What is AI regulation in Oregon?
AI regulation: countries and regions
Oregon does not have one single AI law but a set of specific rules for certain AI uses. For example, the state passed SB 1546 (2026) to regulate "AI companion" chatbots - requiring notices and safety measures - and SB 1571 (2024) to label AI-manipulated campaign media. Oregon's new privacy law and existing consumer statutes also apply to AI, and state agencies have issued directives (such as banning the DeepSeek app on government devices) to handle AI risks.
Reviewed by Jackie, Head of Learning & Development, Levellers · Last reviewed 18 June 2026
What this means
Oregon's approach to AI focuses on sector-specific laws rather than a single sweeping code. In 2026 it adopted a law (SB 1546) for AI "companion" chatbots that interact with people, especially children, adding requirements like disclosures and suicide-prevention measures. It also requires political campaign ads using AI-generated images or video to carry a clear notice.
Where Oregon has not passed an AI-specific statute, existing laws come into play. For example, the Oregon Consumer Privacy Act (effective 2024) and consumer protection rules cover automated decision-making and transparency in AI use. The state's attorney general has issued guidance applying these laws to AI products. In short, organizations in Oregon must obey these targeted AI rules and otherwise rely on general privacy or consumer laws.
Why it matters
For businesses and public agencies, knowing Oregon's AI rules is essential to avoid legal risk. A tech company offering an interactive chatbot in Oregon may need to follow SB 1546's safety rules. Campaigns and media producers must label AI-generated deepfakes under SB 1571. Firms handling Oregonians' data must comply with the state's privacy law (SB 619) and avoid deceptive AI uses under consumer-protection law. State departments must also heed directives like the CIO's ban on a Chinese AI app. In practice, this means tailoring AI deployment in Oregon to these legal requirements to prevent fines or other enforcement.
How it works
AI companion chatbot law (SB 1546)
Oregon's SB 1546 (enacted 2026, effective Jan 1, 2027) specifically regulates so-called "AI companion" chatbots - systems designed to simulate ongoing emotional or romantic relationships with users. The law defines an AI companion by its ability to remember user preferences, ask unsolicited personal questions, and sustain personal dialogue. It bans operators from presenting a chatbot as human; such bots must display a clear notice that the output is AI-generated if a user might think otherwise. For minors, the rules are stricter: the bot must affirm every few hours that it is not human, suggest breaks, and never portray romantic or sexual roles involving minors.
Operators must also implement a suicide-prevention protocol. If a user (especially under 25) expresses suicidal thoughts, the chatbot must offer contact information for the national 9-8-8 crisis line or a youth support line. These protocols must be based on clinical best practices and published online. The law allows individuals harmed by a violation (for instance, not receiving a referral when needed) to seek legal relief. In short, SB 1546 imposes duties on chatbot developers to make their systems safe and transparent with users.
Deepfakes in political campaigns (SB 1571)
Oregon Senate Bill 1571 (2024, effective March 27, 2024) targets AI use in election-related communications. It defines "synthetic media" as any image, video, or audio of a real person that has been realistically manipulated by AI to show an event or statement that did not happen. SB 1571 requires every campaign ad or communication using such AI-generated media to include a clear disclosure that it has been manipulated. This rule applies to digital ads, social media, mailers or other election materials funded by campaigns.
To enforce this, the law gives the Oregon Secretary of State (and the Attorney General in certain cases) the power to sue for an injunction against anyone violating the disclosure requirement. Courts can impose penalties - up to $10,000 per violation paid into the state treasury - and they may order immediate restraints without waiting for proof of damage. In effect, campaigns must take care to label AI-altered content, or risk being stopped by state regulators.
Personal data and consumer protection
Oregon's recent Consumer Privacy Act (OCPA, SB 619, effective 2024) adds AI-relevant duties in any context involving personal data. Under OCPA, companies must disclose if they trained AI on personal data, get consent for sensitive data uses, and allow consumers to opt out of profiling by algorithms in areas like housing, employment or health. In other words, if an AI system makes automated decisions with legal effects on an Oregon resident (e.g. credit, job offers), individuals have a statutory opt-out right.
Separately, Oregon's longstanding Unlawful Trade Practices Act (ORS 646.607) applies to AI too. The state attorney general's office has warned that using AI in deceptive ways (for example, pretending a bot is a human customer, faking endorsements or flash sales) can violate this law. Oregon's DOJ guidance (Dec 2024) spells out scenarios where AI use triggers these rules, tying back any AI product to established fraud and consumer-protection statutes. Enforcement comes through consumer-protection lawsuits and fines by the Attorney General.
AI-generated sexual images (HB 2299)
Oregon amended its criminal laws to cover AI-made pornography. A recent bill (HB 2299 A, passed 2025) expands the crime of unlawful dissemination of an intimate image to include images created or altered by AI without the subject's consent. To convict, prosecutors must show the distributor intended to harass or humiliate the victim, and the victim was harmed. Under the new law, sharing an AI-generated nude or pornographic image with that intent is a Class A misdemeanor (up to one year jail and fines). This makes Oregon one of the first states to ban non-consensual deepfake pornography, supplementing federal efforts like the "TAKE IT DOWN Act."
Government AI policy and oversight
Beyond statutes, Oregon's government has set policies on AI use in public agencies. In Feb 2025 the state's Chief Information Officer issued an urgent memo directing all agencies to block a Chinese-developed AI app (DeepSeek) on government networks. That reflects cybersecurity concerns and aligns with moves by other states.
At a broader level, Governor Kotek's Executive Order 23-26 (2023) established a State Government Artificial Intelligence Advisory Council to plan how agencies adopt AI responsibly. This council delivered a strategic action plan in early 2025. Likewise, the legislature created an Artificial Intelligence Task Force (HB 4153, 2024) to define AI terminology for future lawmaking. Enforcement of state AI rules falls to various bodies: for example, election laws by the Secretary of State, privacy violations by the Attorney General, and criminal statutes by local prosecutors. The Oregon legislature and agencies continue to watch AI developments, but so far Oregon's framework remains a patchwork of these laws, orders and guidelines.
Examples
A startup releasing an AI "chatbot friend" in Oregon must follow SB 1546 once it takes effect. For instance, if its bot starts suggesting life-ending ideas to a teen user, the startup would risk violating the law unless the bot automatically connects the user to the 9-8-8 suicide hotline. The company also has to label the chatbot as AI and remind young users regularly that they are talking to a program, not a person. Failure to implement these safety measures could lead to lawsuits from users or penalties.
A political campaign in Oregon wants to use AI to deepen an image of an opponent for a TV ad. Under SB 1571, the campaign must include a notice in the ad saying the footage has been digitally altered. If the disclosure is missing, the Oregon Secretary of State could obtain a court injunction and the campaign could face up to $10,000 fines per violation. This means campaign managers need to include an "AI-generated" disclaimer on any ad clips made with generative tools.
A small e-commerce business uses AI to personalize shopping. When processing Oregon customers' data, the company's system must respect the state's privacy law: it should allow customers to opt out of any automated profiling (for example, credit or eligibility checks) as required by SB 619. If the company uses an AI model built on publicly available data, it should document that training data to comply with transparency requirements. Additionally, if it advertises products using AI-generated influencer images, it must ensure it isn't misrepresenting those images (per Oregon's consumer-protection law).
Common misunderstandings
"Oregon has a comprehensive AI code covering all uses." In reality, Oregon relies on a few specific laws and existing statutes. It does not have a general AI regulatory framework like a European-style AI Act. Only certain AI applications (chatbots, political ads, deepfake images) have dedicated rules.
"SB 1546 bans all chatbots." The law targets only AI tools that meet the definition of an "artificial intelligence companion" (emotional/chat bots), not basic customer service bots or virtual assistants. A chatbot used only for factual information or business transactions, without personal relationship features, is not covered.
"All AI-generated campaign content must be labeled." The disclosure law (SB 1571) applies only to political campaign communications. It does not require every AI image or video to carry a label in other contexts (like private ads or entertainment). It also does not cover audio voice‑only AI.
"Oregon's privacy law bans using AI." The Oregon Consumer Privacy Act does not prohibit AI per se. It grants rights to consumers (like opting out of profiling) but does not prevent companies from using AI if they comply. It also doesn't cover purely public or business-to-business data.
"The DeepSeek ban applies to private citizens." The CIO memo forbids the DeepSeek app on state government networks and devices. It does not make using DeepSeek illegal for private users or businesses in Oregon, although it reflects broader security concerns.
Risks and boundaries
Oregon's AI rules do not guarantee overall AI safety or fairness. They do not impose model audits, bias assessments, or broad licensing of AI developers beyond the areas specified. For example, there is no state law requiring an impact assessment for AI systems outside what privacy law demands. Any algorithmic accountability requirements come from federal or local rules, not Oregon-specific statutes. Where Oregon law is silent, general legal standards apply (for instance, negligence or discrimination laws cover harmful AI outcomes).
Some legal aspects remain unsettled. The AI companion law is new and untested, so how strictly courts will enforce it is unclear. Enforcement actions (injunctions or fines) under the campaign disclosure and privacy laws are rare so far, so organizations should watch for how agencies use these powers. Federal developments (like the 2024 "Take It Down Act" for non-consensual pornographic AI images) might overlap with Oregon's intimate-image law. Finally, Oregon's AI task force and advisory council may recommend new rules; future legislation could extend these laws. For now, Oregon's AI regime should be seen as a partial framework that complements (but does not override) existing federal laws.
What to do next
Map Oregon laws to your use cases. Check if your AI product falls under SB 1546, SB 1571, or other Oregon rules. For example, if you offer a chatbot or generate campaign content, you may need to add disclosures or safety features immediately.
Update policies and training. Ensure your AI developers and marketers know these requirements. For chatbots, document your user protocols and publish crisis-handling procedures. For political or promotional content, add AI-use disclaimers. Review your data practices to comply with Oregon's privacy opt-out rights.
Monitor enforcement. Assign someone to track agency guidance and court actions. The Oregon DOJ and Secretary of State may issue more rules or take up cases; be ready to respond if an investigation arises.
Engage with regulators. Comment on any rulemakings (like privacy rules) or task-force proposals to represent your interests. Consider reaching out to the Oregon Department of Justice or industry groups to help clarify how these laws should work in practice.
Plan for future changes. Keep an eye on the AI Task Force report and any new bills. Design your AI systems with flexibility so that if new safeguards or definitions emerge, you can adapt quickly.
FAQs
Does Oregon have a general AI law?
No. Oregon addresses AI through specific laws and existing statutes. Key new laws include SB 1546 (AI chatbots) and SB 1571 (campaign deepfakes). Otherwise, AI is governed by general privacy and consumer-protection rules rather than a unified AI code.
What does the chatbot companion law require?
SB 1546 (effective Jan 2027) applies to AI systems that simulate personal companions. It requires clear labeling that the user is talking to a machine, and mandates safety protocols (for example, suicide hotlines) when users show signs of self-harm. It also restricts what chatbots can say to minors and how often they must remind users they are not real people.
How does the campaign disclosure law work?
SB 1571 (effective March 2024) mandates that any political ad or campaign communication using AI-manipulated video, audio, or images must carry a prominent notice stating it has been altered. The Oregon Secretary of State can get a court to stop and penalize violations. This targets election materials only, not general advertising.
What if my AI product uses personal data?
You must follow Oregon's Consumer Privacy Act (SB 619). If your AI does automated profiling affecting consumers (like credit or hiring decisions), you need to let them opt out of that processing. You also must disclose AI training on personal data and get consent for sensitive data uses. Non-compliance can lead to enforcement by the Attorney General.
Are there penalties for violating these Oregon AI laws?
Yes. Violating SB 1571, for example, can result in injunctions and fines (up to $10,000 per violation) by the Secretary of State. SB 1546 does not create a direct fine but allows affected individuals to sue for injunctive relief if chatbots violate its rules. SB 619 violations (privacy law) can lead to civil penalties by the state. Breaking the deepfake pornography law (HB 2299) is a misdemeanor offense.
Sources
Oregon Department of Justice: Privacy Law FAQs for Businesses (Consumer Protection) - Explains Oregon's Consumer Privacy Act (SB 619), its effective date (2024) and key rights (including consumer opt-out of profiling).
Oregon Department of Justice: Oregon Consumer Privacy Act - AI Guidance (12-24-2024) - AG's guidance on applying Oregon law to AI, including requiring opt-outs from automated profiling and prohibiting deceptive AI claims.
Oregon Enterprise Information Services: MEMORANDUM: Blocking Access to DeepSeek AI on State Resources (CISO Memo) - Official state CIO order (Feb 12, 2025) requiring all executive agencies to ban the DeepSeek AI app on state-owned networks and devices.
State of Oregon Enterprise Information Services: State Government Artificial Intelligence Advisory Council (Oregon) - Describes Governor Kotek's EO establishing an AI advisory council and action plan for state government, delivered Feb 2025.
Oregon Senate Democrats (Oregon Legislature): Anticipating the Impact of Artificial Intelligence (HB 4153 Press Release) - Legislative press release announcing HB 4153, which establishes an Artificial Intelligence Task Force to define AI terms for future laws.
KATU News: Oregon House passes bill to ban AI-generated sexual images - News report on HB 2299, explaining the criminal ban on non-consensual AI-generated explicit images and its penalties.
KATU News: New law targets AI-generated explicit images as Oregon cracks down on digital deepfakes - Reports that, beginning January 2026, sharing AI-created nude images will be a Class A misdemeanor in Oregon, reflecting HB 2299's enactment.
LegiScan LLC: Bill Text: OR SB1546 (2026) - Relating to artificial intelligence companions (Enrolled) - Enrolled text of SB 1546, defining "AI companion" and setting requirements for chatbot platforms, including user notices and suicide-prevention protocols.
LegiScan LLC: Bill Text: OR SB1571 (2024) - Relating to the use of artificial intelligence in campaign communications (Enrolled) - Enrolled text of SB 1571, adding disclosure requirements for synthetic media in campaign ads and enforcement by Secretary of State or AG.
LegiScan LLC: Bill Text: OR SB619 (2023) - Relating to protections for the personal data of consumers (Enrolled) - Enrolled text of the Oregon Consumer Privacy Act (SB 619), establishing data subject rights and controller duties (took effect Jan 1, 2024; many privacy provisions effective July 1, 2024).
LegiScan LLC: Bill Text: OR HB2299 (2025) - Relating to unlawful dissemination of intimate images (Enrolled) - Enrolled text of HB 2299 (2025), expanding the crime of unlawful dissemination of intimate images to include realistic AI-generated images, with intent to harass.