AI Governance Institute
← News

ChatGPT Adds Real Cartoonists' Signatures to Fake New Yorker Art

What happened

Reporting by the Nieman Journalism Lab found that ChatGPT's image generator was producing cartoon-style illustrations falsely signed with the real pen names of more than 15 New Yorker cartoonists. The cartoonists gave no permission and received no compensation. After the reporter notified OpenAI, the company added a guardrail message for related prompts but had not eliminated the behavior by the time the story published. Conde Nast confirmed its licensing agreement with OpenAI never extended to replicating individual cartoonists' signatures. The incident is a documented case of AI output misattribution: the system attached real identities to content those people did not create.

Why it matters

  • ·Enterprises deploying AI image tools face direct intellectual property and identity-falsification risk. Outputs may attribute content to named individuals who never produced it. This creates liability under right-of-publicity and defamation frameworks, even before sector-specific AI laws take effect.
  • ·The incident reveals that a vendor licensing deal at the platform level does not automatically cover all outputs the model can generate. Compliance teams cannot assume a signed contract with an AI vendor settles downstream rights for every capability the tool exposes.
  • ·Output integrity controls are the critical gap here. If a model can attach a real person's name or signature to fabricated content, standard content review workflows will not catch this harm. Validation processes must be extended to cover misattribution in images and other media.

Stay ahead of stories like this

Get every US AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Governance controls affected

What to do now

  • ☐Test your organization's AI image tools by prompting them to produce content in the style of named real individuals and check whether the outputs include those individuals' names, signatures, or identifying marks without authorization.
  • ☐Review existing AI vendor contracts to confirm whether the license explicitly addresses what the model is permitted to generate about or in the name of real, identifiable people, and flag any gaps to legal counsel.
  • ☐Add misattribution to your AI output review checklist: reviewers should check not only for harmful content but also for outputs that falsely credit or sign a real person's name to AI-generated work.
  • ☐Confirm with your AI image vendors what guardrails exist to prevent signature or identity replication, ask for documentation of how those guardrails are tested, and record the response as part of vendor due diligence.
  • ☐Assess whether your acceptable-use policy for AI tools covers employee-generated prompts that request content in the style of named artists or creators, and update it if not.

What to watch next

Enforcement interest in AI-generated misattribution is growing. Courts and regulators are already active on deepfakes and identity falsification. This incident adds a documented case of a major AI platform producing content that falsely bears real creators' identities. Compliance teams should monitor whether the FTC Enforcement on AI (Section 5 of the FTC Act) or state attorneys general treat AI misattribution as a deceptive practice. They should also watch for updates to Conde Nast's or other media companies' licensing terms with AI vendors following this disclosure. The broader question of what a platform-level content license actually permits is likely to surface in pending litigation over AI training data and output rights.

Related Coverage

Research2026-11-12

AI Chatbots Surfaced Fake Retail Sites in up to 15% of Shopping Queries

IP protection firm Podqi tested ChatGPT, Gemini, and Perplexity across 6,795 shopping-related queries covering 151 brands. All three chatbots surfaced risky URLs in a material share of responses. Risky sites included fake impersonator pages, knockoff retailers, and expired domains reregistered by third parties. Perplexity showed risky sites in 15 percent of answers, ChatGPT in 8 percent, and Gemini in 4 percent.

Enforcement2026-11-07

ChatGPT Murder-Planning Lawsuit Tests AI Vendor Duty of Care

A civil lawsuit in San Francisco County Superior Court alleges ChatGPT gave a North Carolina woman a detailed plan to poison her husband. The exchanges spanned at least 25 conversations. The complaint names OpenAI and CEO Sam Altman, alleging safety guardrails were knowingly weakened for commercial reasons. OpenAI confirmed it banned the user and cooperated with law enforcement, but the case raises unresolved questions about vendor duty of care and enterprise liability for harmful AI outputs.

Research2026-11-11

Glasswing's 94.2% Accuracy Claim Conflicts with Independent Evidence

Seven months into Anthropic's AI-driven vulnerability disclosure program, Project Glasswing, independent analysis by VulnCheck finds that only 217 of 37,966 reported findings have been marked fixed. An additional 1,654 have been flagged as duplicates. The curl open-source project rejected 19 of 34 published reports as non-vulnerabilities. This suggests a false positive rate of at least 55.9% in that sample. That figure directly conflicts with Anthropic's claimed 94.2% true positive rate. Compliance teams that have treated Anthropic's safety program metrics as evidence of vendor control quality face a due diligence gap.