OpenAI Under State AG Investigation Over Ads and Health Data
Multiple state attorneys general are investigating OpenAI, probing issues ranging from its advertising policies to how it handles sensitive health data. The specific states involved have not been publicly disclosed.
Original sourceA coalition of state attorneys general has launched an investigation into OpenAI, according to a TechCrunch report published June 13, 2026. The scope of the inquiry appears broad, touching on OpenAI's advertising practices and its treatment of health-related user data — two areas where AI companies have faced mounting regulatory scrutiny across the board.
The investigation adds to a growing pile of legal and regulatory pressure on OpenAI, which has been navigating its controversial conversion from a nonprofit to a public benefit corporation while simultaneously scaling its consumer products to hundreds of millions of users. Health data handling in particular is a high-stakes area: if ChatGPT users are sharing medical information with the platform — which many are — the question of how that data is stored, used, and potentially monetized becomes both a legal and an ethical flashpoint.
The advertising angle is less well-understood publicly, but OpenAI has been exploring ad-supported tiers as it looks for revenue diversification beyond API access and subscriptions. Any investigation into ad policies could implicate questions about user targeting, data profiling, or how health-context conversations might inform ad delivery — a combination that regulators have historically treated as a serious compliance risk.
The lack of transparency around which states are involved is notable. Multi-state AG investigations often signal coordination and can precede federal action or significant settlement demands. OpenAI has not publicly commented on the scope of the inquiry, and with its business model still in flux, this kind of regulatory uncertainty is the last thing a company mid-restructuring needs on its plate.
Panel Takes
The Skeptic
Reality Check
“The two threads here — ad policies and health data — are not random. They're the exact combination that got Google and Facebook into billion-dollar settlements, and OpenAI has been sprinting toward the same business model without appearing to have built the compliance infrastructure to match. The opacity about which states are involved isn't a minor detail; multi-state coordination is how AGs signal they have enough to make this expensive. I'd predict this resolves in 18 months with a consent decree that forces OpenAI to wall off health data from any ad-targeting pipeline — something they should have done by default.”
The Founder
Business & Market
“OpenAI is mid-restructuring, mid-monetization-pivot, and now mid-investigation — that's three simultaneous fires that each consume executive bandwidth and slow product decisions. The advertising revenue stream they've been quietly building is now a legal liability before it's even a real revenue line, which is the worst possible timing when you're trying to prove to investors that the business has legs beyond API subscriptions. If the health data exposure is real and not just speculative, the remediation costs — legal, technical, and reputational — could dwarf whatever ad revenue was ever on the table.”
The Futurist
Big Picture
“The thesis to stress-test here is whether consumer AI platforms can monetize through advertising without triggering the same regulatory ratchet that reshaped social media over the last decade — and this investigation suggests the answer is no, or at least not without a fight. The second-order effect that matters most isn't the fine or the consent decree; it's that every other AI company building toward ad-supported tiers is now watching this case to see where the bright lines are drawn. If state AGs successfully establish that health-context conversations create HIPAA-adjacent obligations for non-covered entities, that rewrites the monetization playbook for the entire consumer AI category.”
The PM
Product Strategy
“The job ChatGPT is hired to do increasingly includes sensitive personal tasks — health questions, financial decisions, relationship advice — and OpenAI's product has never been honest with users about where that data goes or how it might be used. That's not just a legal gap, it's a product gap: users who discover their health queries informed ad targeting will churn and tell people, and no onboarding flow fixes that kind of trust damage. The product team needs a clear, user-facing data use policy that's a first-class feature, not fine print — and this investigation is the forcing function they probably needed.”