The statute imposes four core obligations. Operators must clearly disclose when users might reasonably believe they're interacting with a human. They must implement protocols to detect suicidal ideation or self-harm and refer users to the 988 hotline or Youthline for those under 25. They must file annual safety reports. For minors, the requirements tighten: companions cannot claim to be human, simulate emotional dependence, or engage in romantic or sexual content, and must prompt users to take breaks every three hours. The law creates a private right of action with $1,000 statutory damages per violation, plus injunctive relief and attorney fees.
Oregon follows Washington's HB 2225 and builds on California's SB 243, now effective in 2026. The bill passed both chambers with bipartisan support after introduction in February 2026. Attorneys representing AI and tech companies should treat January 1, 2027, as a hard deadline for compliance review. The private enforcement mechanism and statutory damages create immediate litigation exposure, and the Western U.S. trend suggests similar laws are likely in other states.