State attorneys general are opening an investigation into OpenAI, examining practices across multiple fronts including advertising policies and health data handling. The exact states involved remain undisclosed, but the scope reveals broad regulatory concern about how the AI company operates.
The investigation centers on consumer protection issues. Attorneys general are scrutinizing OpenAI's advertising claims, particularly around the capabilities of its products like ChatGPT. They're also examining how the company collects, stores, and protects sensitive health information that users may input into its systems. This dual focus suggests regulators worry both about false marketing and privacy breaches.
OpenAI has faced mounting pressure from multiple directions. Earlier scrutiny came from federal regulators at the FTC, which opened its own inquiry into data practices. State-level investigations add another layer of enforcement risk, as attorneys general often move aggressively on consumer protection violations that could trigger fines and operational restrictions.
The health data component is particularly sensitive. Users increasingly ask ChatGPT medical questions, meaning OpenAI may retain personally identifiable information tied to health conditions. States typically enforce strict rules around medical data under their consumer protection statutes. If OpenAI hasn't adequately disclosed how it handles such information or failed to implement proper safeguards, penalties could follow.
Advertisement claims under investigation likely target how OpenAI markets its products to consumers and businesses. The company has made bold statements about ChatGPT's usefulness and accuracy. If regulators determine these claims overstate capabilities or lack substantiation, deceptive advertising charges could apply.
This investigation reflects a broader pattern of state AGs targeting AI companies over the past two years. Multiple states have launched coordinated probes into major tech platforms. OpenAI's high profile and rapid user adoption make it an obvious target. The company now faces enforcement pressure from federal agencies, state governments, and international regulators simultaneously. Each channel poses distinct risks