Oregon · AI compliance plan
What Oregon’s AI laws require of you.
Oregon has 7 enacted AI laws in our records. We have mapped 5 of them duty by duty: 16 duties in all, each with who it falls on, when it starts and the section of law it comes from. The next one starts January 1, 2027.
The plan at a glance
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 6 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| March 27, 2024 | Oregon synthetic media in campaign communications disclosure law (SB 1571) | Campaign communication sponsor | Include a disclosure stating that the image, audio recording or video recording has been manipulated in any campaign communication that contains synthetic media.Applies when: A campaign communication about an Oregon candidate or measure includes synthetic media. | Each time it happens | Oregon Laws 2024, ch. 62, § 1(2) |
| January 1, 2026 | Oregon ban on AI using nursing titles (HB 2748) | Nonhuman entity (including an AI agent) | Do not use the titles APRN, CRNA, clinical nurse specialist, LPN, registered nurse, nurse practitioner, certified medication aide or certified nursing assistant, or their abbreviations.Applies when: Any AI agent or other nonhuman entity, on or after January 1, 2026. | Ongoing | Oregon Laws 2025, ch. 378, § 2 |
| January 1, 2026 | Oregon digitally altered intimate images offense (HB 2299) | Person | Do not knowingly disclose a realistic digitally created or altered intimate image of someone, intending to harass, humiliate or injure them, when you know they did not consent.Applies when: The person is actually harassed, humiliated or injured, and a reasonable person would be. | Ongoing | ORS 163.472(1)(a)-(d), (3)(b)(B) |
| March 31, 2026 | Oregon automated license plate recognition law (SB 1516) | Vendor | Do not access, disclose, sell, share or otherwise use captured license plate data, except agency-approved, limited technical support or providing required audits.Applies when: A vendor supplies a license plate recognition system or data to an Oregon law enforcement agency. | Ongoing | Oregon Laws 2026, ch. 77, § 9(1)(a), (b) |
| March 31, 2026 | Oregon automated license plate recognition law (SB 1516) | Vendor | Give the agency a searchable monthly audit for the prior 30 days: systems, fixed locations, searches, agencies with access, users, vehicles captured, alerts and per-search user, time and purpose.Applies when: A vendor supplies a license plate recognition system to an Oregon law enforcement agency. | Ongoing | Oregon Laws 2026, ch. 77, § 6(1) |
| March 31, 2026 | Oregon automated license plate recognition law (SB 1516) | Vendor | Give the agency a searchable quarterly audit of searches run for other government entities, with user, employing agency, requester, time, purpose and devices used.Applies when: Searches were run during the prior quarter on behalf of a government entity other than the law enforcement agency. | Ongoing | Oregon Laws 2026, ch. 77, § 6(2) |
Starting in the next 90 days 7 duties
Time to prepare is short for these.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| January 1, 2027 | Oregon AI companion law (SB 1546) | Operator | Give a clear and conspicuous notice on the platform that the user is interacting with artificially generated output and not a natural person.Applies when: A reasonable person interacting with the AI companion or platform would believe they are interacting with a natural person. | Ongoing | Or. Laws 2026, ch. 85, § 1(2) |
| January 1, 2027 | Oregon AI companion law (SB 1546) | Operator | Do not allow users access without a protocol that uses evidence-based methods to detect suicidal or self-harm ideation or intent and prevents content encouraging suicide or self-harm.Applies when: Access by users in Oregon to an AI companion or AI companion platform. | Ongoing | Or. Laws 2026, ch. 85, § 1(3)(a) |
| January 1, 2027 | Oregon AI companion law (SB 1546) | Operator | Use clinical best practices and expertise to set further intervention for a user who keeps expressing ideation or intent after referrals, and publish the protocol's details on its website.Applies when: Any operator required to have the protocol. | Ongoing | Or. Laws 2026, ch. 85, § 1(3)(b)(B), (3)(c) |
| January 1, 2027 | Oregon AI companion law (SB 1546) | Operator | Take reasonable measures to prevent statements suggesting a natural person is present: claims of sentience or humanity, simulated emotional dependence, romantic interest or sexual innuendo, adult-minor romantic role-play.Applies when: The operator knows or has reason to believe a user is a minor. | Ongoing | Or. Laws 2026, ch. 85, § 1(4)(a) |
| January 1, 2027 | Oregon AI companion law (SB 1546) | Operator | Cause the AI companion to disclose that its output is artificially generated, and remind the user at least every three hours to take a break and that output is artificial.Applies when: The operator knows or has reason to believe a user is a minor. | Ongoing | Or. Laws 2026, ch. 85, § 1(4)(b)(A), (B) |
| January 1, 2027 | Oregon AI companion law (SB 1546) | Operator | Use reasonable measures so the AI companion or platform does not produce visual representations of sexually explicit conduct or suggest that the minor engage in it.Applies when: The operator knows or has reason to believe a user is a minor. | Ongoing | Or. Laws 2026, ch. 85, § 1(4)(b)(C) |
| January 1, 2027 | Oregon AI companion law (SB 1546) | Operator | Take reasonable measures to prevent engagement-maximizing rewards or affirmations, simulated distress or guilt when the user tries to leave, and material misrepresentations about the AI companion.Applies when: The operator knows or has reason to believe a user is a minor. | Ongoing | Or. Laws 2026, ch. 85, § 1(4)(c) |
Starting later 1 duty
Dates further out, in order.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| December 31, 2027 | Oregon AI companion law (SB 1546) | Operator | Post a report on a publicly accessible website stating the number of crisis referrals in the preceding calendar year and the details of the protocol, without identifying personal information.Applies when: Not later than December 31 of each year. | Every year | Or. Laws 2026, ch. 85, § 1(5) |
Triggered by an event 2 duties
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | Oregon AI companion law (SB 1546) | Operator | Have the AI companion refer a user expressing suicidal or self-harm ideation or intent to the national 9-8-8 lifeline, with contact information and a hyperlink.Applies when: A user expresses such ideation or intent; a youthline referral may be given instead if the operator identifies the user as under 25. | Each time it happens | Or. Laws 2026, ch. 85, § 1(3)(b)(A) |
| When triggered | Oregon automated license plate recognition law (SB 1516) | Vendor | Accept contract terms making the agency the data owner, routing warrants and subpoenas to the agency, requiring end-to-end encryption, FBI CJIS compliance, audit rights and prompt breach reporting.Applies when: A contract signed, renewed or extended on or after March 31, 2026, under the agency's required policy. | Once | Oregon Laws 2026, ch. 77, §§ 7(2)(e)(A)-(E), 8(1) |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
Oregon AI companion law (SB 1546)
9 duties · checked November 12, 2026
Senate Bill 1546 (2026 Regular Session), Oregon Laws 2026, chapter 85; not yet assigned ORS section numbers in the text read. Official text · Full law page
Who it covers
- Operator. A person that controls or makes an artificial intelligence companion or artificial intelligence companion platform available to users in Oregon. Or. Laws 2026, ch. 85, § 1(1)(d)
Enforcement
- Enforcer: No public enforcer is named. The Act is enforced through lawsuits by injured individuals in Oregon courts.
- Penalty: The greater of actual damages or statutory damages of $1,000 for each violation, recoverable by an individual injured by an operator's violation of section 1, together with an injunction. Or. Laws 2026, ch. 85, § 2(1)
- Penalty: Attorney fees and costs, the court may award them to a prevailing plaintiff. Or. Laws 2026, ch. 85, § 2(2)
- Can people sue? Yes Or. Laws 2026, ch. 85, § 2(1) (an individual who suffers an ascertainable loss of money or property or other injury in fact)
- Time to fix before enforcement: The law does not say
Exemptions
- Not AI companions: software operating solely for customer service or support, patient or resident care support in a facility, education, financial services, business operations, productivity, information analysis, internal research or technical assistance. Or. Laws 2026, ch. 85, § 1(1)(a)(B)(i)
- Video game software limited to the game's features that does not respond on topics such as mental health, self-harm, sexually explicit conduct or other topics unrelated to the game. Or. Laws 2026, ch. 85, § 1(1)(a)(B)(ii)
- A stand-alone consumer electronic device that functions as a speaker and voice command interface or voice-activated virtual assistant. Or. Laws 2026, ch. 85, § 1(1)(a)(B)(iii)
What the text leaves open
- The Act does not define minor or state an age for it; the youthline referral option separately uses under 25.
- A violation is not defined, so the counting unit for $1,000 statutory damages is unclear.
- The Act names no attorney general or agency enforcement, civil penalty or limitations period.
- The annual report is due by December 31 of each year. The first due date is shown here as December 31, 2027; the Act does not say whether a report covering 2026 is expected.
- The session law read does not show ORS section numbers; codified numbering was not checked.
Oregon automated license plate recognition law (SB 1516)
4 duties · checked November 15, 2026
Oregon Laws 2026, ch. 77 (SB 1516, 2026 Regular Session), sections 3 to 9 on automated license plate recognition systems. Official text · Full law page
Who it covers
- Vendor. A vendor that provides an automated license plate recognition system or holds captured plate data for an Oregon law enforcement agency; the act does not define vendor. Oregon Laws 2026, ch. 77, §§ 6, 7(2)(e), 9
Enforcement
- Enforcer: Private lawsuits only; no state agency enforcement or fines are set for vendors. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: Economic and noneconomic damages, equitable relief, and reasonable attorney fees, a vendor's intentional or grossly negligent misuse of an individual's captured plate data. Oregon Laws 2026, ch. 77, § 9(2)
- Penalty: Injunction, any vendor violation of the data-use ban, in a suit by any person. Oregon Laws 2026, ch. 77, § 9(3)
- Can people sue? Yes Oregon Laws 2026, ch. 77, § 9(2)-(4)
- Time to fix before enforcement: The law does not say
Exemptions
- Certain photo red light cameras and photo radar units are not automated license plate recognition systems. Oregon Laws 2026, ch. 77, § 3(3)(b)
- Contracts signed before the effective date may continue until they end, but may not be extended, renewed or replaced unless they comply. Oregon Laws 2026, ch. 77, § 8(1)
What the text leaves open
- Vendor is not defined in the act; the vendor contract terms in section 7(2)(e) are required by the agency's policy rather than imposed on vendors directly.
- Section 9(4) makes these suits the exclusive remedies; no limitation period is stated.
Oregon ban on AI using nursing titles (HB 2748)
1 duty · checked November 15, 2026
Oregon Laws 2025, ch. 378 (HB 2748, 2025 Regular Session); added to ORS 678.010 to 678.410. Official text · Full law page
Who it covers
- Nonhuman entity. Any nonhuman entity, including but not limited to an agent powered by artificial intelligence. Oregon Laws 2025, ch. 378, § 2
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Oregon Laws 2025, ch. 378
- Time to fix before enforcement: The law does not say
What the text leaves open
- Whether the Oregon State Board of Nursing's existing civil penalty or title-protection enforcement in ORS chapter 678 applies to this section was not checked.
- The duty is written as a restriction on the nonhuman entity itself; the act does not say which person or business is responsible.
Oregon digitally altered intimate images offense (HB 2299)
1 duty · checked November 15, 2026
Oregon Laws 2025, ch. 116 (HB 2299, 2025 Regular Session); amends ORS 163.472. Official text · Full law page
Who it covers
- Person. Any person who knowingly causes an intimate image of another person to be disclosed with intent to harass, humiliate or injure. ORS 163.472(1)
Enforcement
- Enforcer: Criminal prosecution; the act does not name the prosecuting office. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: Class A misdemeanor, unlawful dissemination of an intimate image. ORS 163.472(2)(a)
- Penalty: Class C felony, where the person has a prior conviction under this section. ORS 163.472(2)(b)
- Can people sue? The law does not say Oregon Laws 2025, ch. 116
- Time to fix before enforcement: None
Exemptions
- Providers of an interactive computer service for images provided by an information content provider. ORS 163.472(4)(g)
- Law enforcement, legitimate medical, scientific or educational activity, legal proceedings, reporting unlawful conduct, lawful public interest disclosures, and voluntary public or commercial images. ORS 163.472(4)(a)-(f)
What the text leaves open
- Oregon's separate civil action for disclosure of intimate images is not amended by this act and was not read; whether it reaches digitally altered images is not stated here.
Oregon synthetic media in campaign communications disclosure law (SB 1571)
1 duty · checked November 15, 2026
Oregon Laws 2024, ch. 62 (SB 1571, 2024 Regular Session); section 1 added to ORS chapter 260; amends ORS 260.345. Official text · Full law page
Who it covers
- Campaign communication sponsor. Anyone responsible for a communication supporting or opposing a clearly identified candidate or measure that includes synthetic media; the act attaches the duty to the communication, not a named person. Oregon Laws 2024, ch. 62, § 1(1)(a), (2)
Enforcement
- Enforcer: Oregon Secretary of State by court action (Attorney General for violations involving the Secretary of State or candidates for that office); any elector may file a complaint. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: Up to $10,000, a violation proved in court; paid to the General Fund. Oregon Laws 2024, ch. 62, § 1(4)
- Penalty: Injunction and reasonable attorney fees to the prevailing party, proceedings to enjoin a violation; no proof of injury required. Oregon Laws 2024, ch. 62, § 1(3)
- Can people sue? No Oregon Laws 2024, ch. 62, § 1(3), (5)
- Time to fix before enforcement: The law does not say
Exemptions
- Interactive computer service and information service providers. Oregon Laws 2024, ch. 62, § 1(6)(a)
- Broadcasters in bona fide news coverage that note authenticity questions; broadcasters, websites and platforms paid to air or publish the communication. Oregon Laws 2024, ch. 62, § 1(6)(b), (c)
- Regular newspapers and periodicals that state the synthetic media does not accurately represent a candidate or ballot issue. Oregon Laws 2024, ch. 62, § 1(6)(d)
- Satire, parody, and impersonation that does not rely on technology. Oregon Laws 2024, ch. 62, § 1(6)(e)
What the text leaves open
- The act does not say who must add the disclosure or set its format, size or duration.
- Electors may file complaints within 90 days after the election or the violation under amended ORS 260.345(7).
Other enacted laws to check
These 2 enacted AI laws are in the states you chose, but they are not yet mapped duty by duty, so they are not in the plan above. Each page has a summary and the official source.
- Oregon HB3936: Relating to the security of state assets; amending ORS 276A.340, 276A.344, 276A.346 and 276A.348. (effective January 1, 2026)
- Oregon HB4153: Relating to artificial intelligence; and declaring an emergency. (effective March 27, 2024)
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.