EU AI Act August 2026 Compliance Checklist for Small Businesses
On 2 August 2026, the transparency obligations of the EU AI Act (Regulation 2024/1689, Article 50) become fully enforceable across the EU. National supervisory authorities — the French CNIL, the German BfDI, the Dutch AP, and equivalent bodies in every member state — can act against non-compliant businesses from that date.
For most small businesses, complying with Article 50 requires less than a day of work. This checklist walks you through every step.
Step 1: Audit Your AI Footprint
Start by identifying every AI-facing element on your website or customer-facing digital channels.
- Does your website have a chatbot, AI assistant, or automated messaging widget? (Check: Tidio, Crisp, Intercom, HubSpot Chat, Zendesk, Drift, Freshchat, or custom solutions)
- Does your site contain text that was substantially written by an AI tool? (ChatGPT, Jasper, Copy.ai, Writesonic, Claude, or similar)
- Does your site display AI-generated images? (Midjourney, DALL-E, Adobe Firefly, Stable Diffusion)
- Do you use AI to generate product descriptions in your e-commerce store?
- Do you have AI-generated video or audio content visible on your site?
- Do you use an AI-powered recommendation engine that influences what users see? (product recommendations, personalised content)
If all answers are "no": you have no Article 50 obligations today. If any answer is "yes": proceed through the steps below.
Step 2: Add Chatbot Disclosure
Article 50(1) requirement: Users must be informed, in a clear and distinguishable manner, that they are interacting with an AI system — and this must happen before or at the beginning of the interaction.
- Does the chatbot welcome message explicitly state it is an AI or automated assistant?
- Is the disclosure visible before the user sends their first message?
- Is the disclosure prominent — not buried in small print beneath the chat window?
- Is there an option for users to reach a human if they request it?
Step 3: Label AI-Generated Content
- Are AI-generated blog posts or articles marked with a label? ("Written with AI assistance" or similar)
- Are AI-generated product descriptions labelled?
- Are AI-generated images captioned or otherwise identified?
- If the majority of your site content is AI-generated, is there a site-wide disclosure in the footer?
Step 4: Publish an AI Transparency Statement
- Does your website have a section or page explaining which AI systems you use and for what purpose?
- Is that statement accessible from the footer or your privacy policy?
- Does it include a way for users to contact a human with questions about your AI use?
If you need a starting point, use our free AI transparency statement template — it covers chatbot-only, content-only, and mixed-use scenarios.
Step 5: Verify and Test
- Have you scanned your site at legibright.eu to see which AI elements are detected?
- Have you opened your site in an incognito browser window and verified that disclosures are visible to a first-time visitor?
- Have you tested the chatbot to confirm the AI disclosure appears before the user's first message?
- Have you confirmed your AI transparency statement is reachable via the footer without login?
What the August 2026 Deadline Means in Practice
The transparency obligations in Article 50 are the immediate deadline for most businesses. For context: the prohibited AI practices (Article 5) already applied from February 2025. The full obligations for high-risk AI systems (Annex III) apply from August 2027. If your site only uses customer-facing chatbots or AI-generated content, you are dealing with Article 50 — the most manageable tier.
Two months is enough time to get compliant. Starting in the final week of July is not advisable — there will be a rush for compliance support and plugin updates, and it is unnecessary given how straightforward the changes are.
Additional Reading
For deeper coverage of specific topics:
- Chatbot disclosure: what the law precisely requires
- AI content labelling for WooCommerce stores
- EU AI Act fines: what small businesses actually risk
- Risk assessment for WordPress sites
This article is for general information only and does not constitute legal advice. For your specific situation, consult a qualified legal professional.