AI Rules Just Got Real for Small Business. Here Is What Yours Needs to Do Now.
For years, AI regulation felt like a problem for Google and OpenAI, not for your business. That changed in 2026. The new rules apply by what your AI does, not by how big your company is, and a ten-person business can face the same obligations as a Fortune 500.
Here is the plain version of what is happening and what to do, without the legal jargon.
The deadlines that already matter
- EU AI Act, August 2, 2026. If your AI talks to people (a chatbot, an assistant), you must disclose it is AI and meet transparency rules. Fines reach up to 7 percent of global revenue, and it applies to anyone serving EU users, not just EU companies.
- Colorado, June 30, 2026. The first comprehensive US state AI law. If your AI influences a consequential decision (hiring, lending, housing), you have duties, with penalties up to 20,000 dollars per violation.
- New York and others. Laws like NYC's hiring-tool rule have no employee minimum. A small team using AI to screen candidates carries the same obligation as a giant.
Where small businesses actually get caught
You do not need to be an AI company to be covered. The risk shows up in ordinary places: an AI chatbot on your site that does not say it is AI, an AI tool that helps you screen job applicants or approve customers, or a model making decisions about pricing, credit or insurance. If AI touches a decision about a person, a rule probably applies.
The plain checklist
- Disclose your bots. If customers talk to an AI, tell them. One sentence.
- Map where AI decides about people. List every spot AI affects hiring, lending, pricing or eligibility.
- Keep a human in the loop for those consequential decisions, and keep records.
- Run a bias check on any tool used for hiring or credit. Several laws now require it.
- Write it down. A short, honest record of what your AI does and how you oversee it is most of what compliance really asks for.
Why this is an opportunity, not just a burden
Most of your competitors are ignoring this and will scramble later. Getting it right now is cheap, builds trust with customers, and turns "we use AI responsibly" into a selling point instead of a liability. Compliance done early is a moat, not a tax.
This is part of how I help companies adopt AI: not just building the systems, but making sure they are safe, disclosed and defensible. If you use AI anywhere near your customers or hiring and want to be on the right side of these rules, let's talk, or see how I work with businesses.