Skip to content
← Back to blog
5 min read

Your Chatbot Needs an AI Disclosure. Here's Exactly What to Write.

Key takeaways

  • -Article 50 requires disclosure 'at the latest at the time of the first interaction.' A buried terms of service clause does not count.
  • -The disclosure must be clear and distinguishable. Copy-paste examples are included for chatbots, content generators, and email tools.
  • -Deployers (companies using third-party AI) have the same disclosure obligation as providers (companies building the AI).

What Article 50 actually says

Article 50(1) of the EU AI Act is one sentence, and it's worth reading in full: providers must ensure that AI systems intended to directly interact with people are designed so that the person is "informed that they are interacting with an AI system, unless this is obvious from the circumstances and the context of use."

There's a lot packed into that sentence. "Informed" means told — not tricked, not obscured, not buried. "At the latest at the time of the first interaction" means before or during the first exchange, not after. And "unless this is obvious" is a narrow exception — if your chatbot has a human name, a human avatar, or talks like a person, it's not obvious.

This applies to deployers too, not just providers. If you're using someone else's AI (OpenAI, Anthropic, whatever) in your product, the disclosure obligation is yours.

Where to put the disclosure

The regulation doesn't specify exact placement, but the intent is clear: it has to be visible where the interaction happens. That means:

  • In the chat interface itself. A banner or message at the start of the conversation. Not a link to a separate page. Not a footer nobody reads.
  • Persistent, not dismissible. If a user can close the banner and forget, new users arriving later won't see it. Keep it visible or re-show it at the start of each session.
  • On the widget or embed too. If your chatbot lives on a third-party site via a widget, the disclosure needs to be inside the widget. You can't rely on the host site's terms of service.

The wrong approach: putting "we use AI" in your privacy policy and calling it done. That's not "informing" the user in any meaningful sense. The Article specifically says at the time of interaction.

Copy you can steal

Here are actual disclosure strings you can drop into your product. Adjust the tone to match your brand, but keep the core message: this is AI, not a human.

Customer support chatbot

For a support bot that handles first-line queries:

Tip

You're chatting with an AI assistant. It can answer common questions and help with your account. If you need a human, type "speak to a person" and we'll connect you.

Sales or onboarding assistant

For an AI that guides users through a product:

Tip

This assistant is powered by AI. It can walk you through features and answer questions about our product. Responses are generated automatically and may not cover every situation.

Internal AI tool (employee-facing)

For AI tools used by your own staff:

Tip

This tool uses AI to generate suggestions. Review all outputs before acting on them. AI-generated content should not be treated as verified without human review.

Content generation feature

For a feature that drafts emails, reports, or marketing copy:

Tip

This content was drafted by AI. Review and edit before publishing or sending.

In your settings or about page

A longer-form disclosure for your product's settings or transparency page:

Tip

[Product name] uses artificial intelligence to [what it does]. AI-generated responses and content are clearly marked. In accordance with Article 50 of the EU AI Act, we inform users when they are interacting with an AI system. You can request human assistance at any time.

What not to do

A few patterns I've seen that would probably not satisfy a regulator:

  • "Powered by AI" in 8px font in the footer. Not visible, not at the time of interaction. The disclosure has to be where the user is actually engaging with the AI.
  • A one-time popup that can be dismissed forever. New sessions should re-establish the disclosure. A user who last visited six months ago shouldn't have to remember that your chatbot is AI.
  • Giving your AI a human name and photo with no AI label. If your bot is called "Sarah" and has a headshot, a reasonable person would think they're talking to Sarah. The "obvious from the circumstances" exception does not apply here.
  • Only disclosing in your terms of service. The Article says "at the time of the first interaction." Nobody reads the terms of service at the time of a chat interaction.
  • Disclosing only in English on a product used across the EU. If you serve French or German users, the disclosure should be in their language. The regulation doesn't say this explicitly, but existing EU consumer protection rules strongly imply it.

Content labeling is separate

Article 50 has two different requirements, and people mix them up:

  • Interaction disclosure (Article 50.1): Tell people they're talking to AI. This is the chatbot rule.
  • Content labeling (Article 50.2): AI-generated content must be labelled as such and made machine-detectable. This is the deepfake/synthetic media rule.

If your product does both — a chatbot that also generates images or documents — you need both. The chatbot needs an interaction disclosure, and the generated content needs metadata labeling (C2PA for images, structured metadata for text).

The interaction disclosure is the easier one. It's just copy in your UI. The content labeling is more technical — it requires machine-readable metadata, which means integrating with standards like C2PA or adding schema.org annotations. We wrote a separate guide on the multi-layered marking strategy if you need to implement that side of things.

Need the full checklist?

Our Article 50 transparency checklist covers both interaction disclosure and content labeling in detail, with links to the official guidance.

Stay ahead of the deadline

Get EU AI Act updates, enforcement news, and compliance guides delivered to your inbox. No spam — unsubscribe any time.

Check your AI system's risk level for free

Our classifier maps your AI system against the EU AI Act in under 60 seconds. No signup required.

Classify Your AI System