AI Disclosure Rules Are Live. What a Compliant Salon or Clinic Agent Looks Like

On 2 August the transparency rules in the EU AI Act started to apply. Three weeks on, the trade press for salons, spas and clinics is working through what they mean, and the answer is narrower — and far more manageable — than the headlines suggest. Article 50 does not regulate every AI tool in the building. It regulates the moment a client is talking to one.

What Article 50 actually asks for

The core duty fits in a sentence: an AI system that interacts directly with a person has to make clear it is an AI, unless that is already obvious. The European Commission’s guidelines on the transparency obligations, last updated on 6 August, put the design duty on whoever provides the system and a separate disclosure duty on the business deploying it for deepfakes, emotion recognition and published text that no human reviewed.

Scope is the part operators get wrong. The rules reach providers and deployers whose AI outputs are used inside the EU, not only companies established there — so a clinic outside the bloc whose website assistant books clients in Berlin is inside the scope. Cooley puts the exposure at fines of up to €15 million or 3% of worldwide annual turnover, whichever is higher. Separately, the AI literacy duty — staff using these tools should actually understand them — has applied since February 2025.

Why this lands on the front desk first

For a salon, spa or clinic, nearly all customer-facing AI sits in one place: the thing that answers the phone, the website chat and the DMs, and books against the calendar. That is the system Article 50 is about. Marketing copy drafted with AI is not caught by the interaction rule — though as Professional Beauty’s walk-through for salons and clinics notes, an “AI-generated” label never makes a misleading before-and-after image acceptable.

The rest of it is what a well-built booking agent should be doing anyway. Clinical questions do not get answered by software; they get routed to a qualified person. Client notes — allergies, sensitivities, treatment history — are surfaced for staff rather than acted on. If your setup already draws that line the way an assistant for a salon or clinic should, compliance is mostly labelling and paperwork.

What to set up before your next client asks

Four things, in order.

Write down every place a client meets AI: the phone line, website chat, Instagram and WhatsApp replies, review responses, reminder messages. Most operators find one or two they had forgotten about.

Fix the greeting. The disclosure belongs at first contact and in plain words — “you’re chatting with our AI assistant, ask for a person any time” — not buried in a privacy policy.

Put two questions to your booking software vendor in writing: is your assistant a covered interactive system, and what exactly does its default disclosure say? Anyone selling into Europe is already building to this standard. Get the answer on record.

Then name one person who owns AI in the business. Governance gaps that turn expensive almost always trace back to nobody being accountable.

None of this argues for switching the agent off. The reason a salon runs one has not changed: the phone rings while the front desk is with a client, and half the booking attempts arrive after closing. Doing nothing costs you those bookings and still leaves an undisclosed bot on your site. Ten minutes on the greeting and one afternoon on the map and the vendor emails, and every call and message gets answered on whatever channel it arrives on — with the disclosure the rules now expect.