FTC: New AI Commerce Rules for 2026

Misinformation abounds regarding consumer rights in our increasingly agentic commerce world, where AI-driven systems make decisions that directly impact purchasing, privacy, and redress. Protecting users in this complex environment demands clear understanding, not assumptions.

Myth 1: AI Agents Absolve Businesses of Consumer Protection Responsibilities

It’s a common misconception that if a transaction or interaction is primarily handled by an AI agent, the business somehow sheds its traditional consumer protection obligations. This could not be further from the truth. Regardless of whether a human or an algorithm processes a complaint, determines pricing, or manages a return, the underlying legal framework for consumer rights remains firmly in place. Businesses are still accountable. Consider the European Union’s AI Act, which is set to significantly impact how AI systems are developed and deployed globally, particularly for those operating in EU markets. This legislation, expected to be fully implemented in the coming years, categorizes AI systems by risk level, imposing stringent requirements on “high-risk” AI. These include systems used in critical infrastructure, employment, and credit scoring, all of which directly affect consumers. Developers of these high-risk systems will be required to conduct conformity assessments, implement strong risk management systems, and ensure human oversight is possible. A report from the European Parliament (https://www.europarl.europa.eu/news/en/press-room/20240308IPR19015/ai-act-meps-adopt-landmark-law-on-artificial-intelligence) details these new regulations, emphasizing that accountability in the end rests with the legal entity deploying the AI, not the AI itself. In the United States, the Federal Trade Commission (FTC) has consistently reiterated that existing consumer protection laws apply to AI-powered products and services. In a 2023 business guidance document (https://www.ftc.gov/business-guidance/blog/2023/02/keep-your-ai-claims-check), the FTC warned companies against deceptive claims about AI capabilities and highlighted that Section 5 of the FTC Act, which prohibits unfair or deceptive acts or practices, extends to AI. So, if an AI chatbot makes a misleading promise about a product’s features, the company is on the hook, just as if a human sales representative had made that promise. The agentic nature of the commerce doesn’t create a legal vacuum. It simply adds a layer of technological complexity that regulators are actively addressing.

Myth 2: Consumers Have No Recourse if an AI Algorithm Makes a “Bad” Decision

Many believe that algorithmic decisions, particularly those involving pricing, credit assessments, or personalized recommendations, are unchallengeable. “The algorithm decided,” is often heard as a final, unappealable verdict. This idea is fundamentally flawed. Consumers retain their right to challenge decisions that are unfair, discriminatory, or based on incorrect information, even if those decisions originate from an algorithm. For instance, consider automated loan application systems. If an AI system denies a loan based on biased data or an error in a consumer’s credit history, that consumer has a right to know why and to dispute the decision. The Equal Credit Opportunity Act (ECOA) (https://www.consumerfinance.gov/compliance/compliance-resources/fair-lending-resources/equal-credit-opportunity-act/) prohibits discrimination in credit transactions, and this applies regardless of whether the decision-maker is human or machine. Lenders using AI must still comply with these regulations, providing adverse action notices that explain the reasons for denial and informing consumers of their right to obtain a free credit report. Plus, the concept of explainable AI (XAI) is gaining traction precisely because it addresses this need for transparency and recourse. While not yet universally mandated, XAI aims to make algorithmic decisions understandable to humans, enabling consumers to challenge outcomes effectively. The National Institute of Standards and Technology (NIST) has published an AI Risk Management Framework (https://www.nist.gov/artificial-intelligence/ai-risk-management-framework), which, while voluntary, emphasizes principles like transparency and explainability to foster trustworthy AI. Businesses that fail to provide clear explanations for AI-driven decisions risk regulatory scrutiny and consumer backlash. Providing a clear audit trail for algorithmic processes is becoming a baseline expectation, not an optional extra.

Myth 3: Data Privacy Concerns are Irrelevant When Interacting with AI

There’s a dangerous assumption that since AI systems are often perceived as non-human, the data shared with them somehow carries less privacy risk or isn’t subject to the same protections. This is entirely incorrect. Every piece of personal information provided to an AI, whether through a chatbot, a voice assistant, or an automated recommendation engine, remains subject to stringent data protection laws. The General Data Protection Regulation (GDPR) (https://gdpr-info.eu/) in Europe and various state-level privacy laws in the US, like the California Consumer Privacy Act (CCPA) (https://oag.ca.gov/privacy/ccpa), apply directly to how AI systems collect, process, and store personal data. These laws grant consumers rights such as the right to access their data, the right to rectification, and importantly, the right to erasure. If an AI system collects biometric data for authentication, for example, the company deploying it must ensure transparent consent, secure storage, and clear policies for data retention and deletion. Failing to do so can result in substantial fines and reputational damage. On top of that, AI systems often rely on vast datasets for training. Companies must ensure that these training datasets are collected ethically and comply with privacy regulations. The use of synthetic data or anonymized data can mitigate some risks, but the fundamental responsibility to protect individual privacy remains. As AI becomes more sophisticated, its ability to infer sensitive information from seemingly innocuous data points increases, making strong data governance even more critical. Businesses must be explicit in their privacy policies about how AI uses personal data, and consumers should read these policies carefully. A simple interaction with a customer service bot might involve more data processing than one assumes. K-12 AI warns on student privacy in 2027, highlighting the growing concerns across various sectors.

Myth 4: AI-Generated Content is Exempt from Advertising Standards

The rise of generative AI has led some to believe that content created by these systems, such as product descriptions, marketing copy, or even simulated customer reviews, exists in a legal grey area, somehow outside the purview of traditional advertising standards. This is a hazardous miscalculation for businesses. Any content presented to consumers, regardless of its origin (human or AI), must adhere to truth-in-advertising principles. The FTC’s guidance on endorsements and testimonials (https://www.ftc.gov/business-guidance/resources/ftcs-endorsement-guides-what-people-are-asking) clearly states that endorsements must be truthful and not misleading. If an AI generates a fake positive review, the company publishing it is liable for deceptive advertising. The same applies to product claims. If an AI system fabricates performance statistics for a product, the company faces penalties. It’s not a question of whether a human wrote it. It’s a question of whether the consumer is being misled. Plus, the distinction between AI-generated content and human-generated content is becoming increasingly blurred. Some jurisdictions are considering requirements for disclosing when content is AI-generated, especially in areas like news and political advertising, to prevent manipulation. For marketers, the rule is simple: if you wouldn’t allow a human to say it or write it because it’s false or misleading, you cannot allow an AI to say or write it on your behalf. This requires rigorous oversight of AI content generation tools and strong fact-checking mechanisms, even for what seems like automated boilerplate.

Myth 5: AI-Driven Personalization Always Benefits the Consumer

AI-driven personalization is often touted as a universally positive development, leading to more relevant product recommendations, tailored services, and improved user experiences. While this can be true, it’s a myth that all personalization inherently benefits the consumer or is ethically neutral. Personalization, when poorly implemented or maliciously designed, can lead to price discrimination, manipulation, and even exclusionary practices. Consider dynamic pricing algorithms. These systems can adjust prices in real-time based on a consumer’s browsing history, location, or even perceived willingness to pay. While this might optimize revenue for businesses, it can result in different consumers paying different prices for the exact same product or service, raising questions about fairness and transparency. The Consumer Financial Protection Bureau (CFPB) has expressed concerns about algorithmic bias in financial services (https://www.consumerfinance.gov/about-us/blog/cfpb-spotlights-algorithmic-bias-in-financial-services/), noting how personalization can inadvertently (or intentionally) disadvantage certain demographic groups. On top of that, personalization can create “filter bubbles” or “echo chambers,” limiting a consumer’s exposure to diverse products or information, potentially hindering informed decision-making. Companies deploying AI for personalization have a responsibility to ensure these systems are designed to be fair, non-discriminatory, and transparent where necessary. Consumers should be aware that highly personalized experiences might not always serve their best interests and should actively seek out information beyond what algorithms present to them. The ultimate decision-making power must remain with the consumer, not the algorithm. The field of consumer rights in an AI commerce law environment is evolving rapidly, yet the core principles of fairness, transparency, and accountability endure. Businesses must proactively adapt their practices to meet these challenges, ensuring their AI implementations uphold, rather than erode, consumer trust and legal protections. For a deeper dive into how AI impacts financial services, consider reading about Banking AI adoption by 2027.