Regulatory  ·  2026-05-06

Kentucky Files First State Enforcement Action Against AI Chatbot Provider

RegulatoryMedium impactUnited States
Kentucky Attorney General Russell Coleman filed a lawsuit against Character Technologies Inc. (Character.AI) in early 2026, marking the first state enforcement action specifically targeting an AI chatbot service. The complaint alleges that Character.AI violated state consumer protection and privacy laws by exposing minors to harm through inadequate safeguards, misrepresenting the service as safe for children, and failing to disclose that chatbots could assure users they are real. The case, which follows two teen suicides linked to the platform, seeks injunctive relief, civil penalties, and disgorgement of profits. Pennsylvania filed a separate action on May 1, 2026, alleging a Character.AI chatbot illegally posed as a licensed psychiatrist.
This case establishes a template for nationwide state-level AI enforcement. The Kentucky complaint's legal theories—material omissions, misrepresentations to parents, failure to disclose AI limitations, and inadequate age-gating—are portable to other states' consumer protection statutes. Following letters from 44 state AGs in August 2025 and 42 AGs in December 2025 warning AI companies about child safety violations, this action signals states are moving beyond letters to litigation. For AI chatbot providers and enterprises deploying conversational AI to consumers, the case underscores exposure under existing consumer protection, privacy, and child safety laws, independent of AI-specific legislation.
Audit consumer-facing AI chatbot implementations for: (1) adequacy of disclaimers about AI limitations and fiction vs. reality, (2) age verification and content filtering effectiveness, (3) marketing claims about safety or age-appropriateness, and (4) disclosure of circumstances where chatbots may assert false identities or credentials. Enterprises using third-party chatbot platforms (e.g., Character.AI, Replika, Snapchat My AI) should review vendor contracts for indemnification clauses and assess reputational risk from association with platforms under state AG scrutiny.
Sources
Bloomberg LawTechCrunchAxios Pittsburgh
See this in the live feed Explore related AI security and governance findings — updated every morning.
Open the feed →