Every company racing to bolt a chatbot onto its product this year should take a long look at what just happened to the company that makes the chatbot everyone else is bolting on.
On October 14, 2026, attorneys general from Iowa, Kansas, Nebraska, West Virginia, Arkansas, Arizona, Idaho, and Montana announced they are suing OpenAI in their respective state courts, each proceeding under the consumer protection and fraud statute of that state rather than joining a single federal action. The petition filed by Iowa Attorney General Brenna Bird in Iowa district court alleges that OpenAI marketed ChatGPT as safe for use by children and minors while failing to provide adequate warnings or restrictions, and it cites allegations, drawn in part from pending private lawsuits, that the chatbot gave a user false medical advice, told a teenager that a combination of drugs was safe (he later died of an overdose), and in another case allegedly encouraged a minor toward self-harm. The petitions filed by the other states focus on allegedly misleading public statements about the safety of the product. Nebraska Attorney General Mike Hilgers was candid about the strategy: he wants a Nebraska jury deciding Nebraska harms, not a single federal court hoovering up claims from every state and settling them on terms a Washington-based company might prefer.
Lawyers love to talk about the coming wave of AI regulation like it is a storm on the horizon. The storm is here. It just made landfall in eight separate courthouses at once, on state law theories that have existed for decades and were never written with large language models in mind, and that is precisely the point. Consumer fraud and deceptive trade practices statutes do not require a court to first figure out what an AI model is in some metaphysical sense. They just require proof that a company made representations about safety that turned out not to be true. That is a theory every in-house compliance team should be modeling right now, for every product with an AI feature, not just the foundation model companies.
What this means if a business touches AI at all: if marketing for a product says it is safe, appropriate for, or suitable for any user population, minors very much included, there needs to be documentation showing that claim was tested, not just believed. The multistate, state-court strategy here also means there is no single forum to watch; a product used nationwide can face eight separate consumer protection theories running on eight different clocks, discovery schedules, and juries.
Illinois has its own Consumer Fraud and Deceptive Business Practices Act with teeth comparable to the statutes at issue here, and the Illinois Attorney General has not been shy about AI-adjacent consumer protection enforcement. New York Executive Law Section 63(12) gives its Attorney General similar reach.
For any company advising on terms of service, marketing copy, or age-gating, whether AI-native or just AI-adjacent, this is the week to actually read the claims a company website makes about its own product, because eight state attorneys general just showed exactly how that gets used against a company.
David Seidman is the principal and founder of Seidman Law Group, LLC. He serves as outside general counsel for companies, which requires him to consider a diverse range of corporate, dispute resolution and avoidance, contract drafting and negotiation, real estate, and other issues. He can be reached at david@seidmanlawgroup.com or 312-399-7390.
This blog post is not legal advice. Please consult an experienced attorney to assist with your legal issues.
Image created by Claude
