Oregon Just Signed the First AI Law With Real Teeth — Here's Your January 1 Deadline

April 2, 20267 min readBy The Crossing Report

On March 31, 2026, Oregon Governor Tina Kotek signed SB 1546 into law.

That date matters. It makes Oregon the first state in the United States to enact a chatbot disclosure law with a private right of action — meaning any individual can sue your firm directly, without waiting for the government to act, and collect $1,000 per violation.

No stated cap. Per interaction.

Get the full picture. Go premium.

Weekly intelligence briefings, deeper analysis, and direct access to the full archive.

If your firm has an AI intake assistant, a FAQ bot, or any conversational AI tool that clients or prospects interact with — and you serve anyone in Oregon — you now have until January 1, 2027 to get compliant.

Here's what the law does and exactly what you need to do before that deadline.


What Oregon SB 1546 Actually Requires

The law covers any "consumer-facing interactive AI chatbot" — broadly defined as an automated conversational system that a reasonable person could mistake for a human.

That scope is wide enough to include most client-facing AI tools in professional services: website intake bots, AI-powered FAQ assistants, scheduling tools with natural-language interfaces, and client portal tools that respond to queries conversationally.

Three core requirements:

1. Disclose that users are talking to AI. At the start of every interaction where a reasonable person could mistake the AI for a human, the system must make clear it is an automated AI, not a person. A simple disclosure works: "You are chatting with an AI assistant. This conversation is automated. For questions about your matter, please call our office."

2. Detect and respond to self-harm signals. Any AI tool that handles user conversations — including intake tools where clients may describe their legal, financial, or business situation under stress — must include protocols to detect suicidal or self-harm ideation and direct users to appropriate crisis resources (988 Suicide and Crisis Lifeline).

3. Don't let AI pretend to be human. The law prohibits operators from deploying AI that is designed to make users believe they are talking to a person. This includes giving AI assistants human names without disclosure, and designing AI interactions to simulate human emotional responses in ways meant to conceal the automated nature of the tool.


The Private Right of Action Is the Part Most Firms Are Missing

Most state AI laws pass enforcement authority to the attorney general — a government official who has to prioritize cases and balance enforcement resources. That's a meaningful but limited liability.

Oregon SB 1546 is different. The private right of action means any user who interacts with a non-compliant AI tool can file a civil lawsuit and claim $1,000 per violation. They don't have to prove economic harm. The $1,000 is statutory — it's the default damages for any violation of the disclosure requirement.

The liability math is straightforward. If your firm runs an AI intake tool and fields 50 client inquiries per month in Oregon, every non-compliant interaction is a potential $1,000 claim. That's $50,000 in monthly exposure — not from a government enforcement action, but from individual users, potentially coordinated.

This is the same enforcement model used in consumer protection statutes like TCPA (robocall law) and some state biometric privacy laws. If you've watched litigation patterns in those areas, you know what private rights of action produce: class actions, standing-ready plaintiff attorneys, and demand letters to every non-compliant operator in sight.

The January 1, 2027 deadline gives you nine months. That's enough time to get this right. It's not enough time to ignore it.


The Two-Deadline Compliance Calendar

Oregon SB 1546 doesn't exist in isolation. You're managing two signed state laws with two different deadlines:

Law Effective Date Enforcement
Washington HB 2225 June 22, 2026 AG enforcement + private action for certain violations
Oregon SB 1546 January 1, 2027 Private right of action — $1,000/violation

Washington's deadline is the near-term priority. If your firm serves Washington clients with any AI tool, June 22 is 81 days away as of this writing. That's your immediate action item.

Oregon's deadline gives more runway but more liability. Build Washington compliance first — the disclosure language you implement for Washington will satisfy Oregon's requirements when you extend it to Oregon operations.

Georgia SB 540 — a similar chatbot disclosure bill — passed both chambers and as of early April awaits Governor Kemp's signature. If signed, Georgia would be the third state adding to this compliance calendar. The same disclosure infrastructure covers Georgia as well.


Which Professional Services Firms Are Covered

If you're in Oregon or serve Oregon clients, walk through this checklist:

Law firms: Any chatbot or AI assistant on your website that responds to prospective client inquiries. Any AI tool embedded in your client portal that answers questions. Any AI intake system that conducts an initial screening conversation.

Accounting firms: Any AI FAQ tool that answers questions about services, deadlines, or fees before engagement. Any AI client portal assistant. Any chatbot on your site powered by HubSpot, Drift, Intercom, Freshdesk, or a custom AI solution.

Consulting firms: Lead qualification bots. AI assistants that respond to website visitors. Any automated conversational system that handles initial client or prospect contact.

Staffing and recruiting firms: AI screening tools that interact with job candidates. Automated messaging systems that use AI to respond to applicant inquiries in natural language.

Marketing agencies: Any AI chat widget on your website or your clients' websites that you operate or manage.

The practical test: Does the tool respond to a user in natural language, in a way where the user might not know they're talking to AI? If yes, SB 1546 likely applies.


Your Compliance Action Plan

Before June 22, 2026 (Washington HB 2225 deadline):

  1. Inventory every client-facing AI tool. Pull a list of every tool — website chat widgets, client portal AI, intake tools, scheduling bots. Include tools your vendors manage on your behalf.

  2. Test each tool's current disclosure. Start a conversation. Does the tool immediately tell you it's AI? If not, it's non-compliant.

  3. Update your vendor or configuration. Most AI chat platforms (Drift, Intercom, HubSpot, etc.) allow you to set an opening message. Set it to include a clear AI disclosure. If your vendor can't do this, evaluate alternatives before the deadline.

  4. Add 988 crisis referral language. Configure your AI tool to include the 988 Suicide and Crisis Lifeline in any interaction where a user may disclose distress — and check your vendor's documentation for how to implement this.

Before January 1, 2027 (Oregon SB 1546 deadline):

  1. Extend compliant disclosure to Oregon operations. If you built Washington compliance, apply the same disclosure framework to every AI tool serving Oregon clients.

  2. Review your engagement letters. If your firm uses AI in any client-facing workflow, your engagement letter should include a disclosure clause. This is already good practice under ABA and bar guidance — now it also intersects with state law compliance.

  3. Document your compliance steps. If you face a SB 1546 claim, documentation that you took reasonable steps to comply matters — both for your defense and for your professional liability insurer.


The Broader Pattern

Oregon SB 1546 is the 78th active AI chatbot safety bill across 27 states, according to AI2Work's March 2026 analysis. Three have already been signed this month. Washington's was first. Oregon's was second. Georgia is likely third.

The pattern is consistent: near-unanimous votes (Oregon's House passed 52-0), short effective-date windows (60-180 days), and increasingly aggressive enforcement models. The private right of action in Oregon's law is the template other states will copy.

For a professional services firm owner reading this: the compliance question is no longer "is AI regulation coming?" It arrived. The question is whether your firm is compliant before the deadlines hit.

Nine months is sufficient time if you start now. It's not sufficient time if you wait to see what happens.


Sources: Baker Botts — Oregon SB 1546: The First Chatbot Law With Real Teeth | Troutman Privacy — Oregon Legislature Passes Bill Regulating Consumer-Facing Interactive AI With Private Right of Action | AI2Work — 78 AI Chatbot Safety Bills Across 27 States | LegiScan — Oregon SB 1546

Related: Washington Just Signed an AI Chatbot Law. Oregon and Georgia Are Next. | Oregon SB 1546: What the Bill Said Before It Was Signed | Washington HB 1170: The AI Disclosure Law That Will Change What You Send to Clients

Frequently Asked Questions

What did Oregon SB 1546 do when it was signed?

Governor Tina Kotek signed Oregon SB 1546 on March 31, 2026, making it the first enacted US chatbot law with a private right of action. The law requires operators of consumer-facing AI chatbots to disclose that users are interacting with AI (not a human) whenever a reasonable person could mistake the AI for a person. It also requires protocols for detecting signs of suicidal or self-harm ideation. The law takes effect January 1, 2027, and creates a private right of action with $1,000 in statutory damages per violation — with no stated cap.

Does Oregon SB 1546 apply to my law firm or accounting firm?

If your firm is in Oregon or serves Oregon clients, and you operate any AI tool that interacts directly with clients or prospects in a conversational way — an intake chatbot, FAQ assistant, scheduling bot, or AI-powered client portal — you are likely a covered chatbot operator under SB 1546. The key test: could a reasonable person mistake the AI for a human? If yes, disclosure is required. Professional services firms should inventory every client-facing AI tool and verify that their vendor's tool either already discloses its AI nature or can be configured to do so before January 1, 2027.

What is the $1,000 per violation exposure under Oregon SB 1546?

The private right of action in SB 1546 allows any individual harmed by a violation to bring a civil action and recover $1,000 in statutory damages per violation — without needing to prove actual monetary harm. There is no stated cap on total damages. For a professional services firm processing client inquiries through a non-compliant AI tool, each interaction that fails the disclosure requirement could be a separate violation. A firm fielding 100 intake inquiries per month through a non-compliant chatbot could theoretically face $100,000 in monthly exposure. The private right of action is what separates SB 1546 from most state AI laws, which rely solely on attorney general enforcement.

How is Oregon SB 1546 different from Washington HB 2225?

Both laws require AI chatbot disclosure and crisis referral protocols, but the enforcement mechanisms differ significantly. Washington HB 2225 relies primarily on attorney general enforcement — the state AG pursues violations, not individual users. Oregon SB 1546 includes a private right of action: any individual can sue a violator directly for $1,000 per violation. This means the Oregon law creates ongoing individual liability risk for every non-compliant interaction, not just regulatory risk from a government enforcement action. Washington's June 22, 2026 effective date makes it the nearer deadline; Oregon's January 1, 2027 gives more runway but creates the more significant individual liability exposure.

What's the fastest path to compliance with these state AI chatbot laws?

Three steps: (1) Inventory every client-facing AI tool — any chatbot, FAQ assistant, scheduling bot, or AI-powered intake tool. (2) Verify that each tool can display a clear disclosure statement at the start of every interaction: 'You are interacting with an AI assistant, not a human.' Check with your vendor. (3) Ensure crisis referral language (988 Suicide and Crisis Lifeline) is accessible in the system. If your tool can't be configured for compliant disclosure, replace it or take it offline before the applicable deadline. Washington's June 22 deadline is the most urgent. Oregon's January 1, 2027 gives you nine months — use it.

Will a federal AI law preempt Oregon SB 1546 before it takes effect?

No — and you shouldn't wait to find out. Federal AI legislation has 'very bleak' prospects for 2026, according to multiple legal analysts. The White House released a framework in March 2026 recommending that Congress preempt state AI laws, but that framework is not binding law. Oregon's effective date is January 1, 2027. A federal preemption bill would need to be passed, signed, and take effect before that date — an almost impossible legislative timeline given current Congress dynamics. The correct compliance posture: treat Oregon SB 1546 as binding law and build your disclosure infrastructure before January 1.

Get the weekly briefing

AI adoption intelligence for accounting, law, and consulting firms. Free to start.

Free weekly digest. No spam. Unsubscribe anytime.

Related Reading

This is the kind of intelligence premium subscribers get every week.

Deep analysis, cross-sector patterns, and the frameworks that help professional services firms make the crossing.