# AI interaction and use disclosure notices

- **Record type**: Control
- **Kind**: Process
- **Owner**: Product owner
- **Frequency**: At launch and on material change
- **Duties served**: 17

## What the control achieves

Tells people, in plain language and at the right moment, that they are interacting with an AI system, that AI is being used in a decision about them or that their data feeds an AI system.

## How it is typically implemented

The organisation keeps a catalogue of the situations in which people meet its AI systems and, for each, approves a notice: a conversational banner, a pre-decision statement, a privacy-notice section or a product label. Notices say what the system does, what it is for, what it means for the person and where to ask questions or opt out where that right exists. Legal, product and accessibility reviewers sign off wording and placement, the live text is versioned, and a periodic check confirms that notices still appear where the system is used. Public notices about AI use are kept in a single, findable place.

## Evidence it produces

- AI interaction or use notice (disclosure_notice): The approved text and placement shown to people for each interaction or decision point.
- Notice catalogue (register_entry): Where each notice appears, its version and its owner.
- Notice wording approval (approval_record)

## Legal duties this control serves

- Test and monitor systems, enable human control, and be transparent with users (guardrails 4 to 6) — Australian Voluntary AI Safety Standard, Australia (supports): https://aipolicytracker.org/obligations/australia-vaiss-testing-human-control-transparency
- Use high-risk AI as instructed, monitor it and inform affected people — EU AI Act, European Union (supports): https://aipolicytracker.org/obligations/eu-ai-act-deployer-obligations
- Disclose AI interaction and label synthetic content — EU AI Act, European Union (satisfies): https://aipolicytracker.org/obligations/eu-ai-act-transparency-article-50
- Employers must inform workers and their representatives before using high-risk AI at work — EU AI Act, European Union (satisfies): https://aipolicytracker.org/obligations/eu-ai-act-art-26-7-worker-information
- Deployers must tell natural persons that a high-risk AI system is used in decisions about them — EU AI Act, European Union (satisfies): https://aipolicytracker.org/obligations/eu-ai-act-art-26-11-notice-to-affected-persons
- Deployers of emotion recognition or biometric categorisation must inform exposed persons — EU AI Act, European Union (satisfies): https://aipolicytracker.org/obligations/eu-ai-act-art-50-3-emotion-recognition-notice
- Notify individuals about the use of personal data in AI recommendations and decisions — PDPC AI advisory guidelines, Singapore (satisfies): https://aipolicytracker.org/obligations/singapore-pdpc-ai-notification
- AI business operators must notify users in advance that a product or service runs on high-impact or generative AI — Framework Act on the Development of Artificial Intelligence and Establishment of a Foundation for Trust, South Korea (satisfies): https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-31-advance-notice-of-high-impact-and-generative-ai
- Provide appropriate transparency and explainability — UK AI regulation framework, United Kingdom (satisfies): https://aipolicytracker.org/obligations/uk-principles-transparency-explainability
- Apply safeguards to solely automated decisions with significant effects — ICO AI guidance, United Kingdom (supports): https://aipolicytracker.org/obligations/uk-ico-automated-decision-safeguards
- Deployers must publish a statement about the high-risk AI systems they use — Colorado AI Act, Colorado (United States) (satisfies): https://aipolicytracker.org/obligations/us-colorado-ai-act-deployer-public-statement
- Notify consumers and explain adverse consequential decisions — Colorado AI Act, Colorado (United States) (satisfies): https://aipolicytracker.org/obligations/us-colorado-consumer-notice-and-adverse-decision-explanation
- Deployers and developers must disclose to consumers that they are interacting with an AI system — Colorado AI Act, Colorado (United States) (satisfies): https://aipolicytracker.org/obligations/us-colorado-ai-act-consumer-ai-interaction-disclosure
- Employers and employment agencies must publish a summary of the bias audit results — NYC Local Law 144 (automated employment decision tools), New York (United States) (satisfies): https://aipolicytracker.org/obligations/us-new-york-city-local-law-144-publish-audit-summary
- Employers and employment agencies must notify candidates and employees before an automated tool is used — NYC Local Law 144 (automated employment decision tools), New York (United States) (satisfies): https://aipolicytracker.org/obligations/us-new-york-city-local-law-144-candidate-notice
- Government agencies must disclose to consumers that they are interacting with an AI system — Texas Responsible AI Governance Act (TRAIGA), Texas (United States) (satisfies): https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-government-agency-ai-interaction-disclosure
- Health-care providers must disclose the use of AI in patient services — Texas Responsible AI Governance Act (TRAIGA), Texas (United States) (satisfies): https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-health-care-ai-disclosure

## Standards clauses it corresponds to (clause numbers only)

- ISO/IEC 42001:2023: Annex A.8.2, A.8.5
- NIST AI RMF 1.0: MEASURE 2.8; GOVERN 5.1
- OECD AI Principles: Principle 1.3 Transparency and explainability

## MIT AI Risk Repository subdomains addressed

7.4, 4.3, 5.2

## Provenance

- **Record page**: https://aipolicytracker.org/controls/ai-interaction-and-use-disclosure
- **Official source**: none recorded — this record is incomplete, see https://aipolicytracker.org/gaps
- **Review status**: pending review
- **Confidence**: high
- **Facts last confirmed**: never confirmed against the official source
- **Retrieved**: 2026-09-24
- **Licence**: https://creativecommons.org/licenses/by/4.0/

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.
