Should You Tell Guests It Is AI? Disclosure, Trust, and Conversion
Five US state laws and the EU AI Act now bear on whether a hotel can let a guest assume they're chatting with a human. The guest research points one way: the damage comes from a bot that's wrong and hasn't said what it is.
The chat bubble on a hotel website answers in four seconds at midnight, and the guest typing into it usually has no way of knowing whether a person or a model wrote the reply. A growing number of laws say the hotel has to tell them.
The European Union's AI Act made transparency for AI chat and voice interactions enforceable in August 2026. Five different US states, California, Maine, New Jersey, Utah, and Colorado, now have chatbot disclosure requirements on the books, each with a different trigger. A hotel that books guests from several states or countries almost certainly has some of them covered already, so the useful move is one disclosure standard for every guest, built now.
The harder question is whether disclosure costs anything. The usual worry is that a guest who realizes they're talking to a machine will trust the property less, book less and complain more. A 2026 Texas A&M study suggests the worry is aimed at the wrong thing. What hurt guests' trust most was the bot being wrong, and telling them up front it was AI softened that particular damage.
The Law Changed Faster Than the Debate
Hotel compliance usually arrives slowly: ADA updates, fire code revisions, PCI standards refreshed on a multi year cycle. AI disclosure moved faster. Maine's chatbot law took effect in September 2025, and the European Union's AI Act turned its transparency obligation into an enforceable rule on August 2, 2026, with fines for a breach of up to €15 million or 3 percent of worldwide annual turnover, whichever is higher, according to CloseBot's 2026 summary of chatbot disclosure rules. The vendor side has a transparency problem of its own. A PhocusWire piece by Cloudbeds' Sebastien Leitner argues that hoteliers deserve to know whether a tool is a rule based algorithm, a traditional machine learning model or a large language model, because some revenue systems that have existed for 20 years are suddenly being sold as "AI enabled."
The jurisdictions differ in scope, which is what makes a state by state approach risky. CloseBot's 2026 legal summary lays out the differences. California's SB 1001, in force since July 2019, covers using a bot in a commercial transaction with intent to mislead about its artificial identity, and a clear disclosure is a safe harbor. Maine's law, effective September 24, 2025, is the broadest: it covers any chatbot in trade or commerce where a reasonable consumer couldn't tell the difference, and it's enforced under the state's Unfair Trade Practices Act, which carries a limited private right of action, so a guest can bring a claim without waiting for a regulator. New Jersey requires disclosure at the start of the interaction for the sale or advertising of merchandise or real estate. Utah's SB 226 requires prominent disclosure up front in healthcare, finance and legal interactions, and disclosure on request in other consumer transactions, which is the bucket most hotel guest messaging would fall into. Colorado's law is narrower, aimed at high risk AI in consequential decisions such as employment, finance, healthcare, housing, insurance and legal services, and it doesn't obviously reach a hotel concierge chatbot the way Maine's does.
| Jurisdiction | In Force | What Triggers Disclosure |
|---|---|---|
| California (SB 1001) | Since July 2019 | Bot used in a commercial transaction with intent to mislead about its artificial identity |
| Maine | September 24, 2025 | Any chatbot in trade or commerce a reasonable consumer could not tell apart from a human |
| New Jersey | In force | Start of interaction, for merchandise and real estate sales or advertising |
| Utah (SB 226) | In force | Prominent disclosure in healthcare, finance, legal; disclosure on request elsewhere |
| Colorado | In force | High risk AI in consequential decisions: employment, finance, healthcare, housing, insurance, legal |
The EU AI Act's Article 50 adds a sixth standard, and it follows the guest, not the hotel's headquarters. People have to be "informed that they are interacting with an AI system," and the disclosure has to be made "in a clear and distinguishable manner at the latest at the time of the first interaction or exposure," as quoted in CloseBot's summary. The Act doesn't hand you a script. A line as plain as "Hi, this is the AI assistant for [property name]" does the job. A bot with a human sounding name and no sign that it's automated doesn't.
In states with no chatbot law, the FTC Act's ban on deception still applies to every US chatbot, as the same summary notes. The FTC's own guidance on chatbots goes past transparency. Fenwick's 2024 summary lists five don'ts, starting with "don't misrepresent what the AI chatbot is, or what it can do" and including ads placed in a chat without being labeled as paid, where the FTC warned about automation bias, people trusting answers from machines that seem neutral. The FTC also published a proposed policy statement on deceptive steering in July 2026, and Stanford Law's CodeX analysis of it is worth passing to whoever handles legal for a hotel group. The practical upshot: one clear disclosure standard applied everywhere the brand operates covers every jurisdiction above, and it's cheaper to build once than to keep five chatbot configurations by state.
The chatbots guests stop trusting are not the ones that admit to being AI. They are the ones that get caught pretending not to be.
What Guests Actually Notice
Regulation is half the argument. For an owner whose marketing instinct is to keep AI invisible, the better case is what guests actually do when they meet it, and the data sits somewhere between "guests hate AI" and "guests don't care."
Guests are worse at detecting AI than they think they are, which changes the entire premise of hiding it. In a Twilio report on conversational AI released in November 2025 and covered by Customer Experience Dive, 72 percent of consumers said they could identify an AI generated voice interaction. When tested on AI generated voice clips, 90 percent failed to identify them. So a hotel can't count on guests working it out for themselves. Most think they'd notice. Most wouldn't. The same report found 69 percent still prefer to deal with a human.
Guests are perfectly happy with AI for small things, though. The 2026 State of Hotel Guest Tech Report, a survey of 402 recent hotel guests, found 70 percent consider a chatbot helpful for simple inquiries, 39 percent would use one to ask for the Wi-Fi password, and 58 percent believe AI can improve their stay. The same report found two thirds of guests have privacy concerns about voice activated devices, which is a different and more serious worry than a text chatbot handing out a Wi-Fi code. Guest comfort with AI depends on the use and the data involved, so the disclosure standard has to be just as specific. One blanket statement that treats a website chatbot and a device in the room as the same risk won't do.
| Metric | Finding | Source |
|---|---|---|
| Chatbot helpfulness for simple inquiries | 70% of guests find it helpful | 2026 Hotel Guest Tech Report |
| Belief that AI improves the stay | 58% agree | 2026 Hotel Guest Tech Report |
| Privacy concern, voice activated room devices | Two thirds express concern | 2026 Hotel Guest Tech Report |
| Confidence detecting AI voice interactions | 72% claimed they could, 90% failed when tested | Twilio 2025 Report |
| Overall preference for a human agent | 69% still prefer a human | Twilio 2025 Report |
The Chatbot That Gets Caught, Not the One That Discloses
The most useful study for an operator deciding whether to disclose comes from consumer psychology, not law. Professor Babak Taheri of Texas A&M's Arch H. Aplin III '80 Department of Hospitality, Hotel Management and Tourism led the research, published in the International Journal of Hospitality Management. His team surveyed 340 UK adults who had used chatbots to book hotels and measured which chatbot flaws, among them inaccuracy, deception and intrusiveness, made users uncomfortable, using the stimulus organism response framework common in consumer psychology. A separate conference paper on AI chatbot service quality, guest trust and revisit intention in hotel front offices, based on 236 guests, found that guest satisfaction mediates the link between chatbot service quality and whether a guest intends to come back.
Inaccuracy was the strongest driver of discomfort, with an effect more than four times larger than incredibility, guests doubting what the bot claimed. Once a chatbot made users uncomfortable, their willingness to keep interacting with it fell by nearly 38 percent, and the discomfort nearly doubled the likelihood that they'd delay or abandon the booking. The researchers found failures become more unsettling the more closely the technology mimics human speech. "Users implicitly expect a human-like system to behave like a human," Taheri said, and when it doesn't, "it triggers a threat response."
This is where disclosure comes in, and the finding isn't one-sided. Telling users up front that they were dealing with AI reduced the discomfort caused by inaccurate answers, because they were more likely to put a mistake down to the limits of the technology than to deliberate deception. It also made users more sensitive to anything that looked like deception, which intensified the discomfort tied to incredibility. Taheri's advice is to open with something like "Hi, I'm your AI assistant" and give guests an easy route to a person. "Competence without transparency doesn't solve the problem," he said.
For a hotel, that reframes the risk. It was never really "will guests find out this is AI." It's "will guests find out at the exact moment something goes wrong," which is the worst time to learn it. A disclosed bot still has to be accurate, and it has to be careful about claims guests might doubt. But when it does get something wrong, the guest already knows what they're dealing with.
How to Word It So It Actually Complies
What's left is mechanical: what exact language works. The state statutes and the EU AI Act don't mandate identical wording, but they point to a common standard. The safest approach uses the word "AI" or "automated" explicitly, in the first message of the interaction, before the guest has provided any personal information, and does not rely on a euphemism.
"Virtual assistant" is a common label, and according to CloseBot's 2026 summary it doesn't meet the EU's Article 50 clarity test, nor do "smart assistant" or "digital assistant," because none of them says plainly that the guest is talking to a machine. Switching the label to "AI assistant" looks cosmetic. Legally, it carries weight.
| Opening Line | Compliant | Why |
|---|---|---|
| "Hi, I'm the AI assistant for [Hotel Name]." | Yes | States "AI" plainly, appears at the first message |
| "Hi, I'm Sarah, here to help with your stay." | No | Human sounding name with no indication of automation |
| "You're chatting with our virtual assistant." | No, under the EU clarity test | Avoids the word AI or automated entirely |
| "This is an automated concierge. A team member can join anytime." | Yes | States "automated" plainly and offers a human path |
| "AI powered concierge. Ask for a human at any time." | Yes | Clear, upfront, pairs disclosure with an easy human handoff |
Two design details matter beyond the wording. First, the disclosure has to appear in the conversation itself. According to CloseBot, the European Commission is explicit that a disclosure buried in terms and conditions, a privacy policy or fine print doesn't count. Second, every AI interaction should offer a visible path to a human, "ask for a team member anytime" or similar. It's good service, and a bot that claims to be human falls under the EU AI Act's Article 5 prohibited practices, where fines reach €35 million or 7 percent of worldwide turnover, a much higher ceiling than the Article 50 penalty.
A disclosure standard is not a legal formality bolted onto guest messaging. It is the difference between an error guests forgive and one they do not.
Chains Are Adopting AI Faster Than They Govern It
Chains have moved first. In H2c's global study of 171 hotel chains, representing more than 11,000 properties and reported by PhocusWire, 78 percent use some form of AI and 89 percent plan to expand its use within 12 to 24 months. Chatbots are the most common deployment, at 42 percent of chains, and customer data management is the top area for planned investment, at 50 percent.
| Hotel chains | Share |
|---|---|
| Use some form of AI | 78% |
| Plan to expand AI use within 12 to 24 months | 89% |
| Use chatbots | 42% |
| Have a comprehensive, company wide AI strategy | 7% |
That doesn't make disclosure a big brand problem. Independent properties without a legal or compliance department are, if anything, more exposed rather than less, because they are less likely to have a documented disclosure standard in place before they adopt their first guest facing AI tool, and because Maine's law does not distinguish between a nine property chain and a single boutique hotel. Waiting until AI adoption catches up to the chains before building a disclosure policy means building that policy under legal pressure instead of ahead of it.
Inside the chains, the picture is less confident than the adoption numbers. The same PhocusWire analysis found only 7 percent of chains have a comprehensive, company wide AI strategy, and hoteliers rated their trust in AI at 6.6 out of 10 while their actual reliance on it averaged 4.7. A hotel rolling out guest facing AI faster than it can govern it is exactly where a disclosure standard gets skipped. Nobody decides to skip it. Nobody owns it.
What Luxury Brands Are Doing Instead
Some luxury brands have answered the disclosure question by keeping AI away from the guest. According to a 2026 review of AI concierge practices on HotelsForKings, an independent guide that describes deployments at brand level, luxury names such as Aman, Belmond and Mandarin Oriental largely keep human concierges as the front line, and where they use AI it supplements the human rather than replacing it. Research in Cornell Hospitality Quarterly, based on 50 interviews with luxury hotel guests in Europe, Asia and North America, found transparency preferences vary by guest: those less comfortable with technology valued human mediated, simplified disclosures, while the most digitally fluent wanted dashboards and traceability. The authors recommend tiered transparency and hybrid human and AI service.
The big chains have gone the other way, putting AI into tools guests already use. The same review describes app based AI concierge features across Marriott's portfolio and an app based AI assistant at Hilton, and voice activated in-room concierge devices at select IHG Voco and InterContinental properties, with availability varying by hotel. Our related research on where AI concierge tools win and where human concierges still matter goes deeper on that specific tradeoff.
| Brand Type | Approach | Example |
|---|---|---|
| Global loyalty chains | AI features in existing loyalty apps | Marriott Bonvoy, Hilton Honors |
| In-room voice | Voice activated in-room concierge at select properties | IHG's Voco and InterContinental |
| Luxury brands | Human concierge as the front line, AI as a supplement | Aman, Belmond, Mandarin Oriental |
Voice is the gap. The HotelsForKings review tells guests to ask whether an in-room device is always listening, whether conversations are recorded and how to mute or unplug it. Every one of those is a question a hotel could answer before anyone asks. With two thirds of guests already worried about voice activated devices, an in-room voice assistant belongs at the top of any disclosure standard, ahead of chat. Our research on AI voice assistants in hotel guest rooms and where the privacy line sits covers the technical and policy side of that specific gap in more depth.
Building a Disclosure Standard You Can Actually Ship
None of the research above requires a hotel to overhaul its AI strategy. It requires a documented, consistently applied disclosure standard that covers every guest facing AI touchpoint, chat, voice, email, and any automated outbound message, and next to the technology it governs, that's a small project. Start with an inventory: list every point where a guest interacts with something that could plausibly be mistaken for a human, the website chatbot, the SMS confirmation system, any in-room voice device, and any AI generated review response or personalized offer.
For each touchpoint, write the exact disclosure language using the AI or automated standard described above, confirm it appears at the first interaction rather than buried in a policy page, and confirm there is a visible path to a human for every one of them. Voice devices need in-room signage or a mention at check in, in addition to any verbal disclosure, because a guest who never directly addresses the device may never hear a spoken disclosure at all. This is also the moment to decide, deliberately, whether a given touchpoint should have AI at all. The luxury brand approach described above is a legitimate answer for a property whose brand promise depends on exclusively human service, as long as the property is actually staffing that promise rather than quietly deploying AI while marketing an all human experience, which is the one combination that draws both legal and reputational risk from every angle covered in this piece.
This is easier to run as one structured audit than as a string of fixes department by department. Our AI-Powered Guest Experience Systems service is built for exactly this kind of assessment, mapping every guest facing AI touchpoint a property already has, checking each one against the current legal standard in every market the property draws guests from, and building the disclosure language and human handoff paths into the guest experience rather than treating them as an afterthought bolted on to hit a compliance deadline.
Governance does not end at launch. Disclosure standards should be reviewed whenever a new guest facing tool is added, whenever the hotel expands into a new state or country with different disclosure rules, and at minimum annually as state and EU enforcement guidance continues to develop. Any property that treats its 2026 disclosure language as permanent will likely be behind again soon, given how fast this area of law has moved.
What Owners and GMs Get Wrong
The first mistake is treating disclosure as a legal checkbox handled once by whoever configured the chatbot vendor's default settings, rather than as an ongoing guest experience decision reviewed the way a hotel reviews its service standards. A vendor's default setup can ship with a human sounding bot name and no disclosure line, because what sells in a demo is a chatbot that feels smooth, and Maine's statute isn't in the demo. As Rohith Kori puts it in a September 2026 piece on AI trust in hospitality, "guests do not distinguish between individual systems, vendors, or technologies. They simply trust the operator." That's exactly why the disclosure standard has to be owned by the property rather than inherited from whichever vendor configured the chatbot last.
The second mistake is assuming disclosure only matters for text chat and ignoring voice, when the guest survey points the other way: voice devices are where privacy concern shows up most clearly. A property that ships a compliant chatbot disclosure while leaving an in-room voice device undisclosed has closed the smaller gap and left the larger one open.
The third mistake is conflating "we have not been sued yet" with "we are compliant." Maine's private right of action and EU fines that now apply mean the absence of a complaint so far is not evidence of a defensible policy, particularly for a hotel group drawing guests from multiple states or countries where different, sometimes stricter, standards already apply to the exact same chatbot. Our research on biometric check-in, consent, and the regulatory map covers a closely related pattern: technology that speeds up service while quietly expanding what a property has to disclose and to whom.
Finally, some properties overcorrect in the other direction and add so much disclosure language that the guest experience becomes cluttered with disclaimers before every automated interaction. The law asks for a clear statement at the first interaction, and Taheri's suggested opener is five words long. A guest does not need to understand how the model works. They need to know, in one sentence, whether they are talking to a person or a machine, and how to reach a person if they want one.
Frequently Asked Questions
Do hotels legally have to tell guests they are talking to an AI chatbot?
In a growing number of jurisdictions, yes. California, Maine, New Jersey, Utah, and Colorado all have chatbot disclosure requirements in force as of 2026, and the EU AI Act's Article 50 transparency obligation became enforceable on August 2, 2026 for any AI system whose output reaches a guest based in the EU. The specific trigger varies by state, some laws apply to any commercial chatbot a consumer could mistake for a human, others are narrower, but a hotel operating across multiple markets is safest treating disclosure as a baseline standard rather than checking each jurisdiction separately.
Does telling guests they are talking to AI hurt bookings or conversion?
The research doesn't back that fear. In the Texas A&M study of 340 UK adults who had booked hotels through chatbots, inaccurate answers were the biggest cause of discomfort, and once users were uncomfortable their willingness to keep interacting fell by nearly 38 percent. Upfront disclosure reduced the discomfort from inaccurate answers, because users blamed the limits of the technology rather than deliberate deception. It also made users more alert to anything that seemed deceptive, so a disclosed bot still has to be accurate.
What exact wording satisfies both the EU AI Act and US state disclosure laws?
There is no single mandated sentence, but the safest phrasing includes the word "AI" or "automated" explicitly in the first message of the interaction, before the guest has shared any information. "Hi, I'm the AI assistant for [Hotel Name]" or "You're chatting with our automated concierge, a team member can join anytime" both meet the EU's requirement to disclose clearly at the latest at the first interaction, and the stricter US state requirements. "Virtual assistant" alone falls short of the EU clarity test because it avoids the word AI or automated entirely.
Do voice activated devices in guest rooms need the same disclosure as a chatbot?
Yes, and it's the harder case. Two thirds of guests in the 2026 State of Hotel Guest Tech Report have privacy concerns about voice activated devices, and the disclosure problem is harder than with chat, because a device sitting quietly in a room does not prompt the same "who am I talking to" moment a chatbot conversation does. Guests should be told at check in or through in-room signage whether the device is always listening, what triggers a recording, and how long any audio or transcript is retained.
Should luxury hotels avoid AI disclosure by simply avoiding guest facing AI altogether?
Some luxury brands, including Aman, Belmond and Mandarin Oriental according to a 2026 HotelsForKings review, have taken close to that position, keeping human concierges as the front line and using AI to supplement them. That is a legitimate brand strategy, not a compliance workaround, but it only works if the property is genuinely staffing a human relationship at the level guests expect. A luxury property that quietly deploys AI messaging while marketing an all human concierge takes on more legal and reputational risk than one that discloses a hybrid model clearly, because the gap between the marketed experience and the actual one is exactly what disclosure law and guest trust research both punish.
Peter Mack is a hospitality technology strategist and founder of HospitalityOS, helping independent hotels and resorts implement AI systems that drive revenue and reduce operational costs. With 25 years in hospitality operations and technology, he has worked with properties of all types and in every region as both a General Manager, Founder, Operator, Asset Manager, and Owner.