Key Takeaways
- • Pennsylvania filed the first gubernatorially-announced lawsuit against Character.AI on May 1, alleging unlawful medical practice after investigators discovered chatbot characters claiming to hold valid medical licenses and providing invalid Pennsylvania license numbers.
- • The FDA has taken no enforcement action or issued specific guidance on medical chatbots despite their potential classification as software devices requiring regulatory clearance, creating a regulatory vacuum that states are rapidly filling.
- • A fragmented patchwork of state regulations is emerging across the U.S., including laws prohibiting AI use of healthcare professional titles, restricting mental health chatbots, and mandating disclosure requirements—creating significant compliance uncertainty for AI developers and providers.
- • Utah's pilot program authorizing AI to autonomously prescribe routine medication refills was recommended for immediate suspension by the Utah Medical Licensing Board due to patient safety concerns, signaling pushback against permissive state approaches.
- • All 50 states regulate medical practice and physician licensing, positioning state medical boards as primary enforcement bodies against medical AI systems absent federal FDA action, likely triggering additional litigation similar to Pennsylvania's case.
Summary
The lawsuit follows an investigation by Pennsylvania's AI Task Force into unlicensed medical practice by AI systems, underscoring growing state concern about the regulatory gap left by federal inaction. The FDA has neither issued enforcement actions nor published definitive guidance clarifying its position on medical chatbots, despite these tools potentially meeting the statutory definition of software devices subject to FDA oversight—particularly when intended to diagnose, treat, or prevent disease. While certain clinical decision support software used by licensed healthcare professionals enjoys exemption from device classification, no such exemption exists for patient-facing chatbots, creating legal ambiguity that has left enforcement to state authorities.
This enforcement gap has prompted a divergent patchwork of state responses. Multiple states have enacted AI-specific legislation addressing health chatbots through prohibitions on healthcare professional title usage, restrictions on mental health chatbots, and mandatory disclosure requirements. Utah's more permissive approach—authorizing an AI pilot program for autonomous prescription refills—has drawn criticism; the Utah Medical Licensing Board recommended immediate program suspension citing patient safety concerns. With all 50 states maintaining their own medical practice and physician licensing regimes, state medical boards are positioned as the primary enforcement bodies, likely foreshadowing additional litigation beyond Pennsylvania's case. This fragmented regulatory environment creates significant compliance risk for AI developers and service providers operating across multiple jurisdictions.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.