Is Your Chatbot Breaking the Law? AI Compliance Guide for 2026
If your website has a chatbot, you’re probably subject to AI regulations you’ve never heard of. In 2026, these laws carry real penalties — and there’s no small business exemption.
UK: Online Safety Act now covers AI chatbots
As of February 2026, any chatbot using a large language model falls within scope of the Online Safety Act. Ofcom can fine up to 10% of global turnover or £18 million. If your chatbot generates responses rather than serving scripted answers, you’re covered.
US: A patchwork of state laws
Colorado SB 205 requires risk assessments for AI making consequential decisions. NYC Local Law 144 mandates bias audits for AI in hiring. At least six states now require chatbots to disclose their AI nature. The FTC treats chatbot statements as company representations — if your bot gives wrong information, that’s on you.
What to do right now
Add an AI disclosure notice to your chatbot. Update your privacy policy to mention AI processing. Ensure customers can reach a real person. Document what data your chatbot collects.