State Attorneys General Ask a Bankruptcy Court for Character.AI Data Protections, and Businesses Take Note

What the coalition actually asked for

According to a statement from the Office of the New York Attorney General, a coalition of 40 attorneys general filed a notice of interest in the bankruptcy case of Character Technologies, the company behind the Character.AI chatbot platform. The coalition states that any sale or transfer of the company's business or assets should include protections for consumers, particularly minors. Independent reporting by The Verge describes the same filing and notes that several states were mid-investigation when the company filed for bankruptcy.

The protections the attorneys general describe seeking include a comprehensive privacy program, clear disclosures about how personal data is used, effective opt-outs from targeted advertising, limits on using private conversations for AI training or other commercial purposes without valid consent, and an opportunity for consumers to access and delete their information before any sale. The coalition also asks for effective age verification and safeguards against harmful content.

It is important to read this carefully. The attorneys general are asking the bankruptcy court, the company, and any prospective buyer to adopt these measures. A request filed by regulators is not the same as a court order, and nothing in the verified reporting establishes that the court has granted any of it. The coalition's investigation describes alleged conduct and testing results, which are not judicial findings, and the reporting does not establish a completed data sale or a public data breach.

Why this matters beyond one consumer platform

The underlying problem is ordinary. A company accumulates customer records over years: support tickets, chat transcripts, account notes, and files scattered across a CRM, a help desk, a document store, and a few spreadsheets. When the company is sold, restructured, or simply receives a request from a customer who wants their data returned or deleted, nobody can quickly answer what the company holds, where it lives, or who is allowed to release it.

The Character.AI episode is extreme because the data involved is unusually sensitive and the setting is a bankruptcy. The same structural gap, however, shows up in routine business. Vendors change, subscriptions lapse, exports are limited by contract, and copies persist with third parties. Regulators increasingly frame the expectation that a business can account for customer data and honor access and deletion requests, and this filing signals how seriously state enforcers take that expectation when assets move.

What this means for your business

Detailed In Design could build a customer data-request portal connected to an authorized inventory of your documents and customer records. In such a system, a customer submits a request through the portal; staff verify the requester's identity through a controlled process; the system locates the records that match that customer across the connected systems; retention exceptions and legal holds are flagged rather than silently deleted; and the staff member who owns the request drafts an export manifest or a deletion plan. Named staff, and where appropriate your counsel, approve the release or deletion before it is executed, and the approved action is logged.

The practical benefit is trackability. Requests, missing records, and review ownership become visible in one place instead of being reconstructed by hand each time. That can reduce repeated manual collection when a request arrives or when a system change forces a data review.

The limits are just as important as the capability. Engineering controls do not by themselves establish legal compliance; your counsel determines what the law requires, what must be retained, and what can be transferred. Some records may sit with third parties whose contracts or missing export interfaces make deletion or export partial. A portal is a proposed bespoke workflow tailored to your systems, not an off-the-shelf product, and nothing in this article describes any relationship between Detailed In Design and Character.AI or any of the parties in that case.

A restrained next step

You do not need a bankruptcy to justify this work. A useful first step is a written inventory of where customer data actually lives, paired with a named reviewer for access and deletion requests. If you want help turning that inventory into a working request portal with approval and audit logging, Detailed In Design builds custom portals, document management, and workflow automation, and we would scope it against your actual systems and your counsel's requirements.