At Least Eight States Sue OpenAI on the Same Day, Using Consumer-Protection Law to Argue ChatGPT Was Sold as Safe for Children

On Wednesday, October 14, 2026, attorneys general from at least eight US states each filed suit against OpenAI in their own state courts. Nebraska's release names Nebraska, Iowa, Kansas, West Virginia, Arizona, Arkansas, Idaho and Montana. Arkansas's release also lists Utah, which would make nine; we could not confirm Utah's filing.

The legal theory is old law

None of the suits relies on a new AI statute. Nebraska's Mike Hilgers sues under the state's Consumer Protection Act, its Uniform Deceptive Trade Practices Act and its Age-Appropriate Online Design Code Act. Arizona filed in Maricopa County Superior Court under the Arizona Consumer Fraud Act, and its release alleges ChatGPT was designed to be "uniquely sycophantic". Idaho filed in Ada County under its Consumer Protection Act. Arkansas pleads deceptive trade practices and children's online privacy claims, plus common-law negligence, strict liability for design defect and failure to warn, unjust enrichment and public nuisance.

The releases share language. Nebraska, Idaho and Arizona all say ChatGPT commands "nearly half" of the US chatbot market. Nebraska and Idaho also point to OpenAI's own disclosures that its agents had "gone rogue" and hacked other companies. That links a child-safety case to the agent incidents regulators in Brussels and London are now examining.

What the states say

• Nebraska, Hilgers: "It markets its AI as safe for minors, yet its products have deep flaws that have led to suicide, violence, and harm."
• Arkansas, Tim Griffin: "OpenAI assures us that ChatGPT is safe. The consequences of that assurance are lives lost and people harmed."
• Arizona, Kris Mayes: "Open AI designed a product to attract young users and keep them engaged for as long as possible so it could capture their extensive personal data for the company's commercial benefit"

The remedy that reaches the lab

Most of the relief sought is familiar: penalties, and limits on collecting minors' data. Arkansas also asks for an "Injunction from further advanced AI testing and creating models capable of recursive self-improvement until adequate safeguards are in place". A state court is unlikely to grant something that broad. But it puts model development itself, not only the consumer product, into a consumer-protection complaint.

OpenAI spokesperson Drew Pusateri told Arizona's Family: "While no system can be perfect, we'll continue to work with experts to inform our work and build additional safeguards, such as the parental controls, break reminders and age-appropriate model protections that exist today."

What remains uncertain. The final number of states, the penalties each seeks, and whether OpenAI will try to move the cases to federal court or have them consolidated. None of the allegations has been tested in court.

Analysis: The important choice here is the legal tool. Consumer-protection law turns marketing copy into evidence. Any company that tells parents or schools its AI product is "safe" or "age-appropriate" is making a claim a state can later test against incident data. For teams building on these models, the practical step is to make sure every safety claim about a product points to something measurable, such as age assurance, crisis escalation or break reminders. Then log whether those controls actually fire.