate how the risks associated with this technology can be addressed responsibly’ (Aggarwal, Reference Aggarwal2024). Headspace’s Ebb is described as a ‘conversational chatbot’, with a ‘proprietary safety system to identify and route members to additional care based on risks, such as suicidal ideation, self-harm, abuse, and more’ (Headspace, Meet Ebb). Newer entrants ‘Therabot’ by Dartmouth College and ‘Ash’ by SlingshotAI use fine-tuned generative AI for mental health support, within appropriate guardrails, for a more conversational experience (Economist, 2025b).
While rule-based responses reduce harmful outputs, they do not remove the risk of misaligned responses that arise from a misunderstanding of the consumer’s prompt. Similarly, while fine-tuning and guardrails may steer generative AI chatbots away from inappropriate content or advice, these protections may be avoided or simply prove ineffective, given the range of ways in which poor mental health may be manifested. Fine-tuning the chatbots for mental health support may further reduce their responsiveness to human prompts or their capacity to identify warning signs of self-harm or deteriorating mental health.
Warnings
A different kind of response by developers to concerns about the risk of misaligned or inappropriate responses from therapy bots, lies in warnings about the viable scope of use and kinds of uses that are not supported. A number of digital mental health tools, and, similarly, AI companions and general-purpose generative AI chatbots, recommend that they should not be used by consumers considering self-harm or experiencing mental illness.
For example:
If you ever feel at risk of harming yourself or someone else, Ahead is not the right place to get crisis help. Please contact your local helpline immediately, or reach out to us so we can help connect you with support in your country.
Wysa is not designed to assist with crises such as abuse, severe mental health conditions that may cause feelings of suicide, harm to self, and any other medical emergencies. Wysa cannot and will not offer medical or clinical advice. It can only suggest that users seek advanced and professional medical help. Please reach out to your country-specific suicide hotline in case of an emergency.
Some developers of general-purpose generative AI chatbots have responded to safety concerns by promising stricter guardrails on generative AI chatbots used for mental health, precluding suicide advice and providing referrals to helplines (OpenAI, 2025).
The purpose of these kinds of warnings, displayed on web pages and app interfaces, is to limit liability for harm (see Section 3.4.2) and (more charitably) to direct users in crisis to professional support. As discussed in Section 3.4.2, a similar response to this issue is now being mandated by some laws in the US for companion AI and generative AI chatbots. But warnings of this kind may not be effective to direct a consumer interacting with a chatbot to change their approach and seek specialist assistance if merely provided in the fine print of a landing or sign-up page.
To be more salient, warnings or limitations may need to be integrated into the chat interaction. The effectiveness even of this approach will depend on the sensitivity of the chatbot to the warning signs of self-harm and care in designing a response that does not itself traumatise the user. They require an ongoing commitment to oversight, testing and revising the approach. For example, do users notice, understand and act on the warnings or do they merely click past in their desire to keep interacting with the chatbot? Ultimately, there must be other options for users to obtain the mental health support they need to deal with the issues being disclaimed by the therapy bot.
3.3.3 Legal Responses to Concerns about AI Safety
The most direct response to concerns about harms arising from the use of AI in any kind of human-centred service is through laws specifically targeted at AI or designed to address AI digital safety. The criticism of these kinds of laws is that they may be insufficiently nuanced to the use of AI in particular domains. Thus, there have been some attempts in different jurisdictions to ban or impose restrictions on therapy bots and related direct-to-consumer digital mental health support tools, as well as on AI companions, also considered later. There is litigation against the developers of general-purpose generative AI chatbots, alleging negligence in the chatbots’ responses to manifestations of poor mental health. For these kinds of legal interventions to be effective, they must be guided by clear objectives informed by an understanding of the relevant risks and the ways in which the tools are used, to which the discussion now turns.
Targeted AI Laws
The EU AI Act (2024), legislation aimed at AI developers and deployers, bans AI systems deploying ‘subliminal’ or ‘purposefully manipulative or deceptive’ techniques that have an objective or effect of ‘materially distorting’ a person’s behaviour, and systems that exploit any of the ‘vulnerabilities of a natural person’ (Article 5). The Act also places demanding safety and efficacy style obligations for high-risk categories of AI, such as the use of AI to determine access to banking or education services, such as AI systems that are used for ‘biometric classification’ or ‘emotional recognition’ (Annex. III). These banned and high-risk categories might apply to some variations of AI companions but do not clearly extend to consumers using AI chatbots for personal or mental health support.
Other than in these categories, chatbots are classified as low risk and primarily subject to transparency requirements. Thus, Article 50 requires developers to ‘ensure that AI systems intended to interact directly with natural persons are designed and developed in such a way that the natural persons concerned are informed that they are interacting with an AI system’, unless this is apparent from the context.
Digital Safety Laws
Online safety is addressed by legislation in several jurisdictions, such as Online Safety Acts in Australia (2021) and the UK (2023), and the EU Digital Services Act (2022). Online safety legislation may be a response to concerns about children accessing sexually explicit or violent content via AI companions or general-purpose generative AI chatbots (BBC, 2025; FTC, 2025). The legislation allows regulators to demand safety features from developers of digital services, such as limiting access by children or moderating violent content (European Parliament, 2025, e-Safety, 2025; Ofcom, 2024). Online safety laws also require platforms to assess and respond to content-based risk in specified domains. The UK regulator has confirmed that safety expectations will apply to chatbots, especially in relation to child safety and the protection of women or girls (Ofcom, 2024). While important, these ‘online safety’-style interventions do not capture the full suite of concerns about AI and mental health.
Restrictions and Bans
Bans and restrictions on sale are usually a last resort for regulatory regimes because they cut across the operation of the market and consumer choice. They may be imposed where a product or some of its features are considered too harmful to be allowed on the market or to be accessed without age-based protocols or specialist oversight. Some jurisdictions in the US have enacted laws banning or restricting the use of therapy bots or companion/general-purpose chatbots on mental health grounds.
Legislation in Illinois and Utah prohibits the use of AI in mental health support other than where it is overseen by a licensed professional responsible for the operation of the system and with consent from the patient (Illinois, 2025; Utah, 2025). In 2025 California prohibited companion chatbots from operating without a protocol for identifying indications of self-harm or suicidal ideation, and where used by young people, requiring reminders to take a break from the interaction (California, 2025). New legislation in New York follows a similar approach (New York, 2025). These kinds of intervention are a response to the alarming high-profile cases of self-harm or suicide arising from interactions with companion and general AI chatbots and tools promoting their mental health benefits without any involvement from mental health professionals (Griesser, Reference Griesser2025).
As the Californian example indicates, children are often considered worthy of special protections in interactions dealing with AI. In September 2025, the FTC announced an inquiry into the harmful effects of AI companion bots on children (FTC, 2025), while Australia’s e-Safety Commissioner has imposed obligations on developers to prevent children accessing sexually explicit AI companions (e-Safety Commissioner, 2025). Restrictions on chatbots being accessed by children may be justified by reference to the limitations of these technologies in responding to children’s unusual use of language and unique emotional needs (Kurian, Reference Kurian2025). However, bans provide little guidance to consumers, including those with low digital literacy, about the ways in which they might usefully select and engage with the tools that remain on the market, or AI chatbots more generally (cf. Black Dog Institute, 2025). Thus consumer-focused education and protection initiatives may also be required.
3.4 Consumer Protection
A fourth lens for assessing the risks of harm from therapy bots, and possible legal responses, is consumer protection. Given that therapy bots and other direct-to-consumer digital mental health support tools are provided for the purpose of supporting the well-being of consumers, consumer protection would seem to be a particularly relevant consideration overseeing their performance. These are far-reaching laws which apply even when a service is provided using AI (Paterson & Maker, Reference Paterson, Maker, Lim and Morgan2024). Yet many popular therapy bots and other digital mental health support tools perform poorly on most consumer-facing measures (World Economic Forum and Deloitte, 2021: 18). Indeed, it may be that their quasi-medical status has distracted developers and regulators from consumer protection considerations.
This section considers the range of possibly relevant consumer protection considerations in assessing the possible risks and benefits of direct-to-consumer digital mental health tools and associated uses of companion AI and general-purpose generative AI chatbots. Before turning to these matters, however, it is worth considering the possibility that consumers themselves can effectively regulate the market offering through their use choices.
3.4.1 The Limits of Consumer Choice
It might be argued that provided there is accurate information about the various digital mental health tools and alternative offerings (as discussed in Section 3.3.3), then consumers should be left to choose for themselves whether to use the tools and what tools they will use. This approach might be suggested to have the merit of giving consumers agency in accessing the mental health support they prefer and that consumers’ assessment of what is useful to them should not be second guessed by regulators or lawmakers. Certainly, in principle, respect for individual autonomy means allowing parties to select the services they desire and empowering them to enter into the contracts they choose on the terms they assess as suiting them best. This approach allows market mechanisms to reward the developers of useful products and permits parties to allocate risk in the manner they judge most efficient, with corresponding adjustments in price.
In reality, consumers of the services of therapy bots and other direct-to-consumer digital mental health support tools will usually be at a relative disadvantage in selecting a service suitable for their needs and preferences. Consumers are likely to be unfamiliar with the workings of the AI technologies being deployed and the contractual terms may differ drastically from the arrangements in place when dealing with a human mental health professional. The services of such tools are provided without the intervention or involvement of a professional who might otherwise guide consumers on how and when they should be used. Moreover, chatbot services are presumably being used by cohorts of consumers who are highly likely to be experiencing vulnerability, people concerned about their mental health, who may, during their use of the tool, face a mental health crisis.
Here, it might be suggested the answer is for consumers to seek reliable information about the tools suitable for their needs. However, finding this information is likely to prove difficult even for the narrower category of specifically designed therapy bots, as opposed to AI companions or general-purpose chatbots co-opted for this use. This difficulty arises because different and often inconsistent measures are used to promote and review them.
In their promotional materials, developers of therapy bots and related digital mental health support tools typically seek to establish the efficacy of their products in a number of ways. Once interrogated, these measures are less robust than they might at first appear. Importantly, these measures also focus on discrete features of the tools, making an overall assessment of the benefits and risks difficult.
Information about Performance
Some digital mental health support tools provide statistics quantifying the benefits to consumers who make regular use of them. For example:
84% of Calm users who used the app 5x a week saw an improvement in their mental health.
10 days of Headspace resulted in 12% decrease in stress; 4 weeks of Headspace reduces burnout; Headspace improves sleep in just 7 days’.
Youper contributes to reducing symptoms of six different mental health conditions and has supported the well-being of over two million people.
Such statistics might be interpreted as supplying robust scientific backing for the service being provided. However, it is not always clear how these statistics have been ascertained. Additionally, the terms of service for these tools commonly disclaim many of these promised benefits, as discussed in Section 4.1.1.
Testimonials
Another common form of promotion for therapy bots and other direct-to-consumer digital mental health support tools is testimonials from users reporting on the benefits provided by the service. For example, Sensa’s home page states: ‘Don’t just take our word for it. Hear how Sensa has improved the lives of these users’ (Sensa). Online reviews and testimonials may help consumers in choosing between traditional consumer products, although there have been concerns about traders manipulating the review process (Australian Competition and Consumer Commission, 2020).
User reviews may be less helpful with higher-stakes products. This is because the people leaving reviews or rankings may not reflect the demographics of the likely user group or their experiences. They do not reflect outcomes over a sustained, or even uniform, period. Neary and Schueller (Reference Neary and Schueller2018: 532) have observed that ‘people who rate apps might not have engaged with an app long enough to explore its full functionality and likely lack the necessary expertise to comment on aspects such as the inclusion of evidence-based strategies’.
Third-Party Rankings
Other digital mental health support tools list third-party rankings. Some rankings are from websites or online magazines. Some rankings are based on criteria that are opaque and even for which a commission is paid (see, e.g., Braun & Cronkleton, Reference Braun and Cronkleton2022). Other rankings are focused on non-technical or medical criteria such as ‘experience’ or ‘usability’ (see, e.g., Blackwell, Reference Blackwell2023; Dorwart, Reference Owens2025). The user interface is a significant criterion in assessing the success of an app, recognising that it must not unduly increase cognitive load (Chandrashekar, Reference Chandrashekar2018: 2). However, this feature must be assessed against other considerations, such as privacy and efficacy, to provide meaningful guidance for consumers.
Some digital mental health tools promote the expertise of the developers. For example:
Built by scientists trained at Universities of Oxford, Cambridge, and Harvard.
Flourish Science is built by mission-driven psychologists, scientists, designers, and technologists.
While having scientists or psychologists in the development team is undoubtedly desirable, their presence does not guarantee good technical performance or fair marketing practices.
Potentially useful are independent rankings from not-for-profit organisations with their own developed criteria, notably from Mozilla and One Mind PsyberGuide (see Neary & Schueller, Reference Neary and Schueller2018: 534–535). The difficulty for consumers is that these rankings prioritise different factors. Mozilla provides a ranking on privacy and security (Mozilla, 2022 and 2023). One Mind PsyberGuide rates available apps using four criteria: credibility, transparency, user experience and professional reviews (One Mind PsyberGuide). An app commended for a good privacy policy (Mozilla, 2022) or innovative use of technology (Asar, Reference Asar2020) may not actually be effective in providing mental health support, or vice versa. For example, Headspace ranks well as a mindfulness app (One Mind PsyberGuide) but poorly in terms of privacy (Mozilla, 2022 and 2023). These kinds of rankings do not interrogate the scientific studies behind the claims or consider the fairness of the contract terms. These limitations of viable metrics make robust consumer protection especially important in the context of therapy bots.
3.4.2 The Role of Consumer Protection Law
Consumer protection law commonly operates through a combination of what is sometimes referred to as ‘ex-ante’ and ‘ex-post’ requirements. Ex-ante consumer protection laws impose safety standards and expectations that may apply before products enter the market and operate while they are in the market, with the aim of reducing the risk of harm. Ex-ante consumer protection in this context would lie in therapeutic goods regulation and online safety laws, discussed in Sections 3.1.2 and 3.3.3.
Ex-post regulation imposes liability for penalties and compensation where harm does occur. Ex-post regulation responds to instances of harm but should also provide incentives to businesses to exercise greater care in providing their services. Ex-post protections of this kind are found in common law actions for negligence and breach of contract. They are also found in legislation governing the supply of goods and services to consumers and enforced by regulatory agencies, such as Ofcom in the UK, the Australian Competition and Consumer Commission in Australia or the Federal Trade Commission (‘FTC’) in the US. Regulators are responsible for enforcing prescriptive conduct obligations, such as prohibitions on misleading, unfair or unconscionable conduct found in the US Federal Trade Commission Act (15 U.S.C. §§ 45(a)(1), 45(n)), the EU Unfair Commercial Practices Directive (Directive 2005/29/EC, art. 6, 2005 O. J. (L 149) 22, 28), UK Consumer Protection from Unfair Trading Regulations 2008 regs 5–6 or the Australian Consumer Law ss 18 and 21. These core ‘safety-net’ protections are typically expressed as open-textured standards, which makes them capable of adapting to new manifestations of the prohibited conduct, including those raised by emerging technologies (Paterson & Maker, Reference Paterson, Maker, Lim and Morgan2024). They certainly have an application in the domain of therapy bots and other direct-to-consumer digital mental health support tools, as well as to AI companions and general-purpose generative AI chatbots.
Misleading Promotional Claims
Most therapy bots and other direct-to-consumer digital mental health support tools, as well as some companion AI, make claims about contributing to good mental health or improving poor mental health. Sometimes this is expressed directly and other times it is expressed through references to symptoms of poor mental health such as stress, anxiety, sleeplessness or poor focus. The impression conveyed by the marketing or headline claims made by the developers of these tools is that they can improve consumers’ mental health outcomes (Oppenheim, Reference Oppenheim2019). As discussed in Section 3.4.1, the marketing for direct-to-consumer digital mental health tools may also claim that there is scientific support for their effectiveness, which are often overstated by reference to published research. Furthermore, it is possible that claims to assist mental health outcomes that are not realised may in some instances make users’ mental health worse.
The FTC has made numerous statements about the pitfalls of ‘fake AI’ and indicated that it will be vigilant in policing such claims (FTC, 2024), although there has been little action by regulators in ensuring the veracity of claims by developers of AI-services provided directly to consumers, including in mental health. Nonetheless, headline marketing may breach misleading under consumer protection or tort law. For example, a digital mental health support tool claiming proven beneficial outcomes or scientific backing for the product when the available published evidence is ambiguous, inconclusive or negative may be misleading contrary to law.
Prohibitions on misleading conduct may also respond to unfounded claims or statements by AI companions or general-purpose generative AI chatbots that make unwarranted claims about having expertise in mental health diagnosis or support. Potentially, even claims to empathy or care, when these are synthetic representations of such feelings expressed by a chatbot, may be misleading, especially where the expression of care is rooted in the objective of prolonging conversations (for a fee or other commercial gain), promoting products (through virtual product placement) or upselling the user to higher priced features (for an AI companion) (Paterson & Bant, Reference Paterson and Bant2026).
Duties of Care in Providing the Service
Developers (and deployers) of therapy bots and other direct-to-consumer digital mental health support tools will usually owe a duty of care in providing their services to consumers, which arises through the tort of negligence and statutory equivalents such as the Consumer Rights Act 2015 (UK) s 49 or Australian Consumer Law s 61. At the time of writing, litigation, including for negligence, has been initiated by parents of young people who have committed suicide or self-harmed after sustained interactions with AI chatbots or companions (Booth, Reference Booth2025; Duffy, Reference 72Duffy2024). The complaint is that developers failed to show reasonable care because the chatbots in question failed to recognise early indications of self-harm in users or even provided advice on suicide techniques (Lee, Reference Lee2025). These risks have also been raised with respect to digital mental health tools (Srivastava, Reference 83Srivastava2023).
For these cases to succeed, a plaintiff will need to show a causal connection between the developer’s lack of care and the harm the plaintiff experienced after using the product. The causation question is fact dependent. On the breach of duty question, there is no lack of guidance on what reasonable care in providing an AI-informed service should require, given the global interest in AI safety and responsible AI standards, as discussed in Section 3.3. These standards suggest that the requisite level of care would certainly involve ongoing oversight and ongoing testing of the performance of the chatbot or other tool. Although there is little case law to date, failing to set reasonable guardrails on the content produced by an AI chatbot may also breach the developer’s duty of care in making the product directly available to consumers.
Responses to Contractual Limitations
Some companies are seeking to defend the litigation against them on grounds of failing to respond appropriately or carefully to the mental health of their users by arguing that the uses in question were out of scope. The contractual terms for many direct-to-consumer therapy bots favour the interests of the provider, with a host of consumer-unfriendly terms that deny any responsibility or liability for the quality of the service provided. For example:
The Headspace Entities are not responsible for the accuracy, reliability, effectiveness, or correct use of information you receive through or as generated by the products.
The client remains ‘solely responsible for evaluating and assessing his own health, including any need to seek appropriate guidance from a health care provider’.
The objective of these kinds of disclaimers and limitation clauses is to protect developers from liability for products that fail to deliver on their promises of improved health and well-being. But there seems to be a fundamental unfairness in attracting consumers with headline claims of effective and scientifically based mental health support, while simultaneously denying any responsibility to provide such a service. This kind of reliance on fine print terms to undermine consumer expectations and leverage information asymmetries is precisely the conduct that consumer protection law aims to address.
Parties are entitled to define the scope of the service they provide, but there is a point at which the disjunction between what is promised and what is provided becomes problematic (Paterson, Reference Paterson2026). Fine print exclusions of responsibility will not necessarily protect developers from liability if the headline claim is what is influencing consumers’ reliance on the product. Some jurisdictions also oversee the validity of contractual limitations on the deployer’s liability. In some jurisdictions, unfair terms regimes will render overreaching exclusions and limitations void, such as those in the UK Consumer Rights Act pt 2 and the Australian Consumer Law pt 2–3 (Paterson, Reference Paterson2026). Contractual restrictions on unfair contract terms are justified by the reality that consumers rarely have the expertise to assess the substance of the contracts they are offered or the safety of the products they may be seeking to buy. These issues affecting informed consumer decisions have been illustrated in the context of therapy bots in Section 3, demonstrating the difficulty of assessing and comparing the efficacy of the services being offered, let alone the terms on which they are offered.
4 Networked Regulation
The discussion so far has demonstrated that there are a number of laws that respond to many of the concerns about therapy bots and other direct-to-consumer digital mental health support tools. Although there is ongoing debate about whether and how AI should be regulated (Hacker et al., Reference Hacker, Engel, Hammer and Mittelstadt2025), AI-specific laws are emerging in some jurisdictions. Therapy bots and other direct-to-consumer digital mental health tools are also subject to well-established legal regimes, covering therapeutic goods, privacy, duties of care and consumer transactions, and overseen by regulators. However, these various laws appear to have been underutilised in this context, meaning that their efficacy in the domain is largely untested.
As more attention is directed to concerns about the mental health effects of AI companions and general-purpose chatbots, the overall regulatory response remains fragmented and focused on specific restrictions (e.g., children) and new obligations on developers (e.g., warnings). This fragmented approach is unlikely to be effective given the rapidly evolving uses of AI for mental health support. Indeed, the solution to these concerns is unlikely to be found in any one law, current or future. Rather, the impact of therapy bots and related AI tools may most effectively be addressed by a response that is deliberately diverse and capable of adapting to the different features of the products, as well as their alternatives.
This section considers the limits of a siloed approach to regulation before turning to the possibility of a networked approach.
4.1 The Limits of Siloed Regulation
Responses to the risks of harm associated with therapy bots and other direct-to-consumer digital mental health support tools typically focus on the harms arising within different legal categories in isolation or ‘silos’, as illustrated in Figure 2. The siloed approach obscures both the cumulative burden of harm and the ways in which different kinds of laws might, in combination, produce stronger protections for consumers. The siloed approach also offers little capacity to adapt to rapid changes in the market or products. A siloed approach that fails to consider the operational relationships between different kinds of laws can have consequences for the overall effectiveness of the regulatory regime. It can encourage regulatory arbitrage on the part of developers or deployers of the products. It can produce regulatory inattention or a merely performative approach to regulation by policy-makers or regulators.
Regulatory silos for new technology

4.1.1 Regulatory Arbitrage
Regulatory arbitrage refers to the efforts of regulated entities to structure their products so that they fall, in form if not in substance, outside a regulated regime. As discussed in Section 3.1.2, to the extent that therapy bots and related direct-to-consumer digital mental health support tools are classed as lifestyle products or as merely applying established psychological therapies, they fall outside the scope of therapeutic goods regulation. Developers of these products appear to be using contractual terms and disclaimers to ensure their products avoid classification as therapeutic devices, which would subject them to additional scrutiny. As illustrated in Table 3, some developers of therapy bots are promoting their products using language that comes close to offering treatment for the symptoms of poor mental health, suggesting a therapeutic application. In most of these cases, the fine print terms of service of these chatbots expressly disclaim any therapeutic effect. The approach might be seen as mere caution or even respect for the complexity of mental health issues. However, the effect of these disclaimers is to take the chatbots outside the therapeutic goods regime and the robust oversight of outcomes that comes with the characterisation of a tool providing diagnosis or treatment.
| Tool | Marketing statement | Terms of Use |
|---|---|---|
| Flourish | ‘Feeling anxious? Stuck in critical self-talk? Sunnie is here to help. Sunnie is the world’s first proactive mental health buddy’ (Flourish) | ‘Flourish is not a medical or clinical service and does not provide diagnosis, treatment, or therapy for any mental health condition. The Services are intended for general well-being support and self-guided personal development and are not a substitute for professional mental health care. If you have any questions regarding your health or mental condition or behaviour, consult with a qualified professional’ (Flourish, Terms and Conditions) |
| Headspace | ‘Feel less anxious with Headspace’ (Headspace) | ‘While there is third-party evidence from research that meditation can assist in the prevention and recovery process for a wide array of conditions as well as in improving some performance and relationship issues, Headspace makes no claims, representations or guarantees that the Products provide a physical or therapeutic benefit.’ (Headspace, Terms and Conditions) |
| Headspace (Ebb) | Ebb, has been trained to recognise and respond to risks ‘such as suicidal ideation, self-harm, abuse, and more’ (Headspace) | As above |
| Youper | The groundwork of Youper is evidence-based interventions, treatments that have been studied extensively and proven successful. Youper has been proven clinically effective at reducing symptoms of anxiety and depression by researchers at Stanford University’ (Youper) | Youper will not ‘assume any liability for inaccuracies or error in its content or representations’ (Youper, Terms of Use) |
| Replika | ‘Build better habits and reduce anxiety’ (Replika) | Replika can assist in the recovery process for a wide array of conditions, Replika makes no claims, representations or guarantees that the Services provide a therapeutic benefit’ (Replika, Terms and Conditions) |
There are several viable and available legal responses to the uncomfortable juxtaposition of these kinds of headline representations and contractual disclaimers. One response would focus on the headline claims used to promote a therapy bot and related tools in determining whether it falls within the scope of therapeutic goods regimes. On this approach, if the tool is promoted as having therapeutic effects, then it warrants regulation under that regime regardless of any disclaimer in the contractual terms. If the tool is genuinely not supportive of mental health in a therapeutic sense, it should not be described in terms that would be understood as suggesting otherwise.
Another response would be to focus on the inconsistency between the headline claims, to support mental health, and the fine print disclaimers, which deny this effect. A headline claim that is not supported by the substance of the product provided (as would be suggested by the extensive disclaimers) is misleading and should be sanctioned as such (via a regulatory strategy that has been used to respond to misleading privacy claims, discussed in Section 3.4.2).
Still another approach would focus on the care and skill required under tort and equivalent statutory regimes from the developers of direct-to-consumer mental health support tools and, similarly, companion AI or generative AI chatbots. If there are significant limitations to the efficacy of the product or it is critical that products not be used for crisis management or for diagnostic purposes, then this information is too important to be left to obscure fine print warnings, limitations or exclusion clauses. The information should be drawn to the attention of consumers in ways that are likely to be salient for their decision-making. Failing to do so should be treated as a failure of reasonable care, as it would likely influence consumers to make decisions they would not otherwise have made.
The broader point is that the effective regulation of therapy bots and other direct-to-consumer digital mental health tools, should not depend solely on whether the product is classed as inside or outside the therapeutic goods regime. Rather, the relevant regulatory regime should be understood as encompassing the entire body of laws that combine to promote good outcomes for consumers. This approach demands regulatory co-ordination and reduces the risk of ineffective or ‘performative’ regulation.
4.1.2 Regulatory Inattention
The strength of therapeutic goods regimes lies in providing ‘entry-level’ scrutiny of medical devices (Carpenter, Reference Carpenter, Balleisen and Moss2010: 164–165), which requires the operation of the product to have been validated and subject to ongoing monitoring. This kind of robust entry-level regulation aims to weed out harmful or poorly performing products and support health consumer and practitioner choice (Carpenter, Reference Carpenter, Balleisen and Moss2010: 189; Shuren et al., Reference Shuren, Patel and Gottlieb2018: 337). However, consumers using therapy bots outside the therapeutic goods regime still have protections under other laws, such as AI-targeted laws, data protection laws, consumer protection laws and the general laws of tort and contract.
These other kinds of laws have been used to support the objectives of the therapeutic goods regimes, for example, by ensuring that developers of products have a proper basis for any claims made about the products’ benefits. For example, the FTC has relied on its jurisdiction over misleading conduct to regulate marketing claims about health-related products:
Under FTC law, companies must back up claims about what their product can do with reliable evidence. If a company makes a claim about the health or safety benefits of a product, that claim must be based on scientific evidence. If a company claims that its product can cure, mitigate, or treat a serious disease such as cancer or heart disease, it must back up that claim through the accepted standards of scientific testing.
A similar approach could be taken to therapy bots that claim to be beneficial for mental health without verifying those claims by reference to research that withstands scientific scrutiny or disclaims effectiveness in the contractual terms of service. Currently, the consumer protection regulators in the UK (Ofcom), US (FTC) and Australia (ACCC) have yet to consider the consumer protection aspects of therapy bots and other direct-to-consumer digital mental health tools. This is the case even though the marketing for such products, and the contractual terms, uses the kinds of practices that have been subject to criticism and sanction in more traditional consumer markets.
It may be that the lack of regulatory attention given to therapy bots and other direct-to-consumer digital mental health tools arises from the combination of the optimistic promotion of the services offered by the chatbots and belief in the capacity of AI to supplement human services. In a climate where there are concerns about mental health and not enough support for people experiencing poor mental health or mental illness, optimism about the potential of therapy bots and other direct-to-consumer AI mental health tools has proved persuasive. In this light, regulators may simply have not considered that the products present sufficient risk to warrant closer examination.
Moreover, as noted in Section 3.1.2, the headline marketing for the services provided by therapy bots, although invoking mental health, avoids a direct reference to mental illness, which would squarely fall within therapeutic regimes. The products therefore sit at the boundaries of different regulatory schemes and this may account for them not squarely having been the focus of any one regulator. Lisa Parker et al. (Reference Parker, Bero and Gillies2019b: 171) argue that ‘[d]ifferent aspects of a single [mental health support tool] may come under the jurisdiction of multiple upstream regulators, with none of them appearing to take overall responsibility for the product’ (Parker et al., Reference Parker, Bero and Gillies2019b). The lack of any sustained regulatory scrutiny of direct-to-consumer therapy bots may also reflect the impact of discipline, not just regulatory, silos.
Studies on therapy bots and other direct-to-consumer digital mental health support tools have tended to focus on discrete issues, such as the effectiveness of the therapy offered or the level of privacy protection provided, as opposed to a more holistic assessment. This absence of formal regulatory attention means other forces, such as those arising from funding and market opportunities, will influence the way in which the products are developed and deployed. As Christine Parker et al. point out:
Even when official government policy leaves contentious issues to the market, this does not leave the issue un-regulated. Rather there are always networks of public and private actors who influence and regulate market conduct more or less directly, and more or less effectively or legitimately, regardless of whether government has designed and implemented specific regulatory policy or not.
To date, regulators, and health industry bodies, have missed opportunities to design effective regulatory responses to the risks of direct-to-consumer digital mental health chatbots that would operate as market gatekeepers, reward best practices and sanction harmful ones. In the resulting vacuum, developers have sought to control the narrative, positioning their products as innocuous and essential, in the sense of filling an unmet demand for individualised mental health support.
The combined effect of how the chatbots are promoted and their aspiration to ‘helpfulness’ is regulatory inattention, a pattern observable in other fields as well. Chatbots are being deployed in government, law, finance and retail services (Paterson, Reference Paterson2025). In these areas, too, the dominant narrative is on assisting users and promoting efficiency. The many concerns arising from these uses, such as error, bias and data protection, are addressed individually if at all, rather than by reference to their cumulative impact. There are failings here of regulatory co-ordination, which also lead to reactive responses when things do go wrong.
4.1.3 Reactive Regulation
Growing concerns about the risks to consumers in relying on AI companions or general-purpose generative AI for mental health support have prompted some regulatory intervention. As discussed in Section 3.3.3, there are moves in some jurisdictions to provide greater protection for children through age-based limits on access and reminders to take a break. Additionally, California and New York have prohibited companion chatbots from operating without a protocol for identifying indications of self-harm or suicidal ideation (California, 2025; New York, 2025).
These might prove useful interventions. However, the initiatives have not precipitated a broader discussion about the need for more readily available mental health support nor how it should be provided. It is possible, therefore, that these kinds of response to the mental health harms of companion AI and general-purpose generative AI chatbots may be more reactive than effective. Put starkly, requiring chatbot developers to identify signs of ill health and refer those consumers to mental health support services may be technically unrealistic and practically unhelpful. Referrals to support lines provide little relief to those with poor mental health if the support services are underfunded and oversubscribed (Stokel-Walker, Reference Stokel-Walker2025). And there is no evidence that a referral or reminder to take a break provides an effective prompt to a consumer to change their habits when they are enamoured with their AI companion or feel they have no other forms of social support.
4.2 The Way Forward?
The increasing availability of therapy bots and other direct-to-consumer digital mental health support tools may shape the market for mental health support services, pushing the norm towards automation rather than increased funding for human therapists. Pasquale questions ‘whether the tools are prematurely disrupting markets for (and the profession of) mental health care to accelerate the substitution of cheap (if limited) software for more expensive, expert, and empathetic professionals’ (Pasquale, Reference Pasquale2019). These observations underlie the potential for therapy bots to be a potent case study for Zuboff’s ‘surveillance capitalism’, which describes the commodification of individual experiences and behaviours via extensive data processing (Zuboff, Reference Zuboff2019).
It is also possible that this trajectory, towards the commodification of mental health services, has already been disrupted. And that the disruption comes from another form of automation, namely consumers’ reliance on companion AI and general-purpose generative AI. The fact that these more general offerings may provide worse health outcomes or have minimal efficacy in achieving positive outcomes is not necessarily a reason to turn back to specialised therapy bots and other digital mental health support tools. But concerns about harmful interactions between consumers and general-purpose generative AI chatbots, may make more attractive the possibility of digital mental health support tools carefully built by professionals with domain expertise, in collaboration with people with profound lived experience, and then comprehensively tested. Or it might drain interest and investment out of that more specialised market altogether.
Whichever future is envisaged, well-designed and implemented regulatory regimes can play a role in curtailing harm and providing incentives to safer and more suitable products. However, more nuance is needed in how we think about the structure and role of effective regulation. In considering the harms introduced by new technology, there appears to be an inclination to find one response that will resolve the concerns. This search for the one ‘right law’ is understandable given the magnitude of the task. However, as the previous sections have demonstrated, the affordances of therapy bots and related offerings vary considerably across different sectors. These features may mean embracing more complexity and diversity in the relevant regulatory response and approach that might be conceived as relying on distributed regulatory networks. However, first it is necessary to consider the concern about the impact of this approach on the drive to innovate.
4.2.1 Innovation and the ‘Cost’ of Regulation
A common objection to new laws applying to AI, or new ways of applying existing laws, is that such initiatives will stifle innovation (Productivity Commission, 2025). The concern is that more focused and expansive regulation will impede the development of useful applications of the technology, such as genuinely beneficial therapy bots and other digital mental health support tools. The characterisation of innovation and regulation as being mutually exclusive has been criticised (Paterson, Reference Paterson2026) and has certainly not been established. It is entirely plausible that using the suite of effectively targeted laws to promote best practice will lead to more innovative outcomes benefiting consumers. Equally, uneven enforcement of existing law may favour non-conforming or poorer quality services: the proverbial race to the bottom.
An illustration of this paradigm is found in the withdrawal of Woebot from the market in July 2025. Woebot was a mental health support chatbot using cognitive behavioural therapy (see Table 1). The developers of Woebot stated that the reasons for its withdrawal from the market lay in the challenge of meeting the FDA’s requirements for using large language models to provide mental health support and a lack of clarity about those requirements (Stat News, 2025). It may be that the service provided by Woebot required too much oversight or was too rigid to be viable as a stand-alone commercial product. However, if we take the developers’ statement at face value, the outcome may be seen as a perverse consequence of an overly reactive approach to the use of chatbots for mental health support. Woebot was regarded by some commentators as one of the better products available to consumers (Wallace, Reference Wallace2025b). Woebot used a rules-based approach in its chatbot to constrain the risk of inappropriate responses (Darcy, Reference Darcy2023). Woebot was rated as being privacy-preserving by Mozilla (2023) and providing a good user experience by One Mind PsyberGuide (n.d.). Woebot was built and operated by psychologists undertaking clinical research on the performance of the product (Darcy et al., Reference 71Darcy, Daniels and Salinger2021).
The current approach to regulating direct-to-consumer digital mental health tools arguably favours those products that are designed to navigate around the boundaries of therapeutic goods regulation. It may also leave the ground open for generative AI offerings that do not purport to support mental health but may nonetheless be used in this way despite having no expertise and a propensity to inept responses (Wallace, Reference Wallace2025a). By contrast, a more holistic understanding of the way in which existing laws, and other market interventions, respond to the harmful manifestations of AI therapy bots – distributed, networked regulation – might support a level playing field for the development of more robustly validated, tested and refined approaches to digital mental health support.
4.2.2 Regulatory Networks
While the nuances of relevant laws may vary between jurisdictions, the underlying demand for the regulation of products being offered to consumers is relatively straightforward. State-of-the-art technology should not divert attention from the misuse of practices that are known to erode consumer welfare in other contexts. Lifestyle products should deliver safe and welfare-enhancing outcomes consistent with their headline representations. Health-related products should be safe for their promoted and foreseeable uses. Data should not be extracted and used against consumers or in ways that are contrary to their reasonable expectations. Contractual rights and limitations should be balanced, consistent with headline marketing and salient to consumer users.
The challenge lies in co-ordinating the various regulators that may be involved in ensuring these outcomes, given that the products that may make claims to mental health support are situated across several fields of regulation and invoke the expertise of mental health professionals and the lived experience of those who use the technology. In this context, there is no one law or lead regulator who can resolve concerns about the risks associated with the support services being offered. Instead, there is a network of market participants, who have the capacity to influence the ways in which the services are delivered and the quality of what is provided.
This picture of multiple influences and modes of intervention might be seen as haphazard or dysfunctional. However, it reflects the reality of regulation in the kind of dynamic market presented by direct-to-consumer digital mental health support tools. Part of the complexity arises from the way in which the products themselves are presented and marketed. Additionally, regulating complex products in heterogeneous markets is inevitably multifaceted; this is all the more so when the purpose of the product is human well-being.
Christine Parker et al. argue that analyses and suggestions for regulatory interventions often assume that regulation is a unitary tool affecting relatively stable markets. Instead, they point to the insights available from a regulatory network analysis (Parker et al., Reference Parker, Carey, De Costa and Scrinis2017). Regulatory network analysis suggests that ‘we should consider markets … as a set of changing relations in which public and private standards are continually being created, adjusted, solidified, or destroyed’ (Parker et al., Reference Parker, Carey, De Costa and Scrinis2017: 370; also Braithwaite, Reference Braithwaite2006: 885). This insight allows recognition that changes to industry behaviour may most effectively be produced by acknowledging and co-ordinating the network of laws, regulators and other participants, that have the capacity to influence behaviour in the market in question. It also provides an opportunity for regulators, professional organisations and civil society groups with shared objectives to collaborate in shaping and promoting the kinds of market outcomes that genuinely benefit society. Applied to therapy bots and other direct-to-consumer digital mental health support tools, a regulatory network analysis means acknowledging the role of developers, tech companies, medical associations and consumer groups in shaping the affordances of the products being offered.
Network regulatory analysis means recognising that the law is not the only or even the most significant influence on outcomes in the regulated space. Rather ‘the state becomes part of a network of regulation in which the tasks of regulation are redistributed in various ways among actors within the network’ (Drahos & Krygier, Reference Drahos, Krygier and Drahos2016: 3). Within the apparatus of the state, however, there is a network of regulation in which tasks are distributed between laws and regulators. In other words, there is a sense in which the legal regime itself operates as a regulatory network and the success of regulatory objectives is reliant on a network of cognate interrelated laws (Figure 3).
Legal networks

A regulatory network analysis recognises that a product’s features may enliven numerous laws and that more than one regime may offer a valid response to concerns about the efficacy or safety of that product. The requirements for testing and oversight provided by therapeutic goods regulations set a basis for safer, more effective products but need to be supplemented by consumer protection oversight, ensuring that contracting practices are not misleading or otherwise overreaching. To the extent that some products fall outside therapeutic goods regulation, consumer protection laws need to be rigorously enforced. Regulators should be particularly vigilant in the case of products using new forms of AI, especially generative AI, given the associated risks of bias and inaccuracy. The approach requires co-ordination and also a degree of dynamism as the risks and challenges evolve with different iterations of the available products as frequently as every six months (Torous & Rodriguez-Villa, Reference Torous and Rodriguez-Villa2021).
Stakeholders other than regulators have a role in promoting a greater level of safety and reliability in therapy bots and other direct-to-consumer digital mental health support tools. The work of regulators might be complemented by cross-industry standards or guidelines which reduce the work that needs to be done by individuals in assessing standardised features of mental health chatbots, such as privacy and security (Australian Commission on Safety and Quality in Health Care, 2020). Work has already been done on developing guidelines and standards for digital mental health support tools (World Economic Forum and Deloitte White Paper, 2022: 12–15; Neary and Schueller, Reference Neary and Schueller2018: 533–534). Australia has implemented standards and a voluntary accreditation scheme for digital mental health products to address key safety and quality concerns (Australian Commission on Safety and Quality in Health Care, 2020; see also, Steindl, Reference Steindl2023).Footnote 6 The Mental Health Commission of Canada (2023) has developed a National Assessment Framework for e-Mental Health support tools based on standards covering data and privacy; clinical evidence; clinical safety; usability and accessibility; security and technical stability; cultural safety, social responsibility and equity; and enhanced data sovereignty. The World Economic Forum with Deloitte (World Economic Forum, 2021) has also developed a framework for governance of digital mental health support tools.
Critically, there needs to be consensus on the content, design and implementation of such guidelines and standards, as well as an authoritative means of verifying compliance (Fraser et al., Reference Fraser, Parker and Haines2024). As Henry Fraser et al. explain, ‘standards tend to work best, and carry the greatest imprimatur of legitimacy, when there is consensus about goals and at least some degree of agreement and clarity about practical implementation’ (Fraser et al., Reference Fraser, Parker and Haines2024: 112). A stronger mechanism for achieving consensus could involve external expert certification (cf. Fraser et al., Reference Fraser, Parker and Haines2024: 116) and a system for signalling rankings to mental health professionals and consumers, possibly through a star system or trust mark (Neary & Schueller, Reference Neary and Schueller2018: 534–535). Neary and Schueller (Reference Neary and Schueller2018: 534) also argue that ‘[m]ulti-dimensional ratings are useful for consumers and clinicians because some characteristics might be more important for different people or purposes’. Additionally, there should be stakeholder education about the role and scope of the guidelines or standards.
Another site of regulation lies with mental health professionals and their professional associations. Professional associations have a role in guiding developers and educating members about their operations. For example, the American Psychiatric Association has developed a five-stage app rating model for clinicians based on a series of questions to investigate across five fields: access and background; privacy and safety; clinical foundation; usability; and therapeutic goal (American Psychiatric Association, n.d.). This kind of approach is useful in its focus on the needs of patients and treating psychiatrists. Mental health services in Australia have provided guidance to consumers on choosing a digital mental health product, and the limitations of more general generative AI chatbots (Beyond Blue; Black Dog Institute).
The capacity of intermediaries in the market for therapy bots and other direct-to-consumer digital mental health support tools to hold developers to appropriate standards of performance should be recognised and utilised. App stores should be responsible for removing products that misrepresent their scope, or which make claims that are entirely unverified (Mattioli, Reference Mattioli2021: 34). For developers of therapy bots that want to comply with best practice, there are guidelines, standards and assurance frameworks developed in conjunction with industry, professionals and users that can assist. Verified compliance with these standards is a way of signalling trustworthiness by developers of digital mental health support tools and a way for health professionals to be secure in recommending the products to clients. Compliance with standards can also be a necessary (but not conclusive) indication that a service provider has exercised reasonable care in improving the service as required under tort and some statute law.
4.2.3 Distributed Regulation
While existing systems of regulation can be understood as working most effectively as networks of influence, the debate around regulating products or services involving AI often focuses on the need for ‘a’ law responding to the harms of the technology. Given the rapidly changing capacity of the technology and the multiple touchpoints for harm, laws might better be conceived as distributed across multiple nodes. This means recognising more than one site of response for different kinds of harm or risk. Without centralising responsibility in any one agency, regulatory responsibility is distributed across participants in the network, promoting those with the best capacity to promote any particular regulatory objective in their relevant sphere of operation that is relevant in the context at any point in time.
The need for different legal nodes responding to AI harms need not represent a failure in the system. Rather, it is a sign of adaptivity: it means the legal regime as a whole contains multiple sites for refining and reframing the characterisation of rights and responsibilities for addressing new technologies or other developments in the market (Figure 4).
Distributed (legal) regulation

For example, as discussed earlier, the risks to consumers from data processing may be addressed by a combination of data protection law requirements for notice, consent and conduct-style duties applying to data processing, consumer law prohibitions on misleading conduct, privacy torts, breach of confidence or even the development of fiduciary-like duties for those who hold sensitive information (on the latter, see Dove et al., Reference Dove, Taylor and Richardson2026). The FTC has signalled a preparedness to use its regulatory powers to address concerns about bias and unfairness in consumer AI applications (Jillson, Reference Jillson2021; Australian Competition and Consumer Commission, 2019; Innovation, Science and Economic Development Canada, n.d.; Competition and Markets Authority, 2020). Contractual limitations may be tackled as unfair or misleading terms, or circumvented as irrelevant for the purposes of therapeutic goods characterisation of products for which the headline advertising promotes a mental health response (Medicines & Healthcare Products Regulatory Agency, 2025).
More effective regulatory responses to the harms that may be occasioned by therapy bots and other direct-to-consumer digital mental health tools do not necessarily ensure the ongoing viability or efficacy of these products. Consumers may continue to prefer AI companions or general-purpose generative AI chatbots over specialised therapy bots. Rule-based therapy bots may be more secure but linguistically limited and more conversationally adept generative AI therapy bots may still not be engaging as an AI companion. Health professionals may develop new kinds of products or use instead AI to improve the efficiency of administrative processes, giving them more time for clients. However, greater recognition of the role of distributed regulatory networks may address the more overtly harmful aspects of direct-to-consumer digital mental health tools and also improve their overall performance in the eyes of consumers.
Regulatory initiatives focused on specifically designed digital mental health tools still leave the risks of harms from companion AI or general-purpose generative AI chatbots to be resolved. But similar lessons can apply to these offerings as well. Moreover, a more effective regulatory stance on therapy bots may create space for a more deliberate and informed discussion about the place for these other kinds of AI chatbots, and their influence on the mental health of the humans who interact with them.
Conclusion
From Eliza to Wysa, the possibility of chatbots providing mental health support has remained a preoccupation of developers and researchers. For many, therapy bots represent an alluring technological advance and a useful response to the unmet need for mental health support. However, as this Element has discussed, despite numerous online offerings, the overall benefits of specifically designed therapy bots and other direct-to-consumer digital mental health support tools remain uncertain. The therapeutic effect of these products has yet to be established, especially for already marginalised cohorts (Section 3.1). The data practices of many developers of direct-to-consumer digital mental health tools are unclear and possibly inconsistent with user expectations (Section 3.2). It does not appear that the tools are tested for fairness (or lack of bias), equity or accessibility (Section 3.3). Exclusion and limitation of liability clauses found in the fine-print terms of service for therapy bots and other digital mental health support tools commonly disclaim responsibility for improved mental health outcomes, including the outcomes used to market the products in the first place (Section 3.4). Developers routinely promote these products’ capacity for mental health support but advise against their use during mental health crises and illness, thereby avoiding the more robust regulatory regime that applies to therapeutic goods (Section 4.1.1).
Even if the individual harms arising from therapy bots and other direct-to-consumer digital mental health tools seem insignificant, cumulatively they may be highly impactful. Therapy bots tinker with our minds, and those who seek to use them deserve the respect of a carefully designed and tested product, accompanied by ongoing robust systems and processes for governance. Decisions about where to invest resources by governments, health services and consumers should be based on a realistic understanding of the performance of the products and the best use of AI in the mental health context (Blease & Torous, Reference Blease and Torous2023). It is possible that therapy bots and other digital mental health support tools work best when embedded in clinical practice which would oversee their interactions with mental health consumers.
Regardless of where these debates land, specifically designed therapy bots are being overtaken by less specialised offerings, in the form of AI companions and general-purpose generative AI chatbots. At least to users, these offerings may appear to offer equivalent services in a more engaging and interactive manner. They may also come with higher risks of serious mental health harms than specifically designed digital mental health tools. Examples of user self-harm following interactions with companion AI and emerging research on the sycophantic tendencies of general-purpose generative AI chatbots suggest that they may ultimately be harmful to mental health (see Section 2.2.2). However, just as specifically designed therapy bots and other direct-to-consumer digital mental health support tools may divert resources from human-centred services, ‘free’ general-purpose generative AI may divert them from more specialised offerings without delivering a clear benefit to users. Again, a clear understanding of the risks and benefits the products offer is imperative, as are well-targeted responses to unacceptable levels of risk.
An effective regulatory response to concerns about the risks of harm from AI products deployed for use by consumers is more complex than simply enacting a new law or activating an existing legal regime in a particular domain. This Element has suggested that realising this ambition means understanding the applicable laws as forming part of a regulatory network, which operates in conjunction with other influences on regulatory objectives, and the distributed nature of those laws in supporting effective regulation. This approach does not make the regulatory regime incoherent, nor does it amount to over-regulation. Rather, it recognises the different affordances of direct-to-consumer digital mental health support tools and the impact of services that can be repurposed by consumers for a similar function.
The lessons to be drawn from this analysis are not limited to laws responding to the risk of harm from therapy bots, AI companions or general-purpose generative AI chatbots used for mental health support. There are insights for AI regulation more generally. There is a tendency in calls for stronger regulation of new AI-based products to demand new laws rather than activate those that already exist. There may be ways in which existing laws do not adequately address, or be proactive in reducing, the harms of AI in ways that are effective or fair. However, any AI law is unlikely to be comprehensive and will need to operate in conjunction with other kinds of laws, social policies and technological standards (Meese & Tan, Reference Meese and Tan2026). Without attention to these interactions, existing and future, general and specific AI-directed laws may fail to achieve their intended purpose.
There are more fundamental considerations as well. The automation of mental health support and the growing use of general-purpose generative AI or companions for mental health require us to confront important questions of policy and values in human interactions with technology. The relational and equity consequences of the outsourcing of fundamental human services, and relationships, should be recognised and debated (Achtyes et al., Reference Achtyes, Glenn and Monteith2023; Khawaja & Bélisle-Pipon, Reference Khawaja and Bélisle-Pipon2023). After having developed the therapeutic chat functions of Eliza, Weizenbaum asked whether ‘we really believe that it helps people living in our already overly machine-like world to prefer therapy administered by machines to that given by other people’ (Weizenbaum, Reference Weizenbaum1976: 269)? We may have to ask whether humans really want to respond to loneliness and an absence of meaningful human companionship with an artificial entity, however initially alluring. Certainly, genuine collaboration between the various stakeholders – including people with lived experience of poor mental health, mental health professionals, computer scientists, developers, policy experts and regulators – is now more crucial than ever before.
Damian Clifford
London School of Economics
Damian Clifford is an Assistant Professor at the London School of Economics and Political Science. Previously a Senior Lecturer and Postdoctoral Research Fellow at the Australian National University, and FWO Aspirant Fellow at KU Leuven’s Centre for IT and IP Law (CiTiP), his research focuses on data protection, privacy and technology regulation, and he has published across these fields. His recent books are Data Rights and Private Law (ed with Jeannie Marie Paterson and Kwan Ho Lau, 2023); Data Protection Law and Emotions (2024); and Data Rights in Transition (with Rachelle Bosua, Jing Qian and Megan Richardson, 2025).
Jeannie Marie Paterson
University of Melbourne
Jeannie Marie Paterson is Director of the Centre for AI and Digital Ethics at the University of Melbourne and a Professor of Law at the Melbourne Law School. Her research focuses on themes of support for vulnerable consumers; the regulation of new technologies in consumer and financial markets; and regulatory design for protecting consumer rights and promoting safe, fair and accountable technologies. Her recent books include Misleading Silence (ed with Elise Bant, 2020); and Data Rights and Private Law (ed with Damian Clifford and Kwan Ho Lau, 2023).
Editorial Board
Mark Andrejevic, Professor, Communications & Media Studies, Monash Data Futures Institute
Sara Bannerman, Professor, McMaster University, and Canada Research Chair in Communication Policy & Governance
Rachelle Bosua, Senior Lecturer, Deakin University; Honorary Senior Fellow, School of Computing and Information Systems, the University of Melbourne
Jake Goldenfein, Senior Lecturer, Melbourne Law School, the University of Melbourne
Claes Granmar, Associate Professor, Faculty of Law, Stockholm University
Sonia Katyal, Associate Dean of Faculty Development & Research, Co-Director Berkeley Center for Law & Technology, Roger J Traynor Distinguished Professor of Law, UC Berkeley
Andrew Kenyon, Professor of Law, Melbourne Law School, the University of Melbourne
Orla Lynskey, Professor of Law and Technology, University College London
Frank Pasquale, Professor of Law, Cornell Tech and Cornell Law School, New York
Julia Powles, Executive Director of the UCLA Institute for Technology, Law, and Policy; Professor of Practice; Tech Policy Lead, UCLA DataX
Trisha Ray, Associate Director and Resident Fellow, GeoTech Center, Atlantic Council
Megan Richardson, Honorary Professor, Melbourne Law School, the University of Melbourne
Julian Thomas, Director of the ARC Centre of Excellence for Automated Decision-Making and Society; Distinguished Professor, School of Media and Communication, RMIT University
Peggy Valcke, Professor of Law & Technology and Vice-Dean of Research, Faculty of Law & Criminology, KU Leuven
Normann Witzleb, Associate Professor of Law, Chinese University of Hong Kong
About the Series
This Cambridge Elements series provides a home for fresh arguments about data rights and wrongs along with legal, ethical and other responses. We encourage new ways of thinking about data as enmeshed within social, institutional and technical relations.




