Article 50 covers AI that interacts with people and AI that generates content people see. Customer service does both.
Any AI that converses with customers must disclose it's AI at the start of the interaction, clearly, not buried in the terms of service.
Agents that resolve tickets, process refunds, or act on behalf of customers need disclosure plus logging of what they did.
AI-generated text sent to customers may need marking as AI-generated, especially when sent without meaningful human review.
Synthetic voice interactions must disclose they're AI. Voice cloning of real agents adds deepfake obligations under Article 50(4).
The good news: this is days of work, not months. The bad news: most teams still haven't started.
Limited risk means limited obligations. Don't let anyone sell you a conformity assessment you don't need.
One caveat: if your support AI makes decisions that affect access to services (auto-denying refunds, closing accounts, restricting essential services), it may cross into high-risk territory. Run the classifier to check.
If you deploy a third-party AI support tool, you're a deployer with your own obligations. The platform may provide the disclosure mechanisms, but you're responsible for making sure they're enabled, visible, and appropriate for your use. Check what your vendor provides, document the gap, and close it.
Read the deployer obligations guideAdding disclosures takes an afternoon. Knowing exactly which of your AI tools need them takes a few questions with the classifier. Start there.
Classify your AI system