Until 2025 compliance was a downstream theme of design. From 2026 it enters the design perimeter, because it directly touches what is seen on screen. What follows is not a regulatory review but the list of things to do, for two concrete cases: a traditional digital site or service, and an AI chat integrated into your product.
If you have an AI chat (or a generative function) inside your product:
- Declare that one is interacting with an AI system, in a way perceivable within the interaction itself — not in a line of the terms of service, not in a tooltip. In force since 2 August 2026 (AI Act, art. 50).
- Mark AI-generated or AI-altered content in a machine-readable format — metadata, C2PA, or equivalents. For what is already in production there is time until 2 December 2026.
- Make the declaration itself accessible: announced by screen readers, with sufficient contrast, without disappearing after a few seconds. It is the point where compliance and accessibility coincide.
- If the audience can include minors — and with 89% of Italian 9-16-year-olds using GenAI, it is almost always the case: information understandable to a fourteen-year-old, and parental consent under 14 (L. 132/2025, art. 4 co. 4). The law does not prescribe an age verification mechanism: the choice of how to implement it — and whether to limit oneself to self-declaration — falls entirely on the team.
- If the chat performs actions and not just answers: log of executed actions, explicit confirmation on irreversible operations, rectification channel and escalation to an operator. On delegated payments the framework (PSD3) is still being defined and autonomous checkout is not currently practicable in the EU.
If you have a traditional digital site or service:
- Check whether you fall under the European Accessibility Act — e-commerce, banking services, transport, telecommunications, e-books: in force since 28 June 2025, reference standard EN 301 549, which refers to WCAG 2.1 AA. If there is a chat on top of a covered service, the chat is covered too.
- Decide whether to stay in Google’s AI answers. Since 17 June 2026 there is a toggle in Search Console to opt out of AI Overviews and AI Mode without organic ranking penalty. It is a decision to make and document, not to suffer by omission.
- Define an access policy for automatic agents:
robots.txt, rate limiting, terms of use. Blocking them is legitimate; not knowing they are there, no.
Effect on the professions
- Legal / Compliance — From advisory function to presence in the design process, with an operational perimeter: validate disclosures before release, not after; define who answers for an action performed by an agent on behalf of a user; establish audit trail requirements; guard minors’ consent and verifiability. Two questions to ask the team, immediately: who signs the disclosure, and who answers if the agent is wrong.
- UX Writer / Copywriter — The AI disclosure is microcopy and must be designed as such: perceivable without being invasive, understandable to a fourteen-year-old, compatible with screen readers, without timeout. Write it well once and reuse it, instead of improvising it on every touchpoint.
- Front-end Developer — Technical implementation: machine-readable marking of generated content, accessible disclosure (announced, not just visible), management of the opt-out toggle, action logging.
- Product Manager — Items 4, 5, and 7 are product decisions disguised as compliance: they must go on the roadmap with a date, not be delegated to legal.