You have probably seen the headlines. The EU AI Act is coming, the fines are enormous, and apparently every website in Europe needs to be "compliant" by August or face the consequences. A business owner forwarded me one of those articles last week and asked, quite plainly, whether she now had to pull the chat widget off her site and stop using AI to draft her newsletter.

Fair question. Here is the honest answer, the one the scare stories tend to leave out.

On 2 August 2026, one specific slice of the AI Act starts to apply to ordinary businesses. It is called Article 50, and it is about transparency ^[1]. Not algorithms, not risk assessments, not a folder of paperwork for your accountant. Transparency. It asks for one reasonable thing: when people deal with AI on your website, they should know it is AI. That is the spirit of the whole thing. Most of the noise you are reading comes from firms selling compliance audits, not from the rule itself.

So let me walk you through what genuinely touches a business like yours, and what does not.

The two things that actually apply to you

Article 50 covers several situations, but for the average business with a website, two of them matter. The European Commission, which published draft guidance on these rules in May, lays them out in fairly plain terms ^[2].

The first is interactive AI. If you run a chatbot or a virtual assistant that talks to your visitors, you have to let them know they are dealing with a machine rather than a person.

The second is AI-generated content. If you publish images, audio, video or text that AI created, there are rules about flagging it. This is the part that gets mangled in the headlines, because those rules are far narrower than "label everything."

Everything heavier in the Act, the conformity assessments, the registrations, the risk documentation, applies to organisations building high-risk AI systems. That is not you, running a café, a clinic or a shop. If you want the bigger picture first, this is where AI actually fits on a normal WordPress site, well before any regulation enters into it.

The chatbot rule, in one sentence

If a customer is chatting with a bot on your site, tell them it is a bot.

That really is the core of it. The Act says the notice must be clear and given at the latest at the first interaction, unless it is already obvious to a reasonably observant person ^[3]. A small robot icon and an opening line along the lines of "Hi, I'm the automated assistant" does the job.

Picture a Dublin estate agent who adds a slick chat tool to handle viewing requests at all hours. It replies in warm, fluent sentences. A buyer spends ten minutes arranging a viewing, sure they are talking to someone in the office, then turns up to find nobody was expecting them. That is less a fine waiting to happen and more a trust problem waiting to happen. The disclosure rule and plain good manners point in exactly the same direction. One line of text, set once, and you are both compliant and honest with the people you most want to sell to.

The bit the scare stories get wrong

Here is where I want to slow you down, because this is where owners get talked into spending money they do not need to.

You do not have to stamp an "AI-generated" warning on every blog post you wrote with a bit of help from a chatbot. The text-disclosure duty is aimed at AI-generated text published to inform the public on matters of public interest, and even then it falls away when a human reviews the content and takes editorial responsibility for it ^[3]. In plain English: if you read what the AI drafted, edited it, and put your name behind it, you are the editor. That is your content now. It is the same line the better commentators draw between the two kinds of AI showing up on business websites, the kind that helps you create and the kind that pretends to be human.

Images follow similar logic. The rule targets deepfakes, content engineered to look like real people or real events. A tasteful abstract illustration on your homepage is not a deepfake. An AI photo of a "customer" who never existed, dressed up as a genuine testimonial, is another matter entirely, and you should not be doing that regardless of any regulation.

I will admit I have got this balance wrong in the other direction. Years back I nudged a small client toward a far heavier compliance package than their three-page site could ever justify, more out of caution than honesty about their real risk. They paid for shelfware. I learned to ask what a business actually does before reaching for the big solution, so I will hold to that here: most of you do not need an "AI Act audit."

Two different things: an AI that talks to your customers, and AI that simply helped you make your content

Does a business my size really have to bother

I wish I could tell you the smallest firms are simply exempt. They are not. Unlike the accessibility rules, which carved out the very smallest service businesses, Article 50 offers no blanket pass based on headcount ^[1]. The Commission has said it will weigh the needs of smaller operators as it finalises its guidance, and the carve-outs I described, the "obvious" exception for chatbots and editorial control for content, quietly do most of the work for a normal business. But "no general exemption" is the honest place to start.

On penalties, keep your head. The Act allows fines of up to fifteen million euro, or three per cent of worldwide annual turnover where that figure is higher ^[4]. Those numbers are built for companies deploying AI at industrial scale, not for a shop with a chat widget. Enforcement is meant to be proportionate. The realistic risk to you is not a regulator's letter landing on the mat; it is a customer who feels quietly deceived. Treat the headline fine as the far edge of a spectrum, not something idling outside your door.

One caveat I will not skip past: this is general guidance, not legal advice for your particular setup. If you push sensitive personal data through an AI tool, or you work in a regulated trade, spend twenty minutes with your solicitor. For most owner-operators, though, the list is short.

What I would do before August

If you rang me tomorrow, here is the version I would give you.

List your AI touchpoints. Look at your site and note anything a visitor actually interacts with that is powered by AI. Usually that is one thing, a chat widget. Often it is nothing at all.
Label the chatbot. If you have one, add a single line saying it is automated, shown the moment the chat opens. Done.
Keep editing your content. If you publish AI-drafted articles, do what good writers already do: read them, edit them, own them. That editorial control is the whole point.
Skip the fake people. No AI deepfakes posing as real customers. Use honest imagery.

Notice what is not on that list: rebuilding your website, hiring a consultant, or paying an agency seventy-five euro an hour to insert one line of text. This is the quiet advantage of owning a proper WordPress site you can edit yourself. You make the change in a minute and get back to work.

One distinction trips people up, so let me be clear about it. Using AI to build your website is not the same as running AI that talks to your customers. When you describe your business and an AI assembles a complete WordPress site for you in under a minute, that is a one-time generation. What you are left with is an ordinary site that you own and control. Your visitors read your words on your pages. They are not chatting with a machine, so Article 50's chatbot rule does not enter into it at all.

The takeaway

Strip away the noise and 2 August asks one reasonable thing of your website: do not let people mistake a machine for a person, and do not pass off invented content as real. You very likely agree with both already. The work is a line of text and a habit of editing what you publish, not a compliance project that swallows your spring.

Read the next "everything changes in August" email with that filter on. You will be able to tell which half of it genuinely applies to you, and which half is someone hoping you will buy an audit. For any business owner, that is a good place to be standing.