Do I have to tell people my product uses AI?

Last reviewed

Written by For Founders Law, a Toronto firm licensed by the Law Society of Ontario. About us

Short answer

Canada has no general law requiring every AI feature to be disclosed, but several specific rules do. Quebec requires notice when a decision about a person is based exclusively on automated processing, Ontario employers with 25 or more employees must say in public job postings whether AI is used to screen applicants, and privacy and advertising laws require you to be open about how personal information is used and not to mislead people. In practice, telling users when they're dealing with AI is the safer default.

Canada’s proposed federal AI law died in January 2025, so there’s no single AI disclosure rule. Instead, disclosure duties come from privacy, employment and advertising law, depending on what your AI does. See is AI regulated in Canada for the wider picture.

When is disclosure required?

SituationRuleWhat to disclose
A decision about a person is made exclusively by automated processing, using their personal informationQuebec’s private sector privacy law, s. 12.1That the decision was automated; on request, the information used and the main reasons and factors, and the right to have the information corrected; a way to submit observations to someone who can review the decision
Public job postings by Ontario employers with 25 or more employeesEmployment Standards Act, since January 1, 2026Whether AI is used to screen, assess or select applicants. See Ontario’s job posting rules
Personal information is used to train or run AI featuresPIPEDA purposes, consent and openness principlesWhat you collect, why, and that it’s used for AI, in your privacy policy and at collection
Marketing claims about AICompetition ActNothing specific, but claims about what the AI does, or that a human is involved, must not mislead

Do I have to label AI chatbots?

No statute in Ontario requires it in general. But presenting a bot as a human could be misleading in some contexts, and the Privacy Commissioner’s generative AI principles call for openness about when people are interacting with AI. Telling users up front also supports the disclaimers you rely on. See is my company liable for what its AI chatbot says.

Do I have to label AI-generated content?

Not under a general Canadian law. Platform rules can require it: YouTube and TikTok, for example, require creators to disclose realistic AI-generated or altered content. These rules change, so check the current version for each platform you post on. Brand deals increasingly ask creators to disclose AI edits too. If AI-generated images or reviews could mislead consumers about a product, the Competition Act applies.

What about selling to customers in the EU?

The EU AI Act has its own transparency obligations for some AI systems, which can apply to Canadian companies serving EU users. That’s outside Ontario law, but worth mapping if you sell there.

What should my terms and policies say?

  • Your privacy policy should explain AI uses of personal information, including training.
  • Your AI product terms should say output is AI-generated and may be inaccurate.
  • If you make automated decisions about Quebec residents, build the notice and review process into the product.

What to do next

We draft AI product terms and privacy policies at fixed fees on our fees page. See also Quebec’s Law 25 for SaaS.

This guide is general information about Ontario and Canadian law, not legal advice for your situation. To check what your product should disclose, book a free 15-minute consult.

Sources

  1. Act respecting the protection of personal information in the private sector (Quebec), CQLR c. P-39.1, s. 12.1
  2. Ontario: Your guide to the Employment Standards Act, requirements related to publicly advertised job postings
  3. Competition Act, R.S.C. 1985, c. C-34, s. 52 (false or misleading representations)
  4. PIPEDA, Schedule 1, Principles 4.2, 4.3 and 4.8 (purposes, consent, openness)
  5. Office of the Privacy Commissioner of Canada: Principles for responsible, trustworthy and privacy-protective generative AI technologies