DataVonix

BusinessOct 28, 202610 min read

Does Your Chatbot or Voice AI Have to Say It's a Bot? The EU AI Act Rules Now in Force

Short answer: in most cases, yes.

Since 2 August 2026, Article 50(1) of the EU AI Act has required AI systems that talk directly with people to make clear that the person is dealing with an AI. That covers the chatbot on your website, the voice agent answering your phones, and an AI agent that emails or books things on your behalf. It applies to businesses outside the EU too, if their AI talks to people in the EU.

A lot of the coverage this year has been about the AI Act being "delayed", which has left some business owners thinking nothing applies yet. That is not the case for this rule. Here is what it says, who it covers, and what a compliant disclosure looks like in practice.

What the rule says

Article 50(1) puts the obligation on providers: AI systems "intended to interact directly with natural persons" must be designed so that those people are told they are interacting with an AI system, unless that is obvious from the point of view of a reasonably well-informed person.

Article 50(5) adds two conditions. The information has to be "clear and distinguishable", and it has to be given "at the latest at the time of the first interaction". It also has to meet accessibility requirements.

On 20 July 2026 the European Commission published guidelines on Article 50, which fill in a lot of the detail. Their list of systems in scope includes voice assistants, chatbots in customer support, e-commerce, finance, healthcare and education, AI hotlines, AI bots on social networks, and AI agents that interact with people while doing a task.

"We're not in the EU. Does this apply to us?"

Quite possibly. Under Article 2, the AI Act applies to providers placing AI systems on the EU market wherever they are based, and to providers and deployers outside the EU "where the output produced by the AI system is used in the Union". The Commission's guidelines repeat that a provider is responsible "regardless of whether the provider is established or located in the Union or in a third country."

So an Indian, UK or US company whose website chatbot answers customers in Germany, or whose voice agent calls patients in Ireland, should treat the rule as applying to those conversations.

Are you the "provider"?

Because Article 50(1) is a provider obligation, this matters. Article 3(3) defines a provider as someone who develops an AI system, or has one developed, and puts it into service under its own name or trademark.

The guidelines give two examples that cover most small businesses:

  • A company that develops a chatbot in-house and puts it into service under its own name is the provider.
  • A company that takes an existing AI system, modifies it and puts it into service under its own name becomes the provider of the new system.

If you had a custom chatbot or voice agent built and it runs under your brand, you should assume you are the provider. If you simply switched on a vendor's standard chat widget, the vendor is more likely the provider, but it is still your brand in the conversation, so check that the disclosure is switched on and worded properly.

Didn't the Digital Omnibus delay all this?

It delayed some of it, not this part.

The AI "Digital Omnibus" was adopted by the European Parliament on 16 June 2026 and the Council on 29 June, and published in the Official Journal on 24 July 2026. Its headline change was pushing back the rules for high-risk AI systems: to 2 December 2027 for the Annex III use cases and 2 August 2028 for AI built into regulated products.

For Article 50, the only relief is a short grace period for machine-readable marking of AI-generated content under Article 50(2). Generative systems already on the market before 2 August 2026 have until 2 December 2026 to add it. Nothing in the Omnibus moves the date for telling people they are talking to an AI.

What counts as a proper disclosure

This is where the Commission's guidelines are most useful, because they give concrete examples.

For text chatbots, the guidelines suggest plain-language labels or banners (their example is "You are interacting with an AI system"), a first-turn greeting that says it is AI, and where appropriate a persistent label visible throughout the chat, placed near the input box.

For voice and phone agents, they call for an explicit spoken statement at the beginning of the interaction (their example is "This is an AI-powered assistant"), with periodic reminders in longer calls, particularly after an interruption or when the AI's role changes. A beep or tone can support this but is "not considered sufficient" on its own.

For AI agents acting for you, such as an agent that books appointments, manages correspondence or negotiates on someone's behalf, the guidelines say the agent should disclose both that it is AI and on whose behalf it is acting. One of their examples is an email written by an AI agent that carries an AI label at the top.

The guidelines also list approaches that are not enough on their own:

  • A disclosure that only appears in your terms and conditions, privacy policy or documentation
  • Metadata or watermarks the user cannot see during the conversation
  • Vague wording such as calling it an "assistant" without saying it is AI, or a human-like persona that could mislead
  • A site-wide line such as "Services on this website use AI"
  • Technical descriptions such as "this system uses LLMs" that do not tell the user they are talking to a machine

Want expert advice?

30 minutes with a senior engineer. No sales pitch - just honest advice.

Get in Touch

The "obvious" exception is narrower than it sounds

You might reason that everybody knows website chat is a bot by now. The Commission disagrees. The guidelines say the exception "should be interpreted restrictively", and that general awareness that chatbots exist "does not imply that they recognise them in interactions".

The factors that make it less obvious will look familiar to anyone who has deployed a modern voice or chat agent: a human-sounding voice, natural speech patterns, a profile picture of a person, and personalised conversation. If your audience is the general public, you also have to allow for elderly users, children and people with lower digital literacy.

Their examples of where the exception can apply are narrow ones: code assistants used only by professional developers, internal assistants used by trained staff, diagnostic tools used by trained clinicians, assistants built into home appliances, and characters in single-player video games.

Their examples of where it does not apply include AI chatbots in helpdesks and support tools whose replies users may take as human-written, and realistic avatars or voices that people may not be able to tell from a human.

If you run a customer-facing chatbot or phone agent, plan on disclosing.

Can our AI receptionist still be called "Priya"?

Yes. Nothing in the rule bans a persona name or a friendly voice. What it bans in practice is relying on the persona while hiding the AI. A name plus a clear statement is fine. A name, a stock photo of a person and no statement is exactly what the guidelines warn against.

Wording you can adapt

These are starting points, not legal text. Adjust them to your brand and languages.

Website chat, first message:

Hi, I'm Priya, [Company]'s AI assistant. I'm not a person, but I can help with bookings and orders, and I can pass you to our team at any point.

Add a small "AI assistant" label next to the chat header or input box so the disclosure stays visible.

Inbound phone call, opening line:

Thanks for calling [Company]. You're speaking with an AI assistant. I can book, move or cancel appointments, or put you through to someone on the team.

Outbound call:

Hello, this is an AI assistant calling on behalf of [Company] about your appointment on Thursday.

After a hold or transfer back, or in a long call:

Just to remind you, you're still speaking with [Company]'s AI assistant.

Email sent by an AI agent, first line:

This message was written and sent by an AI assistant on behalf of [Company].

When you hand over to a human, say so, and if a human hands back to the AI, say that too. The guidelines specifically mention reminders when the AI's role changes during a conversation.

What happens if you ignore it

Article 99 sets the maximum fine for breaching Article 50 at €15 million or 3% of worldwide annual turnover, whichever is higher. For SMEs and start-ups the cap is whichever of the two is lower. National market surveillance authorities in each EU country handle enforcement.

The fines matter less than the cost of fixing this, which is small. For most chatbots and voice agents it means changing a greeting, adding a label and updating the hand-off script.

Not only an EU issue

If you also serve US customers, two older rules point the same way. In February 2024 the US Federal Communications Commission ruled that AI-generated voices in calls count as "artificial" voices under the Telephone Consumer Protection Act, so the consent rules for robocalls apply to AI voice calls. California's BOT Act, in force since July 2019, already makes it unlawful to use an undisclosed bot to mislead people in California online about its artificial identity in order to sell to them or influence their vote.

EU consumer law also still applies on top of the AI Act. The guidelines note that where a paid service is AI-driven, that can be a main characteristic of the service that has to be disclosed before the customer signs up, whether or not the AI is "obvious".

A quick checklist

  1. List every place an AI talks or writes to people: website chat, WhatsApp, phone lines, outbound calls, automated emails.
  2. For each, decide whether you are the provider (built or commissioned under your brand) or using a vendor's standard product.
  3. Check that the first message or first spoken line says it is AI, in plain words.
  4. Add a persistent visible label for chat, and reminders for long or transferred calls.
  5. Make sure agents that act for you say whose behalf they are acting on.
  6. Remove anything that could suggest a human: stock photos of people, "Hi, it's Priya from the front desk" with no AI statement.
  7. Keep a short record of what you disclose and where, in case a regulator or customer asks.

We build AI voice agents and chat automations for businesses across North America, Europe and Asia, and disclosure is far easier to design in from the start than to bolt on later. If you are not sure whether an existing bot meets the rule, we are happy to take a look.

This article is a practical summary, not legal advice. For a decision that carries real risk, check with a lawyer who knows your market.

Sources

Tags:EU AI Actchatbotsvoice AIAI complianceAI transparency

Written by

DataVonix Team

Engineering & Automation Team

The engineers, designers and automation specialists behind DataVonix. We build, automate, and scale digital products that drive real business results for enterprise and growth clients worldwide.

Back to Blog

let us make the web talk about your project

Send over the problem, the deadline, or the half-finished system. We come back with an honest scope, an architecture direction, and a number.