August 2 Lands on Any US Brand Shipping to Germany: the Synthetic Model in Your Lookbook and the Chat Bubble Both Need a Label

How many parcels did you ship to an address in the European Union last year? Not "do we sell internationally" — the actual count in your Shopify order export, filtered by destination country. For a lot of US brands the honest answer is between 200 and 4,000, mostly Germany, Ireland and the Netherlands, mostly people who found you through an Instagram creator and paid the DDU duties without complaining.

If that number is above zero, 2 August 2026 is a date on your calendar, and the part of your operation that is in scope is probably not the part you assumed.

The date, and why a brand that builds no AI is still in it

The EU AI Act's high-risk and transparency obligations carry a 2 August 2026 compliance date, and the Act reaches companies outside the EU when the output of their systems is used by people inside it. There is no employee-count exemption and no "but we're a US LLC" exemption. A 22-person apparel brand in Austin that ships 9% of its orders to EU addresses is inside the territorial reach of the same rulebook as a European retailer.

The clean version of the rule for a DTC operator is this: if a shopper in the EU interacts with something on your site that is artificially generated or artificially conversational, they are entitled to know that, in plain language, at the moment it happens. That is the transparency layer, and it is where almost all of a consumer brand's exposure sits. The heavy high-risk machinery — the conformity assessments, the technical files, the registration — is aimed at systems that make consequential decisions about people, which your product recommendation carousel is not.

Systems already on the market before the obligations applied may be grandfathered from some duties — worth asking counsel about if your chat widget has been live since 2023. Do not plan around it.

Three places your brand's AI is visible to a shopper

Walk your own site as a shopper in Düsseldorf and you will find them.

The chat bubble. Whatever is behind it — a Gorgias automation, an Intercom agent, a Shopify Inbox flow — if it talks like a person, the shopper has to be told it is not one. "Hi! I'm Ava, how can I help?" with no further qualification is the exact pattern the transparency rule was written about. The fix is a sentence, not a project: "You're chatting with our automated assistant. Ask for a human any time." Note the second half; several US state rules push in the same direction on disclosure when asked.

The synthetic model in the lookbook. This is the one brands miss. If the woman wearing the linen jumpsuit on your product page was generated rather than photographed, or if a real model's photo was materially altered by a generation tool, that is artificially generated imagery being shown to an EU consumer. The virtual try-on widget that renders the shopper's own body in your garment is in the same family. Your creative director commissioned that from a freelancer through Slack; nobody wrote it down anywhere.

The generated words. AI-written product descriptions, AI-summarised review blocks ("Customers say the fit runs small"), AI-translated German copy on your international storefront. The disclosure duty on published text is narrower and aimed at content informing the public on matters of public interest, which marketing copy generally is not — but the review summary deserves a hard look, because a summary that misrepresents what customers actually said is a consumer-protection problem in the US regardless of what Brussels says.

flowchart LR
  A["List every shopper-facing AI surface"] --> B["Name the supplier behind each one"]
  B --> C{"Does an EU shopper see it?"}
  C -->|No| D["Log it, US state rules only"]
  C -->|Yes| E["Add plain-language disclosure at the moment of contact"]
  E --> F["Record supplier, date, wording in the AI register"]
  D --> F
  F --> G["Re-check the register each quarter and before Q4 freeze"]

Texas and California switched on in January, and they are not the same rule

Texas TRAIGA and California SB 53 both took effect 1 January 2026, and owners keep conflating them. SB 53 is aimed at the largest frontier model developers — the companies training the models, with obligations around published safety policies and incident reporting. If you are a DTC brand, you are not a frontier developer, and SB 53 is not your compliance problem. TRAIGA is closer to home: it turns on intent, prohibiting things like intentionally discriminatory systems and manipulative design, and it sits on top of Texas's existing consumer protection posture. For most brands, complying with TRAIGA means not doing things you already were not doing.

The sleeper is employment. Colorado, New York, Illinois and Utah have their own AI statutes, and the surface where a consumer brand most plausibly touches a "consequential decision" is not the storefront — it is the hiring tool your ops manager switched on to sort 400 applications for six seasonal pick-and-pack roles in October. Automated screening of job applicants is squarely the thing those statutes were written for, including New York City's bias-audit requirement for automated employment decision tools and Illinois's 2026 amendment covering AI in employment decisions. Federal preemption of state AI rules is still unsettled as of July 2026, so all of these bind today.

What is genuinely not your problem

Owners over-comply out of anxiety, then quietly stop. Set the boundary honestly.

• You do not need a conformity assessment for a recommendation engine or a chat widget. Those are transparency obligations, not high-risk ones.
• You are not responsible for marking the model's output in machine-readable form — that duty sits with the supplier who built the generation tool. Your duty is telling the human in front of it.
• You do not need a separate EU entity to sell 900 parcels a year into Germany.
• Your warehouse scan guns, your demand forecast in Inventory Planner and your Klaviyo send-time optimisation are internal decisions about inventory and money, not decisions about a person's rights. Log them; do not panic about them.

The register is an afternoon, and it is the whole deliverable

The document that ends this anxiety is one page listing every AI surface, who supplies it, what it does, who sees it, and what the disclosure says. Illustrative arithmetic for a brand with six surfaces:

Now the other column. The Act's penalties are set as a percentage of worldwide annual turnover, not a flat fine, so exposure scales with revenue, not headcount. More immediately: European retail partners have started attaching AI questionnaires to vendor onboarding, and those arrive with ten-business-day response windows, usually in October. A brand that can answer from an existing register answers in an hour. A brand that cannot spends the worst week of its year assembling one.

Where a checklist is not enough and a lawyer earns the fee

Three situations where you should stop reading blogs and call counsel. First, if you use AI to make or materially influence decisions about people — hiring, credit terms for wholesale accounts, pricing that treats individuals differently based on inferred characteristics. That is a different tier of obligation, and the analysis is fact-specific. Second, if you sell into the EU through a subsidiary, a marketplace or a distributor, because whether the law treats you as the supplier of the tool or merely as the business using it changes depending on whose name is on it and whether you modified it. Putting your own brand name on a white-labelled chat agent can move you into the supplier column, which carries heavier duties.

Third, children. If your product line touches under-16s — kids' apparel, toys, youth supplements — the interaction between EU rules, US children's privacy law and advertising rules is genuinely tangled, and it is not a place for a founder's best guess at 11 p.m.

And a note on the calendar. Do not schedule this for late October. Between the Q4 code freeze most brands run from early November and the volume of Black Friday, nothing ships. Do the register in August, ship the disclosure copy in September.

Frequently asked questions

We block EU shipping at checkout. Are we out of scope?

Probably, but check what "block" means in practice. If your storefront still serves EU visitors, still runs the chat widget for them, and still shows them generated imagery before the checkout rejects the address, they are still interacting with your systems. Brands that geo-restrict at the storefront level have a much cleaner story than brands that only reject the address at the last step.

Does our email flow need a disclosure because Klaviyo picks the send time?

No. Automated send-time selection is a scheduling decision about your own campaign, not a system talking to a person as if it were a person. If you start generating individualised email copy that reads as though a named employee wrote it personally, that is a different conversation — mostly a US truth-in-advertising one.

Our chat agent is from a vendor. Isn't compliance their job?

Partly. The supplier carries the duties of whoever built the system; you carry the duties of whoever put it in front of a shopper. In practice: ask your vendor for their written AI Act statement — every serious vendor has one by now — file it with your register, and own the disclosure wording on your own site, because that is the part your shopper sees and the part you control.

What if federal law overrides all of this later?

Then you will have spent about $1,700 and an afternoon, and you will still hold a document listing every AI tool touching your customers — useful for vendor questionnaires, insurance renewals and due diligence whatever Washington does. As of July 2026 preemption is unsettled and the state statutes are in force, so planning around a rescue is not a plan.

Since the disclosure question usually lands first on whatever answers your customers: if you run an AI agent on your phone line or web chat, the disclosure belongs in its opening line, not buried in a policy page. CallSphere builds AI voice and chat agents that answer business lines and web chat, book appointments and capture leads around the clock, and identifying themselves as automated at the top of the conversation — with a human handoff available — is how they should be configured regardless of which state or continent the caller is in.