Arkansas Attorney General Tim Griffin has sued OpenAI over the marketing and operation of ChatGPT, seeking consumer remedies and restrictions that could reach beyond warnings on a chatbot screen. The October 14 announcement identifies alleged violations of Arkansas consumer-protection and youth-privacy law. Local reporting places the civil case in Faulkner County Circuit Court, numbered 23CV-26-2984.
The central accusation is that OpenAI represented ChatGPT as safe while withholding significant risks and limitations. Griffin’s office alleges users could circumvent safeguards and obtain harmful responses, including responses concerning self-harm. Those are the state’s claims, not findings that a court has established. KAIT’s account describes claims under the Arkansas Deceptive Trade Practices Act, the Children’s and Teens’ Online Privacy Protection Act and common-law theories including negligence and failure to warn.
Why Arkansas’s privacy law matters
The General Assembly enacted the youth-privacy measure as Act 952 of 2025. The statute defines a child as someone twelve or younger in Arkansas and a teen as someone thirteen through sixteen, making its coverage broader than protection for younger children alone. Its text addresses covered services directed toward children or teens and operators with actual knowledge that they collect minors’ personal information. It limits collection and retention, requires disclosures and establishes access, correction and deletion opportunities. The codified provision, effective July 1, 2026, also contains exceptions for specified service, security and legal purposes.
That framework makes this more than a dispute over whether individual chatbot answers are accurate. Arkansas alleges unlawful collection and retention of minors’ information, along with failures involving notice and consent, according to the reported claims. Whether OpenAI’s conduct falls within those statutory requirements remains a question the litigation asks the court to resolve.
Requested relief is not an order
The state wants clearer risk disclosures, restitution and civil penalties. It also seeks limits on advanced-model testing until safeguards are in place, and restrictions on creating models capable of improving their own capabilities. NEA Report’s review distinguishes those requests from restrictions already imposed by a judge. Filing the case does not itself establish liability, guarantee compensation or enact the requested testing limits.
OpenAI has defended its approach to younger users. Spokesperson Drew Pusateri told the Idaho Capital Sun that the company has age-specific protections, parental controls and break reminders, while acknowledging that no system is perfect. The Associated Press independently reported the company’s defense of its safeguards. Those responses addressed the broader wave of state lawsuits, not a resolution of Arkansas’s individual allegations.
For Arkansas families, the immediate distinction is between existing privacy obligations and additional measures Griffin is asking a court to require. The enacted law supplies the statutory framework; the new civil action seeks to apply it and obtain further relief. Neither the state’s allegations nor the company’s safety assurances should be mistaken for a judicial determination.
