AI DISCLOSURE REQUIREMENTS · SMALL BUSINESS GUIDE

Do I Have to Tell Customers I'm Using AI?

Whether small businesses are legally required to disclose AI use to customers. Covers federal law, FTC guidance, and state-specific obligations.

This page covers U.S. law as of June 2026. This is not legal advice. For a plain-English compliance answer tailored to your situation, use the Compliance Checker at DiscloseAI.net.

Direct Answer

There is no single federal law requiring all businesses to disclose AI use to customers. Whether you must disclose depends on your state, your industry, and how you are using AI. Utah and Colorado have the broadest enacted obligations. California requires disclosures in specific contexts. The FTC can take action against deceptive AI use in any state under existing consumer protection authority.

On This Page

  1. Federal Law Position
  2. FTC Deception Framework
  3. States That Require Disclosure
  4. Contexts That Trigger Disclosure
  5. Best Practice Standard

Federal Law Position

As of June 2026, no comprehensive federal statute requires all businesses to affirmatively disclose AI use to customers in every context. The United States does not have a general AI disclosure law at the federal level equivalent to the EU AI Act's disclosure requirements.

The FTC Act (15 U.S.C. § 45) prohibits unfair or deceptive acts or practices in or affecting commerce — and the FTC has made clear this authority extends to AI-generated content and AI-assisted interactions. Several federal agencies have issued sector-specific guidance: the EEOC covers AI in hiring, the CFPB covers AI in credit decisions, and the FDA covers AI in medical devices.

FTC Deception Framework

The FTC's core test for deception is whether a representation or omission is likely to mislead a consumer acting reasonably under the circumstances, and whether the omission is material. Under this standard:

The FTC's 2023 Policy Statement on AI affirmed that the FTC Act applies fully to AI-enabled deception. The FTC Endorsement Guides (16 C.F.R. Part 255) were updated in 2023 to address AI-generated reviews and endorsements.

States That Require AI Disclosure

UT

Utah — Broadest General Requirement

Utah SB 149 (effective May 1, 2024) requires entities in regulated occupations to disclose when a consumer is interacting with an AI system rather than a human. This is the closest thing to a general AI disclosure requirement enacted in the United States as of June 2026. Utah Code Ann. § 13-2-15. Full Utah reference →

CO

Colorado — High-Risk AI Decisions

Colorado SB 24-205 requires disclosure to consumers when a high-risk AI system makes or substantially assists a consequential decision. Effective February 1, 2026. Colo. Rev. Stat. § 6-1-1701 et seq. Full Colorado reference →

IL

Illinois — AI in Hiring

Illinois requires employers to notify job candidates when AI is used to analyze video interviews (820 ILCS 42). Separate BIPA requirements apply to any biometric data collected by AI systems. Full Illinois reference →

CA

California — Multiple Specific Contexts

California requires disclosure in political advertising (AB 2839, Cal. Elec. Code § 20012), training data transparency from generative AI developers (AB 2013, Cal. Bus. & Prof. Code § 22756), and has automated decision-making notice requirements under CCPA/CPRA. Note: SB 942 was vetoed by Governor Newsom in September 2024. Full California reference →

Contexts That Commonly Trigger a Disclosure Obligation

Best Practice Standard

Many small businesses operating in multiple states adopt a uniform disclosure standard. The practical standard that exceeds legal minimums in all states:

Get a specific compliance answer for your business

The Compliance Checker at DiscloseAI.net gives you a plain-English answer based on your state, AI use case, and business size — with inline citations to primary sources. No account required.

Open Compliance Checker ← All Topics & States