Quarterly BAS Due (July–September)
Form 1099-NEC & Contractor Payment Reporting Check
Why this matters.
UK businesses have rapidly adopted AI chatbots for customer service, sales, and support — but the law hasn’t created a separate “chatbot exemption” from existing consumer protection duties. Under the Consumer Rights Act 2015 and the Digital Markets, Competition and Consumers Act 2024, a statement made by a chatbot is treated the same as one made by a human employee: if it misrepresents a product, promises a refund policy that doesn’t exist, or gives incorrect pricing, the business is generally bound by it. Air Canada was famously held liable by a Canadian tribunal in 2024 after its chatbot invented a bereavement fare policy that didn’t exist, and UK consumer law operates on similar principles of misleading commercial practices and unfair contract terms. Separately, where a chatbot processes personal data or makes automated decisions with legal or similarly significant effects (such as declining a refund, credit application, or complaint), UK GDPR Article 22 rights around automated decision-making and human review are engaged.
There’s also a transparency dimension: consumers increasingly expect to know when they’re talking to an AI rather than a person, and the Online Safety Act and CMA guidance on digital consumer practices both point toward disclosure as good practice, if not always a hard legal requirement. Chatbots trained or fine-tuned on customer conversations raise further UK GDPR questions about what data is retained, for how long, and whether customers were told their chats might be used to improve the system. As more complaints and disputes involving AI-generated customer service responses reach the Financial Ombudsman, Trading Standards, and small claims courts, businesses relying on chatbots without reviewing what they’re actually saying to customers are taking on real, uninsured legal risk.
