OpenAI Under Fire: What the State AG Investigation Means for Users

OpenAI Faces Multistate Legal Scrutiny as Attorneys General Launch Formal Probe

Artificial intelligence giant OpenAI is once again at the center of a significant legal storm. A coalition of state attorneys general has reportedly launched a formal investigation into the company, issuing a subpoena that demands answers on everything from how it handles user data to how its technology affects children and elderly users. The move signals a growing appetite among state-level regulators to hold AI companies accountable — and it arrives at a particularly pivotal moment for OpenAI as the company eyes a potentially historic initial public offering.

For everyday users of ChatGPT and other OpenAI-powered products, the investigation raises pressing questions: How is your data being used? Are you being kept safe online? And who, exactly, is watching out for you when you interact with some of the most powerful AI systems ever built?

What the Subpoena Actually Covers

According to a report from The Wall Street Journal, the subpoena was issued by New York's attorney general and was served on OpenAI on June 12. The document, which was viewed by WSJ reporters, encompasses a remarkably broad scope of inquiry — suggesting that regulators are conducting a thorough, top-to-bottom review of the company's operations and user-facing practices.

The areas under scrutiny include:

• Advertising practices — how OpenAI markets its products and whether those practices are transparent and truthful to consumers.
• User engagement and retention — whether the company employs techniques designed to keep users hooked on its platforms, potentially at the expense of their wellbeing.
• Consumer and health data handling — how sensitive personal information, including health-related data shared in conversations, is collected, stored, and potentially monetized.
• Activities related to children and senior citizens — two groups considered especially vulnerable to harm from AI-powered systems, and who may interact with these tools without fully understanding the implications.
• Deep learning models — the technical infrastructure underlying OpenAI's products, including how these models are trained and what data was used in the process.
• Company policies — internal rules and frameworks governing how OpenAI operates and whether those policies adequately protect users.

The breadth of the subpoena suggests this is not a narrow, targeted inquiry. Rather, it appears to be a sweeping effort to understand how one of the world's most powerful AI companies operates at every level.

OpenAI's Response: Constructive Engagement Promised

OpenAI did not deny the investigation or push back aggressively. In a statement provided to The Wall Street Journal, a company spokesperson acknowledged the probe and signaled a willingness to cooperate.

"AI is a new and powerful technology, and we work every day to safely bring its benefits to people in a responsible way," the spokesperson said. "We take the concerns raised by state attorneys general seriously and intend to engage constructively with their offices."

The measured tone reflects a broader communications strategy OpenAI has adopted in recent months as it navigates an increasingly complex regulatory environment. Rather than fighting back against oversight, the company has generally positioned itself as a responsible actor eager to work alongside governments — a stance that is likely tied, at least in part, to its upcoming IPO ambitions.

Why This Investigation Matters for Everyday AI Users

At its core, this investigation is about consumer protection. As AI tools become embedded in daily life — helping people write emails, draft medical questions, support students with homework, and assist elderly individuals with information-seeking tasks — the potential for harm grows alongside the potential for benefit.

Regulators are right to ask hard questions. When a user shares sensitive health information with an AI chatbot, who owns that data? How long is it retained? Can it be used to train future models? Can it be sold or shared with third parties? These are not hypothetical concerns; they are real issues that tens of millions of users currently face without clear answers.

The focus on children is particularly significant. Younger users may not fully understand the nature of AI-generated content, may be more susceptible to persuasive design patterns, and may inadvertently share personal information that could be exploited. Federal regulations like COPPA (Children's Online Privacy Protection Act) provide some baseline protections, but AI-specific rules remain underdeveloped. State-level investigations like this one can help fill that gap.

A Broader Pattern of AI Accountability Efforts

This investigation does not exist in a vacuum. It is part of a broader wave of legal and regulatory action targeting OpenAI specifically, and the AI industry more generally. The company has faced copyright lawsuits from major news organizations and individual authors, concerns from former employees about safety culture, and ongoing scrutiny from international regulators in the European Union and beyond.

In the United States, the absence of comprehensive federal AI legislation has pushed state governments to step into the breach. Attorneys general, whose core mandate is consumer protection, are increasingly viewing AI platforms through the same lens they once turned on Big Tech social media companies. The playbook is familiar: issue subpoenas, demand transparency, and use the threat of enforcement action to push companies toward safer practices.

What Comes Next for OpenAI and Its Users

The investigation adds a meaningful layer of uncertainty to OpenAI's already complicated path to going public. Prospective investors will need to weigh the possibility of regulatory penalties, mandated policy changes, or reputational damage stemming from whatever the probe uncovers. In the worst-case scenario, findings related to data misuse or inadequate child protections could trigger significant legal liability.

For users, the most important takeaway is this: scrutiny of AI companies is intensifying, and that is generally a good thing. Greater transparency, stronger data protections, and clearer safeguards for vulnerable populations are all outcomes worth pursuing. Whether this investigation delivers meaningful change will depend on the evidence uncovered, the political will of the attorneys general involved, and OpenAI's willingness to follow through on its promise of constructive engagement.

In the meantime, users would be wise to remain thoughtful about what information they share with AI platforms — and to stay informed as this story continues to develop.