Anthropic's referral of a user's Claude threats to police ends in a Florida felony charge

The arrest report, as Tom's Hardware describes it, lays out the path from chat to detective in order ^[6]:

1. Anthropic monitors chats for key phrases and for content that could be deemed threatening ^[6]. 2. Depending on severity, a flagged conversation can be elevated to human review ^[6]. 3. The review team decides whether to report. In this case it did, and an LCSO intelligence detective took over from there ^[2].

I think the design is defensible. Phrase matching decides what a person reads, and a person makes the call that carries legal consequences ^[6][2]. The description comes from police paperwork, though ^[6]. The arrest report is not yet in the court file, and Anthropic has no comment on the case on record ^[8][11].

The rule behind step three is Anthropic's privacy policy, effective Sept. 10. It allows disclosure to law enforcement where the company has a good-faith belief "that disclosure is reasonably necessary to ... prevent serious harm to any person or to property" ^[5]. The government requests report for the second half of 2025 applies a narrower test to emergency disclosures: "danger of death or serious physical injury to a person" ^[7]. Property is in the first test and absent from the second ^[5][7]. The report lists zero emergency requests from law enforcement for the period, and it does not count referrals Anthropic makes on its own ^[7].

As booked, the charge reads "THREAT-TERRORISTIC-STATE OFFENSES-WRITTEN/ELEC THREAT MASS SHOOTING/TERRORISM ACT" ^[9]. Tom's Hardware suggests the chat may fall under the statute's language on a threat transmitted "in any manner in which it may be viewed by another person" ^[20]. If that reading holds, the review queue matters to the prosecution as well as the referral, because a reviewer is another person who can view the chat ^[6][20]. The publication also says the messages the reviewers found, including the gun mention, are likely the supporting evidence for the charge ^[21]. No attorney is named on the docket, and a public defender was appointed ^[15].

Of the three Anthropic-linked cases since August, two ended in felony charges ^[19]. Florida's statute already has a chatbot case that reached sentencing ^[16]. OpenAI reported Darren Zhou to the FBI over a March ChatGPT message about killing his ex-girlfriend, according to the Palm Beach Post ^[16]. Zhou pleaded guilty in August under 836.10 and was sentenced to eight years' probation ^[16].

Tom's Hardware describes the bind as companies being expected to respect privacy while being held responsible when they do not report threats ^[17]. Florida's attorney general sued OpenAI in June, citing the 2025 Florida State University shooting, and asked a judge for a temporary injunction last month ^[13]. British Columbia sued OpenAI last month for not warning police about the Tumbler Ridge shooter, whose ChatGPT account the suit says OpenAI had identified eight months before the attack ^[14].

Lee County Sheriff Carmine Marceno told WINK News that what people share with an AI companion is "never truly anonymous" ^[18]. The reporting does not say which Claude product the Lee County user was on, or whether API and business traffic pass through the same screening ^[1][6]. I would not build on the assumption that they skip it. For a product that forwards end-user text to a hosted model, I'd list the vendor's review team as a recipient in the data map and treat the Sept. 10 clause as the disclosure rule in force ^[5].