SiteProof AI Blog

Chatbot Disclosure Requirements in 2026: What Your Website Must Show

8 min read

If your website uses a chatbot, EU AI Act Article 50 requires you to clearly inform users they are interacting with an AI system — unless it is already obvious. This obligation applies to any business whose chatbot is accessible to EU users, regardless of where the company is located. Six US states have passed similar laws effective 2025–2026.

What Is the EU AI Act Chatbot Disclosure Requirement?

Article 50(1) of Regulation (EU) 2024/1689 states:

“Providers and, where applicable, deployers of an AI system that is intended to interact directly with natural persons shall ensure that natural persons are informed that they are interacting with an AI system, unless this is obvious from the circumstances and the context of use.”

In plain terms: if a user could reasonably think they are talking to a human, you must tell them they are not. This applies to:

  • Customer service chatbots
  • AI-powered live chat widgets
  • Automated email response systems
  • Any AI system that interacts directly with users

Our AI Disclosure Scanner checks your website automatically for each of these transparency requirements.

The exemption is narrow — “obvious from circumstances” means something like a clearly labeled robot interface, not just a bot name like “Aria” or “Max.”

When Did This Become Enforceable?

August 2, 2026 is the enforcement date for Article 50 transparency obligations. Key dates:

DateObligation
August 1, 2024EU AI Act enters into force
February 2, 2025Prohibitions on high-risk AI practices begin
August 2, 2026Chatbot transparency rules become enforceable
August 2, 2027Additional high-risk AI system requirements

Real Enforcement Cases — What Happened to Companies That Failed

Regulators have already taken action against companies for AI transparency failures under existing laws, before the EU AI Act was even enforceable:

CompanyRegulatorActionYear
Snap Inc. (My AI)UK ICOEnforcement Notice2023
DoNotPayUS FTC$193,000 fine + cease order2025
Replika (Luca Inc.)Italian GaranteAdministrative fine2025
Unnamed BankBerlin DPA€300,000 fine2023

These cases happened under GDPR and FTC rules — frameworks with lower maximum penalties than the EU AI Act. Under the AI Act, fines for transparency violations can reach €15 million or 3% of global annual turnover, whichever is higher.

US State Chatbot Disclosure Laws in 2025–2026

The EU is not alone. Six US states have passed or are enacting chatbot disclosure requirements:

StateLawEffectiveRequirement
CaliforniaSB 243Oct 13, 2025Clear notice of AI chatbot interaction
ColoradoSB24-205Feb 1, 2026Disclosure unless obvious to reasonable person
MaineTitle 10 §1500-DDJul 1, 2025No misleading users into thinking they talk to a human
New YorkS8874Expected 2026Disclosure at point of interaction
South CarolinaBill 5138Pending 2026Clear and conspicuous notice required
TexasHB149Jan 1, 2026AI disclosure for health care and broader business use

What Does a Compliant Chatbot Disclosure Look Like?

A clear label before or at the start of the conversation: "You are chatting with an AI assistant."
A persistent AI badge or bot icon visible throughout the chat session.
A dedicated AI disclosure statement in your terms of service and privacy policy.

Non-compliant patterns regulators have flagged:

Human-sounding names without any disclosure ("Hi, I'm Sarah!")
Disclosure buried in footer fine print
Disclosure only visible after the conversation starts

How to Check If Your Website Is Compliant

1.Open your website's chatbot without logging in
2.Does it identify itself as AI before or at the first message?
3.Is there a persistent indicator that it is automated?
4.Does your privacy policy mention AI chatbot data processing?
5.Does your AI policy page exist and link from the chat?

If you answered no to any of these, your website has a disclosure gap. Run a free automated scan on SiteProof AI — our scanner checks your website against EU AI Act Article 50, GDPR, CCPA, and FTC requirements and gives you a scored report with specific fixes.

For a full breakdown of why US-based websites are in scope, see our guide on does the EU AI Act apply to US companies.

Also see: EU AI Act small business guide.

Frequently Asked Questions

Does a simple chat widget count as a chatbot under the EU AI Act?

Yes — if it uses AI to generate responses (including LLM-based assistants, rule-based bots that can pass as human, or any system simulating human conversation), it falls under Article 50(1) disclosure requirements.

Where exactly must the chatbot disclosure appear?

EU AI Act Article 50 requires disclosure 'at the latest at the beginning of the first interaction.' Best practice is to display it in the chat window header, first bot message, or a launch screen before the conversation starts.

Does a chatbot disclosure in the terms of service comply?

No. Regulators have clarified that disclosures buried in terms of service or privacy policies do not meet the 'clear and conspicuous' standard. The disclosure must be in the interface where the user interacts with the chatbot.

My chatbot is clearly branded as a bot. Do I still need a disclosure?

Yes. Even if your chatbot has a robot name or icon, an explicit text disclosure is still required under Article 50. Visual cues alone do not satisfy the regulation.

When does EU AI Act Article 50 become enforceable?

August 2, 2026. That is the date when transparency obligations for limited-risk AI systems — including chatbots — become fully enforceable across all EU member states.

Check Your Website Now — It's Free

Run a free EU AI Act compliance scan. No signup required.

Start Free Scan →