EU AI Act went live Aug 2. Your Klaviyo chatbot is now regulated.
Three days ago, Article 50 of the EU AI Act became enforceable. Your agency hasn't mentioned it. Most software vendors haven't either. If you run an AI chatbot on your ecommerce store and any of your customers are in the EU, you're now operating under a law with fines that reach €15 million.
This isn't a "coming soon" regulation. It's live. And the US-based DTC brand exemption people are hoping for doesn't exist.
- EU AI Act Article 50 went into effect August 2, 2026. AI chatbots must disclose they're AI before the conversation starts or face fines up to €15M or 3% of global revenue.
- US DTC brands are not exempt. If your chatbot reaches EU users, you're in scope.
- Live chat widgets and AI customer service agents are covered. Email flows and SMS sequences are not — they're outbound, not direct interaction.
- Existing systems get until December 2, 2026. New deployments must comply now.
Article 50 applies to any AI system that interacts directly with a person in real time. If your chatbot doesn't disclose it's AI at the start of a conversation, you're non-compliant starting August 2, 2026. The fix is straightforward. The enforcement is real.
What Article 50 actually requires
The rule is simple: before a conversation starts, the person on the other end needs to know they're talking to an AI. Not buried in your privacy policy. Not in a footer nobody reads. At the first point of contact, in the chatbot's opening interaction.
The only exception is when it's obvious to "an average person who is reasonably well-informed and observant" that they're dealing with AI. The European Commission interprets this restrictively. A chatbot named "Emma" with a human avatar doesn't qualify for the exception just because AI chatbots are common. A customer service bot in a sci-fi store named "RoboHelper 3000" probably does.
If you run a chatbot that looks and sounds human, that's exactly the scenario this rule was written for. You need to add the disclosure.
Source: PC Tech Magazine — EU AI Act Article 50 enforcement overview.
Which tools are covered (and which aren't)
Article 50 is specifically scoped to AI systems that "interact directly with natural persons." That phrase matters.
Covered: Live chat widgets powered by AI, AI customer service agents in chat mode, website chatbots, voice assistants. These are direct, real-time, person-facing interactions. They fall squarely inside Article 50.
Not covered:Email flows, SMS automation, and Klaviyo sequences. These are outbound, asynchronous communications that a human business owner approves before they go out. They're not "direct interaction" under the regulation. If you're running automated email flows for DTC retention, those don't trigger Article 50.
The Klaviyo Customer Agent has two modes: email and SMS automation (outbound, async, outside Article 50) and live web chat (direct, real-time, inside Article 50). If you've turned on the web chat feature, that component needs the disclosure. The email side doesn't.
The practical question for your store: does your site have a chat widget that opens in real time when a customer clicks it? If that widget is powered by AI and presents as a human agent, you need a disclosure before the first message. That's the whole rule in practice.
AI-powered Klaviyo customer agents handling multi-channel support are one of the most common setups we see for DTC brands right now. If the web chat interface is live, the disclosure needs to be live too.
US brands aren't exempt
This is the part most US founders are assuming away. The EU AI Act was written with extraterritorial reach. It covers "providers established outside the EU" where the output of their system reaches EU users. Geography is not an exemption.
If you ship to Germany, France, Spain, or any EU country and your chatbot is live on your store, your chatbot falls under Article 50. Enforcement runs through national market surveillance authorities in each EU member state, plus the EU AI Office for larger cases. The US address on your LLC doesn't factor into their jurisdiction.
"We're a US company so EU regulations don't apply to us." This is the same assumption brands made about GDPR before 2018 enforcement. The EU AI Act has the same extraterritorial structure. If EU residents use your chatbot, you're in scope.
You don't need to block EU visitors or rebuild your store. You need to add a disclosure line to your chatbot. It's a short fix with a real consequence if you skip it.
What the disclosure needs to say
No mandated exact language exists in the regulation. The requirement is functional: the user must know they're talking to an AI before the conversation begins. A few examples that work:
"Hi, I'm your AI shopping assistant. How can I help you today?" That's compliant. The AI identification is in the opening line, it's clear, and it's visible before the conversation goes anywhere.
"You're chatting with an AI assistant" as a label in the chat widget header, plus an AI introduction in the first message. Even better — double coverage.
A human name with no AI disclosure anywhere in the opening interaction is non-compliant. A footer note buried under your cookie policy doesn't count. The disclosure needs to be where the interaction starts, not where people never look.
For most chatbot platforms, this is a configuration change in the welcome message template. It takes about fifteen minutes.
The two deadlines you need to know
Article 50 went live August 2, 2026. For new AI systems deployed after that date, compliance is required immediately. No grace period for a chatbot you launch next week.
For existing systems already running before August 2, the extended deadline is December 2, 2026. That's your window to update the chatbot configuration, add the disclosure language, and verify it appears before the first message exchange.
Four months sounds comfortable. It isn't, if you're managing through an agency that hasn't flagged this yet. The review, the change request, the back-and-forth, the re-test. Agency time compresses that window fast.
What this means for your marketing stack
If you're running an AI chatbot, this is a fifteen-minute fix. Open your chatbot settings, update the initial greeting to identify as AI, confirm it shows before the first message, done. The technology isn't complicated. The compliance is just a disclosure.
The larger shift is that AI-powered ecommerce tools are now regulated infrastructure. "Does this chatbot comply with Article 50?" is now a question on your vendor evaluation checklist, the same way GDPR data processing agreements became standard practice after 2018. The AI marketing for ecommerce stack is getting more capable and more scrutinized at the same time.
After reading the full Article 50 text in August, I audited every live chat touchpoint we manage for clients against the disclosure requirements. Most were already compliant. For the ones that weren't, the fix was under fifteen minutes per store. If you're running AI customer service on your ecommerce store, run the same check today.
Frequently asked questions
Does the EU AI Act apply to US ecommerce brands?
Yes. Article 50 applies wherever AI system output reaches EU users, regardless of where the provider is based. A US DTC brand running a chatbot on its Shopify store that EU customers can access is in scope. Geography is not an exemption.
What AI tools count as a chatbot under Article 50?
Any AI system designed to interact directly with a person in real time counts — live chat widgets, AI customer service agents, virtual assistants. Passive outbound automation like email sequences and SMS flows is not considered direct interaction and falls outside Article 50's scope.
What does a compliant AI disclosure need to say?
No mandated exact wording exists, but the disclosure must appear before or at the very start of the interaction and clearly communicate the user is talking to an AI. A message like 'I'm your AI shopping assistant' in the chatbot's first response qualifies. A footer disclaimer alone does not.
What are the fines for an AI chatbot that doesn't disclose it's AI to EU users?
Article 50 transparency violations carry fines up to €15 million or 3% of total worldwide annual turnover, whichever is higher. Proportionality applies for smaller businesses, but the baseline is not trivial for any brand with meaningful EU revenue.
Want to see where your marketing stands?
Get a free AI-powered audit of your online presence. Takes 30 seconds.
Get my free audit