Colorado's AI therapy law is live today, here's your checklist

Colorado's AI Therapy Rules Took Effect Today. Here's What Changed Overnight.

Colorado's HB 26-1195, signed June 3, became law today, August 12, 2026. Licensed clinicians can no longer let an AI system hold therapeutic communication with a client without the clinician present in real time. AI generated treatment recommendations now require professional review and approval before use. Any AI recording or transcription of sessions requires advance disclosure of its purpose plus written informed consent, and clients must be told about AI use restrictions at their first contact.

Vermont went further on June 17 with Act 156, banning AI delivered mental health services entirely and even banning advertising them, enforced through a private right of action. Vermont still allows HIPAA compliant AI tools when a licensed professional reviews everything before it reaches a client.

Do this now:

• Review any AI note taker or scribe tool you use and confirm it only assists documentation, never delivers therapeutic communication unsupervised.
• Add a written informed consent form covering AI recording or transcription before your next client session.
• Check your website chatbot and intake forms for language that could be read as AI delivered therapeutic communication.

Five Health Systems Just Paid Millions for Website Tracking Pixels. Your Practice Isn't Exempt.

Between late July and August 7, five healthcare providers settled class actions over Meta and Google tracking pixels on their websites and patient portals. Penn Medicine agreed to pay up to $9.25 million, about $15 per claimant, under Pennsylvania's wiretap act, plus a two year ban on analytics and advertising technology on its site. Emanate Health settled for $777,000, Concord Hospital for $800,000, Mount Sinai Medical Center of Florida for $220,000, and Bayhealth for $25 per member plus monitoring.

None of these cases required HIPAA. They ran on state wiretap and consumer protection laws, which apply to a solo practice exactly as they apply to a hospital system. Also since June 15, the GA4 Google Signals toggle no longer controls whether visitor data reaches Google Ads. Only Consent Mode does now.

Do this now:

• Ask your web developer to confirm whether Meta or Google tracking pixels are installed directly on your site or client portal.
• Remove any native tracking pixels and replace them with a server side or consent gated alternative.
• Update your GA4 Consent Mode settings since Google Signals no longer restricts data sharing on its own.

Google Search Console Now Shows How Your Instagram and TikTok Posts Perform in Search

On July 29, Google rolled out platform properties in Search Console worldwide. Verify your Instagram, TikTok, X or YouTube account and Search Console will show the queries, clicks and impressions those posts earn in Google Search, Discover and Google News, tracked separately from your website. Verification requires only the social account, no website changes needed. Google also published a companion guide the same day covering query grouping, 24 hour trending filters and data exports.

The bigger picture: search results and AI generated answers increasingly pull from YouTube, Reddit, Quora and Instagram, not just websites. Practices that show up in AI answers tend to be the ones with genuine, verifiable profiles and consistent organic posting on these platforms.

Do this now:

• Verify your practice's Instagram, YouTube, TikTok or X account inside Google Search Console this week.
• Post one genuine, informative video or update on YouTube or Instagram this month if you haven't already.
• Check the new platform property reports monthly to see which social posts drive search visibility.

That llms.txt File You Paid For Is Being Ignored by 97 Percent of AI Crawlers

Adoption of llms.txt files grew 8.8 times in a year, from 4,088 sites in June 2025 to 36,120 by May 2026. But an Ahrefs analysis of server logs across 137,000 domains found 97 percent of these files received zero requests from AI crawlers in May 2026. Google confirmed on June 15 the file has no ranking impact on Google Search either way.

If a vendor is selling llms.txt as a standalone AI visibility fix, they're selling the easiest 3 percent of the work. The file is still worth adding, it costs nothing and carries no risk, but it only matters as one layer alongside consistent entity information, structured data, topical depth, and machine readable facts about your practice across the web.

Do this now:

• Add a basic llms.txt file to your site since it costs nothing, but don't expect it to move rankings alone.
• Ask any vendor pitching llms.txt what else they're doing for structured data and entity consistency.
• Ignore any claim that a July or August traffic dip came from a Google update, the only confirmed update was the June 24 spam update.

Rank for 'Reddit' Searches Without Ever Posting on Reddit

A field experiment published July 14 documents a simple pattern: people add the word reddit to searches when they want unfiltered opinions, and AI assistants sometimes include that word in background searches while building an answer. A page on your own site targeting a reddit style phrase, with the word in the title, slug, H1 and opening sentence, can win those searches without touching Reddit itself. One documented example, a 78 word page, ranked for a competitive reddit phrase.

For a therapy practice, the equivalents are honest FAQ pages answering questions like does EMDR actually work reddit or best therapist in your city reddit. Results are testable in Google Search Console within weeks of publishing.

Do this now:

• Write one short FAQ page answering a real question clients ask, using a phrase like your city's name plus reddit in the title.
• Keep the page honest and specific rather than keyword stuffed, aim for genuine value in under 150 words.
• Check Google Search Console four weeks after publishing to see if the page earns impressions.

Quick wins for the week

• Add written informed consent language about AI recording to your intake paperwork this week.
• Verify your practice's YouTube or Instagram account in Google Search Console for free visibility data.
• Confirm with your web host or developer that no native Meta or Google tracking pixels sit on your site.
• Add a no cost llms.txt file to your website as one small layer of AI readiness.

Final thoughts

This edition covers five different problems, new state therapy laws, tracking pixel lawsuits, social search data, AI crawler behavior, and Reddit style search pages, but they share one thread. Digital compliance and visibility have both gotten more technical and more fragmented, and no single fix solves either one. A file on your site, a toggle in an analytics dashboard, a checkbox on a consent form: each matters, but only as part of a coordinated approach.

Most practice owners went into this field to help people, not to track state legislation, audit tracking pixels, or reverse engineer AI crawler behavior. That's a reasonable thing to feel overwhelmed by. While you're providing therapy, we're monitoring policy changes, protecting your Google presence, and optimizing for AI search. You shouldn't need to become an SEO expert, compliance specialist, and tech strategist on top of being a therapist.