A starting point...
1 An A.I. system must be subject to the full gamut of laws that apply to its human operator.
2 An A.I. system must clearly disclose that it is not human.
3 An A.I. system cannot retain or disclose confidential information without explicit approval from the source of that information.