Oregon: AI health laws
5 entries on the map: 4 in force and 1 enacted and not yet in force (main duties begin Jan 1, 2027).
Dates ahead
- Jan 1, 2027SB 1546, Relating to Artificial Intelligence CompanionsClinical decision and chatbot limits
Payer and utilization review AI
Insurers', benefit managers' and utilization reviewers' use of AI, including prior authorization and claim denials.
Nothing in this category was found in the review of Sept 29, 2026.
Patient disclosure of AI use
Telling patients that AI is used in their care or in messages to them.
Also relevant here: SB 1546, Relating to Artificial Intelligence Companions (under clinical decision and chatbot limits).
Clinical decision and chatbot limits
Limits on AI in clinical decisions and on health chatbots, including AI presenting itself as a licensed professional.
Oregon Medical Board Statement of Philosophy: Artificial/Augmented Intelligence
States the Board's expectation that licensees using AI have basic AI literacy, assess the quality of AI outputs, identify and guard against bias in AI algorithms, avoid overreliance on AI that compromises their own medical decision-making, and remain responsible for the care they provide.
Physician read. Since April 4, 2024, the Oregon Medical Board has stated that it will continue to hold licensees responsible for the care they provide to patients, and it expects licensees who use AI to have basic AI literacy, assess the quality of AI outputs, guard against bias in AI algorithms and not become so reliant on AI that it compromises their own medical decision-making.
Notes: Statements of philosophy are adopted by the Board to express its philosophy and intentions regarding the practice of medicine; the Board is not required to hold public hearings before adopting them. The adoption date comes from the statement's own page; the index lists no dates. The statement does not address disclosing AI use to patients or obtaining their consent.
HB 2748, Relating to the Use of Nursing Titles
Bars a nonhuman entity, including an agent powered by artificial intelligence, from using any of eight nursing titles or their abbreviations: advanced practice registered nurse, certified registered nurse anesthetist, clinical nurse specialist, licensed practical nurse, registered nurse, nurse practitioner, certified medication aide and certified nursing assistant.
Physician read. Since Jan. 1, 2026, an AI agent or other nonhuman entity used by a practice, health system or vendor in Oregon may not use a nursing title such as registered nurse or nurse practitioner, or its abbreviation.
Notes: Chapter 378, Oregon Laws 2025; added to ORS 678.010 to 678.410. The OLIS overview shows the chapter number but no history, so dates come from LegiScan: passed the House March 4, 2025, passed the Senate as amended June 11, 2025, House concurrence June 13, 2025, signed June 24, 2025. The enrolled text has no effective-date clause, so under ORS 171.022 it took effect Jan. 1, 2026; LegiScan and the Oregon State Bar's technology law section give the same date.
SB 1546, Relating to Artificial Intelligence Companions
Requires operators of AI companions to give clear and conspicuous notice that a user is interacting with artificially generated output and not a natural person whenever a reasonable person would believe they were interacting with a natural person, to keep a protocol using evidence-based methods to detect suicidal or self-harm ideation or intent that blocks content encouraging suicide or self-harm, refers users to the 988 Suicide and Crisis Lifeline (or a youthline for users identified as under 25) and uses clinical best practices for further intervention, to post an annual report on referrals, and to apply added protections for minors.
Physician read. It places no duty on physicians. From Jan. 1, 2027, AI companions offered to users in Oregon must have a protocol that uses evidence-based methods to detect suicidal or self-harm ideation and refers users who express it to the 988 Suicide and Crisis Lifeline, and an individual who suffers a loss of money or property or other injury in fact from a violation may sue for the greater of actual damages or $1,000 per violation.
Notes: Chapter 85, Oregon Laws 2026. The OLIS overview page shows the chapter number but no history, so the dates of passage and the March 31, 2026 signing come from LegiScan. The enrolled text has no effective-date clause, so under ORS 171.022 the act took effect Jan. 1 of the year after passage, Jan. 1, 2027; LegiScan's history records the same date. Protections for minors, which apply when the operator knows or has reason to believe a user is a minor, include barring claims of sentience, simulated emotional dependence and romantic interest, break reminders at least every three hours and limits on engagement-maximizing rewards. Enforcement is by private action only; the act provides no attorney general enforcement. The definition of AI companion excludes software that operates solely for customer service, for assisting or supporting patient or resident care services in a facility, or for education, financial services, business operations, productivity, information analysis, internal research or technical assistance, as well as limited video game software and stand-alone smart speakers and voice assistants.
Mental health AI
AI in therapy and mental health care.
Also relevant here: SB 1546, Relating to Artificial Intelligence Companions (under clinical decision and chatbot limits).
Data and privacy
Health and consumer data, biometrics, and data used to train AI.
SB 619, Relating to Protections for the Personal Data of Consumers (Oregon Consumer Privacy Act)
Gives consumers rights to access, correct and delete their personal data and to opt out of targeted advertising, sale and profiling in furtherance of decisions with legal or similarly significant effects, and requires consent before processing sensitive data, including data revealing a mental or physical health condition or diagnosis, genetic or biometric data and precise geolocation.
Physician read. HIPAA protected health information is exempt, but the exemption covers data, not entities, so since July 1, 2024 a health system or other business that meets the thresholds has needed consent to process other sensitive data, such as health or biometric data collected outside HIPAA. The Attorney General's guidance says the act also requires consent before sensitive data is used to train AI models.
Notes: Chapter 369, Oregon Laws 2023. The enrolled act has no short title; the Department of Justice calls it the Oregon Consumer Privacy Act (ORS 646A.570 to 646A.589). The act took effect Jan. 1, 2024, and its duties became operative July 1, 2024; for 501(c)(3) nonprofit organizations, July 1, 2025. The 30-day cure period ended Jan. 1, 2026. HB 2008 (2025) added limits on selling precise geolocation and minors' data (separate entry); HB 3875 (2025) extended the act to motor vehicle manufacturers. The Attorney General's Dec. 24, 2024 guidance on AI also says data protection assessments are required before processing personal data for profiling.
HB 2008, Relating to Consumer Protection (Oregon Consumer Privacy Act: precise geolocation and minors' data)
Bars controllers from selling precise geolocation data that identifies a consumer's present or past location within 1,750 feet, or the personal data of consumers they know or willfully disregard are under 16, and bars processing those consumers' data for targeted advertising or for profiling in furtherance of decisions with legal or similarly significant effects.
Physician read. Since Jan. 1, 2026, a business covered by the Oregon Consumer Privacy Act may not sell consumers' precise geolocation data or the personal data of consumers it knows or willfully disregards are under 16, or process those consumers' data for targeted advertising or for profiling in furtherance of decisions with legal or similarly significant effects. The act exempts HIPAA protected health information but not covered entities as such, so a practice or health system that meets the act's thresholds is bound for its other personal data.
Notes: Chapter 251, Oregon Laws 2025; amends ORS 646A.578. The enrolled text has no effective-date clause, so under ORS 171.022 it took effect Jan. 1, 2026; LegiScan and the Oregon Department of Justice give the same date. The geolocation sale ban does not cover the content of communications or data from advanced utility metering systems. In the enrolled text, the targeted advertising and profiling limit for consumers under 16 carries no consent exception.
Federal law also applies in every state: see federal law and policy.
Most recently checked Sept 29, 2026. General information, not legal advice. How the map works, and the data.