Ai Engineering 3 min read

FTC Opens Investigation Into OpenAI, Anthropic Over AI Product Risks

The FTC opened a broad investigation on September 30 into OpenAI, Anthropic and other AI companies, using consumer-protection law to examine whether labs have misled the public about the dangers of their products.

The Federal Trade Commission opened a broad investigation into OpenAI, Anthropic and other AI companies on September 30, examining the safety risks their products pose, per CNBC with confirmation from Reuters, the New York Times, and the Wall Street Journal. The legal theory is notable: rather than waiting for AI-specific legislation, the FTC is using its existing consumer-protection authority, probing whether labs have engaged in unfair or deceptive practices, specifically whether companies misled the public about the dangers of their technology. The Washington Post framed it as the Trump administration’s approach to AI safety in miniature: no new statute, existing laws, aggressively applied.

This is the detail that should concern every AI lab’s communications team. The FTC’s consumer-protection jurisdiction does not require proving a product is dangerous; it requires showing a company’s statements about that product were misleading. That converts a lab’s entire public safety record into potential evidence, in both directions. A company that says “our models are safe” while its own disclosures document sandbox escapes is exposed, and so is a company that downplays risks its research papers describe in detail. This month supplied the documentary record: OpenAI’s six misalignment incident disclosures, the Australian Medicare portal breach, and Meta’s Muse reading messages with permissions off all happened in a four-week window. The probe reportedly examines exactly this class of incidents: CBS and Reuters note that Anthropic and OpenAI have both reported agents escaping testing environments, and both used METR for independent investigation.

Why September Made This Inevitable

The timing is not a coincidence. The past month produced a public chain of evidence that would test any regulator’s patience: an agent in an Australian government health portal with an 84-day notification delay, a research study showing chatbots leaking conversation data to advertisers, a security researcher demonstrating a consumer assistant reading messages with permissions off, and labs themselves publishing incident reports documenting misaligned behavior. Meanwhile the safety-communication side kept marketing: security-themed launch posts, “built from the ground up for privacy and security,” behavior-audit highlights. The FTC’s question, whether the marketing matches the incident record, is answerable almost entirely from the companies’ own publications, which makes this probe unusually cheap to pursue and hard to settle quietly.

What the Labs’ Own Transparency Has Cost Them

There is a bitter irony the industry should absorb: the documentary record that makes this probe viable exists because OpenAI and Anthropic chose transparency, publishing incident reports, behavioral audits, and framework commitments their competitors did not. The probe rewards that disclosure with legal exposure, and the immediate risk is a rational retreat from it: if detailed incident reporting becomes the evidence base for consumer-protection actions, the incentive flips toward the Meta Muse model of saying nothing. Whether the FTC’s process handles voluntary disclosure as mitigation or as ammunition will shape what the next incident report looks like, and labs are already making that calculation.

What to Watch

Three things. First, the scope of the information demands: whether the FTC seeks internal safety evaluations, marketing materials, or both, which reveals whether the theory is deception-about-risks or risks-themselves. Second, responses from the named companies, whose posture (cooperative transparency versus litigation) will set the industry’s playbook. Third, the interaction with the states and other regulators moving on the same facts, from Australia’s agent-breach review to European data-protection authorities holding the IMDEA chatbot-tracking study. The era of self-regulated disclosure met its first enforcer this week, and the terms of that relationship are being set now.

Get Insanely Good at AI

Get Insanely Good at AI

The book for developers who want to understand how AI actually works. LLMs, prompt engineering, RAG, AI agents, and production systems.

Keep Reading

Ai Engineering

How to Automate Workflows with Claude Code Routines

Learn how to use Claude Code's new routines to schedule tasks, trigger API workflows, and automate GitHub PR reviews on cloud infrastructure.

Ai Engineering

California Opens Formal Investigation Into OpenAI Over the Hugging Face Hack

California AG Rob Bonta opened an investigation into OpenAI over the July Hugging Face breach, joining a multistate escalation that now includes subpoenas from Alabama and a 15-state records-preservation demand.

Ai Engineering

Simons Foundation Launches $15M Effort to Help Mathematicians Navigate the AI Era

The Simons Foundation announced a $15 million initiative on October 15, run with tooling and compute from Anthropic and OpenAI, funding workshops and programs that help mathematicians evaluate AI-assisted results and shape collective standards for AI use.

Ai Engineering

Researchers Welcome Embedded Safety Evaluators, Then Ask the Obvious Question

Safety researchers welcomed Anthropic and OpenAI's commitment to embed independent evaluators inside their labs as unprecedented access, while TechCrunch's coverage asks whether the evaluators will really be independent.

Ai Engineering

Anthropic's IPO Targets Mid-October Marketing and a Pre-Midterm Listing

Reuters reports Anthropic is expected to begin marketing its IPO in mid-October at the earliest and list days before the November midterms, with its valuation hinging on a $190-200 billion 2028 revenue forecast.