Chatbots, which capture user input in real time, are now being scrutinized under the same privacy laws fueling litigation over pixel tracking and behavioral analytics tools. Wilson told Insurance Business that claims are being filed under GDPR (General Data Protection Regulation, an EU law), CCPA (California Consumer Privacy Act), and BIPA (Biometric Information Privacy Act) for practices such as saving conversation logs without user consent, recording communications without disclosure, and sharing confidential chat data with third-party AI providers.