FTC AI Policy Statement: What Small Businesses Must Know

The FTC just told every business using AI what the rules are

The Federal Trade Commission’s AI policy statement hit its March 11 deadline yesterday, and if you run a small business that uses any AI tool — a chatbot, automated email, dynamic pricing, AI-generated product descriptions — you need to read this.

The statement isn’t new legislation. It’s the FTC explaining how its existing authority under Section 5 of the FTC Act — the prohibition on unfair and deceptive practices — applies to artificial intelligence. In plain terms: the rules that already protect consumers from dishonest business practices now explicitly cover AI-powered operations.

For small businesses that have been adopting AI tools without a clear regulatory framework, yesterday changed the game.

What happened

On December 11, 2025, President Trump signed an executive order titled “Ensuring a National Policy Framework for Artificial Intelligence.” That order gave the FTC 90 days — until March 11, 2026 — to issue a policy statement explaining how its consumer protection rules apply to AI.

The executive order takes a deliberately business-friendly approach. Rather than creating new AI-specific regulations, it directs the FTC to clarify how existing law covers AI deployment. The order explicitly states that AI regulation should “promote free enterprise” and avoid “unnecessary burdens on American innovation.”

Key facts

Deadline met: The FTC policy statement was due March 11, 2026 — yesterday
Not new law: This is enforcement guidance under existing Section 5 authority, not new legislation
Federal floor: The statement is expected to create minimum national standards that may preempt some state AI laws
Immediate enforcement: The FTC can begin enforcement actions based on this guidance right away

Why this matters for small businesses

The patchwork problem gets a federal answer

If you’ve been following AI regulation, you know it’s been a mess. We covered the 78 chatbot bills across 27 states and the state-level AI pricing laws earlier this month. Every state has been writing its own rules, and small businesses operating across state lines have had no clear baseline to follow.

The FTC statement is meant to fix that. Legal analysts at Baker Botts and King & Spalding expect it to create a federal floor — minimum standards every state must meet — while potentially leaving room for states to go further in areas the FTC doesn’t address. Think of it like HIPAA: federal minimums with state flexibility to be stricter.

What the FTC expects from businesses using AI

Based on the guidance framework and early compliance analyses, here’s what the FTC is telling businesses:

Disclose AI involvement. If a customer is talking to a chatbot, they need to know. If your product descriptions are AI-generated, that should be clear. If your marketing emails are written by an AI model, transparency is the expectation.
Document your AI systems. Keep records of which AI models you use, what data they process, and how they affect customer interactions. If the FTC comes asking, you need to show your work.
Don’t make false claims about AI. The FTC has already taken action against Air AI for allegedly making deceptive claims about what their AI could do for businesses. If you’re marketing AI capabilities, they need to be real.
Watch automated decisions. If AI is making decisions that affect customers — pricing, credit, service eligibility — those decisions need to be transparent and fair.

The enforcement teeth

The FTC’s policy statement doesn’t create new penalties, but it doesn’t need to. Existing Section 5 enforcement carries fines of up to $50,120 per violation. The FTC has been increasingly active on AI enforcement — their joint statement with the EEOC, DOJ, and CFPB on AI discrimination is already in effect, and they’ve pursued multiple enforcement actions against companies making deceptive AI claims.

Our take

What we think

This is, on balance, good news for small businesses that are already using AI responsibly. The statement favors transparency over bans. It doesn’t restrict you from using AI chatbots, AI-generated content, or automated tools. It says: be honest about what’s AI, document what you’re doing, and don’t mislead customers.

For businesses in Appalachia that have been cautious about adopting AI because of regulatory uncertainty, the FTC just removed a significant barrier. There’s now a clear federal framework you can follow instead of trying to track dozens of conflicting state bills.

The bottom line: The FTC is telling businesses to be transparent about AI use, not to stop using it. That’s a framework small businesses can work with.

What’s missing from the conversation

Small business exemptions are unclear. The guidance applies broadly, but a five-person HVAC shop using an AI chatbot is not the same as a Fortune 500 company running algorithmic pricing at scale. How aggressively the FTC enforces against small operators remains to be seen.
State preemption isn’t settled. The executive order signals federal preemption of some state AI laws, but legal challenges are expected. California and Texas frameworks remain enforceable until courts say otherwise.

Questions that remain

Will the FTC provide a grace period or safe harbor for small businesses that need time to update their AI disclosures?
How will enforcement prioritize? Big tech first, or broad sweeps across business sizes?
Will tool vendors (HubSpot, Mailchimp, Zapier) update their platforms to make compliance easier, or does the burden fall entirely on the business owner?

What you should do this week

Immediate actions

Audit your AI touchpoints. List every place AI interacts with your customers: chatbots, automated emails, AI-generated content, dynamic pricing, review response tools. If you don’t know what’s using AI, you can’t disclose it.
Add disclosure where it’s missing. If your website has a chatbot, make sure it identifies itself as AI-powered. If your product descriptions or blog posts are AI-generated, consider adding a disclosure.
Document your AI stack. Write down which AI tools and models your business uses, what data they access, and what decisions they make. This doesn’t need to be a legal document — a simple internal record is a solid start.

Watch for

Vendor updates: Major SaaS platforms will likely issue compliance guidance for their AI features in the coming weeks. Watch for updates from your tool providers.
State responses: States like California and Texas may challenge federal preemption. If you operate across state lines, keep tracking state-level developments.

Resources

The path forward

The FTC’s AI policy statement marks a turning point. For the first time, small businesses have clear federal guidance on what’s expected when they deploy AI tools. The emphasis on transparency over restriction is encouraging — it signals that regulators want businesses to use AI responsibly, not to avoid it entirely.

If you’re already being upfront with customers about your AI use, you’re ahead of the curve. If you’re not sure where you stand, this week is the time to find out.

Need help making sure your AI tools are set up for compliance? Get in touch — we help Appalachian businesses deploy AI the right way.