Firms that violate the law could face fines up to $250,000 per offense, including for deepfake misuse. Several firms, including OpenAI and Replika, have already strengthened content filters, parental controls, and crisis-response tools ahead of enforcement.