AIPolicyTracker
Process Owner: Product owner At launch and on material change

AI interaction and use disclosure notices

Tells people, in plain language and at the right moment, that they are interacting with an AI system, that AI is being used in a decision about them or that their data feeds an AI system.

Duties satisfied
14
done properly, does the work
Duties supported
3
contributes; the duty needs more
Jurisdictions
8
Evidence items
3

How is it implemented?

The organisation keeps a catalogue of the situations in which people meet its AI systems and, for each, approves a notice: a conversational banner, a pre-decision statement, a privacy-notice section or a product label. Notices say what the system does, what it is for, what it means for the person and where to ask questions or opt out where that right exists. Legal, product and accessibility reviewers sign off wording and placement, the live text is versioned, and a periodic check confirms that notices still appear where the system is used. Public notices about AI use are kept in a single, findable place.

Which legal duties does it serve?

Satisfies means the control, operated properly, does the work the duty asks for. Supports means it contributes but the duty needs more. The official text decides; open it before relying on either.

Colorado (United States) 3 duties

European Union 5 duties

New York (United States) 2 duties

Singapore 1 duty

Texas (United States) 2 duties

United Kingdom 2 duties

Australia 1 duty

What evidence shows it is operating?

Evidence this control produces
EvidenceTypeWhat it shows
AI interaction or use noticeDisclosure or noticeThe approved text and placement shown to people for each interaction or decision point.
Notice catalogueRegister entryWhere each notice appears, its version and its owner.
Notice wording approvalApproval or sign-off record

Owner: Product owner. Frequency: at launch and on material change.

Which risks does it address?

Subdomains of the MIT AI Risk Repository, with the incidents the AI Incident Database has recorded under each. Counts are live; they say how often a risk has materialised, not how well this control prevents it.

Which standards clauses does it correspond to?

Clause numbers only. A reference means the standard asks for overlapping work, so evidence may be reusable; it never means the standard discharges a legal duty.

Framework references
FrameworkReferenceNoteConfidence
ISO/IEC 42001Annex A.8.2, A.8.5medium
NIST AI RMFMEASURE 2.8; GOVERN 5.1medium
OECD AI PrinciplesPrinciple 1.3 Transparency and explainabilityhigh

Cite this record

AIPolicyTracker (2026). “AI interaction and use disclosure notices”. https://aipolicytracker.org/controls/ai-interaction-and-use-disclosure (accessed 24 September 2026). Data licensed CC BY 4.0.

Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.

Frequently asked questions

Which legal duties does "AI interaction and use disclosure notices" satisfy?
It is recorded as satisfying 14 and supporting 3 duties across Colorado (United States), European Union, New York (United States), Singapore, South Korea, Texas (United States), United Kingdom and Australia. A mapping means the control, operated properly, does the work the duty asks for; the official text decides whether it is enough.
What evidence shows this control is operating?
AI interaction or use notice, Notice catalogue and Notice wording approval. Owner: Product owner. Frequency: at launch and on material change.