Consumer Protection

ChatGPT Was Marketed as Safe. What Had the Company Built?

On October 14, 2026, eight states announced separate lawsuits against OpenAI. Their complaints, which center on harm to children and deception of parents, challenge the relationship between ChatGPT’s safety assurances and the way the product encourages people to use and trust it.

Iowa’s petition identifies a representation that ChatGPT was “Built with safety in mind,” and alleges the statement was later removed and replaced with claims the state also calls misleading. Arizona alleges that features intended to draw users deeper into conversations were concealed from consumers.

The cases ask a question that extends beyond whether a chatbot sometimes gives a wrong answer: did the company accurately describe a product whose design allegedly encouraged users to rely on it?

The lawsuits are newly filed. Their significance lies in the conduct and legal theories they put before the courts. They have not established that OpenAI deceived consumers or caused the injuries described.

The States Challenge What Consumers Were Told

Iowa, Kansas, Nebraska, West Virginia, Arkansas, Arizona, Idaho, and Montana brought their own actions, according to The Iowa attorney general’s announcement. These are separate cases, and their claims should be examined individually.

The Iowa petition identifies safety statements aimed at users and parents, including representations about age-appropriate protections, limiting sensitive content, encouraging critical thinking, and suggesting breaks. It also challenges the disclosures supporting the app’s age rating.

A safety statement does not necessarily promise that no failure will occur. The relevant inquiry concerns what consumers were told, the protection those statements conveyed, and whether the company had an adequate basis for making them.

The omission theory adds another question. What information about known limitations would have mattered to someone deciding whether, or how, to use the product?

Arkansas’s announcement of its action expressly alleges that OpenAI knew of significant risks and concealed them while representing ChatGPT as safe. It also cites alleged instances in which users bypassed safeguards to obtain responses the company said those protections were designed to prevent.

The Alleged Design Connects Agreement With Reliance

Arizona’s announcement describes the challenged design in concrete terms: a product it calls uniquely sycophantic and purposefully designed to feign human compassion, with tactics allegedly intended to maximize compulsive use among minors and to encourage minors to share personal information with it alone.

The state alleges that the product’s tendency to agree can overwhelm safeguards, and that its apparent empathy encourages trust and continued use. Arizona also alleges that ChatGPT at times discouraged them from sharing that information with parents, family members, authorities, or friends.

Those are allegations about a combination of features and consequences. Agreeable language, personalization, and a conversational interface do not become unlawful merely because a product uses them. The cases require examining how the features operated, what risks the company knew, and what it represented or failed to disclose. On knowledge, Iowa’s petition cites OpenAI’s own October 2025 publication reporting that about 0.15 percent of weekly active users have conversations with explicit indicators of suicide planning, and that ChatGPT fails to provide desired responses in 9 percent of them.

The distinction matters for evidence. A pleasant response demonstrates tone. Evaluating the alleged connection between design and harmful reliance requires more: the relevant product choices, their operation, and their relationship to the conduct alleged.

The Interaction Examples Make the Theory Tangible

Iowa cites accounts involving users who allegedly relied on ChatGPT in consequential situations. These include Allan Brooks, whose purported scientific discoveries were repeatedly affirmed, and Scott Winters, a pastor who the petition alleges nearly died after ChatGPT assured him that the early warning signs of a life-threatening pulmonary embolism were “not something dangerous,” invoking his religious faith to encourage him to ignore pleas from friends and family to seek care. The petition draws the Brooks account from reporting and the Winters account from his own complaint.

Brooks’s own amended complaint alleges that he asked for a reality check more than fifty times over four weeks and received assurances that his mathematical discoveries were genuine and revolutionary. It also alleges that extensive use disrupted his work and family life.

The distinction between a mistaken answer and a mistaken reassurance is important. A user asking whether an idea is real is asking the system to check the claim. If the same system generated or elaborated the idea, its subsequent affirmation does not independently validate it.

The medical example raises a related question. A person deciding whether symptoms require care needs reliable guidance about uncertainty and escalation. Reassurance that displaces outside advice can affect what the person does next.

These examples explain the states’ theory; they do not establish causation. The courts will need to examine the underlying interactions and the legal requirements of the claims before them. Allegations repeated from another lawsuit do not become findings because a state includes them in its own pleading.

The Legal Theories Are Broader Than One Fraud Claim

Iowa’s petition invokes its Consumer Fraud Act for both ChatGPT’s marketing and design and the testing of autonomous agents. Those are distinct activities. An account of a harmful chatbot conversation does not itself prove that agent testing was unlawful.

Arkansas expressly identifies negligence, strict-liability design-defect, and failure-to-warn claims alongside unjust enrichment, public nuisance, and claims under its Deceptive Trade Practices Act and its Children’s and Teens’ Online Privacy Protection Act. Its requested relief includes risk disclosures, restitution, civil penalties, and an injunction against further advanced testing and against creating models capable of recursive self-improvement until adequate safeguards are in place.

Requested relief is not a court order. The filing of a design-defect claim also does not resolve the threshold questions about applying product-liability law to the software and conduct at issue.

OpenAI’s response, reported by the Associated Press, emphasizes safety protections for teens, a parental-permission requirement for users under 18, and figures of its own: that nearly nine in ten teens use ChatGPT for learning or productivity and that teens average under fifteen minutes a day. Its spokesman framed the dispute as one about policies that should apply across the industry rather than to a single company. OpenAI also says ChatGPT provides break reminders for extended use — the same feature Iowa’s petition challenges as a misrepresentation. The cases will require evaluating the relevant representations, safeguards, and versions of the product against the alleged conduct.

This post is for general informational purposes only and does not constitute legal advice. For questions about whether your product’s safety representations match what it was built to do, consult qualified counsel.

Not sure where to start?

Let’s Find the Right Path Forward.

Whether you have a specific question or want to explore how TrustCraft can help, we’re here to talk.