What You Must Disclose to Customers About Your Use of AI
Disclosure requirements for AI are expanding in nearly every jurisdiction. What was optional transparency two years ago is becoming a legal obligation — and the businesses that built disclosure into their customer experience early are better positioned.

A company uses AI to score customer support tickets and route them by urgency. Another uses it to rank job applications before a human ever sees them. A third uses it to generate product descriptions on their e-commerce site. In each case, the customers, applicants, and shoppers interacting with these systems deserve to know — and in a growing number of cases are legally entitled to know — that AI is involved and what role it plays.
The disclosure landscape for AI is fragmenting fast. The EU AI Act sets comprehensive requirements for high-risk AI systems. The Colorado AI Act establishes notice obligations for consequential automated decisions. FTC enforcement guidance covers deceptive AI claims. And beyond legal minimums, customer expectations are shifting: the businesses that treat transparency as a trust signal rather than a compliance burden are building a durable brand advantage.
This piece is not legal advice — your counsel should review your specific obligations by jurisdiction, product type, and use case. It is a practical framework for business leaders who want to understand what disclosure looks like in the categories most likely to affect them.
Automated and AI-assisted decisions affecting individuals
The most consequential disclosure requirements apply to automated systems that make or substantially influence decisions about people. Credit decisions, insurance underwriting, employment screening, tenant screening, and medical triage are all in this category. The EU AI Act classifies most of these as "high-risk" AI systems and requires: clear disclosure that an automated system is involved, meaningful information about the system's role, and — in many cases — the right to a human review of an automated decision.
In the United States, the CFPB has issued guidance indicating that lenders using AI models for credit decisions must be able to explain the principal reasons for an adverse action in terms a consumer can understand — a requirement that creates significant tension with opaque or black-box models. The liability exposure when AI makes a mistake compounds when disclosure requirements are not met, because regulators treat non-disclosure as evidence of bad faith.
Disclose that an AI or automated system was involved in any consequential decision about the individual.
Explain, in plain language, what the system evaluated and how it influenced the outcome.
Provide a mechanism to contest the decision and request human review.
Retain documentation of the decision rationale sufficient to explain it if challenged.
AI-generated content and synthetic media
AI-generated content — product descriptions, customer emails, support responses, social media posts — occupies a grayer zone. Most jurisdictions do not currently require disclosure that text was AI-generated (as distinct from AI-decided). However, the FTC's endorsement guides and its general prohibition on deceptive practices create meaningful exposure if AI-generated content makes claims that are false, misleading, or not substantiated. The practical rule: disclose when non-disclosure would mislead.
Synthetic media and AI avatars require more explicit disclosure. Several U.S. states have enacted laws requiring disclosure of AI-generated video or audio in commercial and political contexts. Even where not legally required, using a synthetic voice or AI-generated likeness to represent your brand without disclosure is a trust risk that almost always costs more than the transparency would.
Chatbots and AI-assisted customer service
Multiple states and the EU's proposed regulations require that consumers be informed when they are interacting with an automated system rather than a human, and that they be able to request a human agent. This is a minimum standard — the best customer experience design goes further, making the AI's role and limitations clear so users calibrate their expectations and trust the interaction rather than feel deceived when they discover it was automated.
The questions business leaders should ask before deploying AI include disclosure design: how will you tell customers what they're interacting with, and how will you provide recourse when the AI can't help them?
Best-practice disclosure beyond the legal minimum
The businesses building the most durable customer relationships around AI are treating transparency as a brand differentiator, not just a compliance checkbox. That means: proactively disclosing AI use in customer-facing touchpoints, explaining in plain language what the AI does and doesn't do, providing clear recourse pathways, and publishing an accessible AI use policy that customers can reference. This is the approach TTGC recommends to every client deploying AI in customer-facing contexts — because transparency is not a cost, it is a trust asset.
Ravve, TTGC's CEO and AI engineer, designs disclosure frameworks into every AI product the studio builds — not as boilerplate terms-of-service language, but as customer-experience features: notices surfaced at the decision point, plain-language explanations of how the system works, and recourse mechanisms that are genuinely usable rather than technically present. Industries with specific compliance requirements — healthcare, fintech, HR — require additional frameworks covered in the sector-specific pieces on healthcare AI accountability and fairness in lending.
The businesses that treat AI disclosure as a burden are optimizing for the minimum. The ones that treat it as a brand signal are building a relationship that compounds over time.
Building AI into your customer experience? Talk to TTGC about disclosure frameworks that protect your business and build trust.
Book a free Brand and Growth Assessment and see exactly how Through The Glass Creatives would approach it.
Sources
- European Parliament — "EU Artificial Intelligence Act" (2024). Disclosure requirements for high-risk AI systems.
- U.S. Consumer Financial Protection Bureau — "CFPB Circular 2022-03: Adverse Action Notification Requirements and the Equal Credit Opportunity Act" (2022).
- U.S. Federal Trade Commission — "FTC Report on Artificial Intelligence: Using AI to Harm People" (2022). Consumer protection standards for AI systems.
- Colorado General Assembly — "Colorado Artificial Intelligence Act" (2024). State-level AI disclosure and consumer protection requirements.
- OECD — "OECD AI Principles" (2023). International standards for transparency and explainability in AI systems.

