YOUR
Search

    28.04.2026

    Generative AI and “hallucinations”: transparency by design in Italian consumer protection practice


    In the recent proceedings involving DeepSeek, Mistral AI and NOVA AI, the Italian Competition Authority (AGCM) makes one point clear: what matters is not only that AI systems can make mistakes, but also how that risk is communicated to users.

    With decision No. 31864, the Italian Competition Authority (AGCM) addresses one of the most delicate aspects of generative AI services: managing the risk of inaccurate outputs (“hallucinations”) from a consumer protection standpoint.

    Proceeding PS12968 concerns the “Le Chat” service by Mistral AI. The Authority alleged a potential infringement of Articles 20, 21 and 22 of the Consumer Code, taking the view that users were not informed in a sufficiently clear, immediate and intelligible manner about the possibility that the system could generate incorrect or misleading responses. The issue was not so much the absence of information per se — which was available in the terms of service and help centre — but rather its actual accessibility and visibility within the user experience.

    The decision fits within an increasingly consolidated approach: in digital practices addressed to consumers, relevant information must be effective, not merely formal. In other words, it is not enough for a risk to be described in contractual documents if those documents are not readily accessible or do not reach the user at the moment decisions are made or the service is used.

    In this context, Mistral AI offered commitments under Article 27(7) of the Consumer Code, thereby avoiding a formal finding of infringement. The commitments — deemed suitable to address the concerns — develop along four main lines: (i) inclusion of disclaimers directly within chat interfaces (“Le Chat may make mistakes. Please check responses”); (ii) strengthening and Italian localisation of the terms of service, with explicit reference to the potential unreliability of outputs and the need for verification; (iii) improved accessibility of the terms throughout the user journey (homepage, login, registration, app store, interface); and (iv) full translation of the website and help centre into Italian.

    The distinctive feature of the decision is the affirmation of “contextual” transparency: users must be warned of risks not only “somewhere”, but at the time and place where those risks materialise — i.e. during interaction with the system. This marks a shift towards a compliance-by-design logic, already familiar in other regulatory domains.

    The decision also has a broader systemic implication: “hallucinations” are no longer merely a technological limitation, but become a legally relevant factor in assessing the fairness of a commercial practice. A generative AI system that — even implicitly — leads users to consider its outputs as reliable may be regarded as misleading, unless accompanied by clear and appropriate warnings.

    Practical takeaways

    For operators developing or integrating generative AI solutions:

    • disclaimers on potential errors should be embedded in the interface, not buried in terms and conditions;
    • messaging must be simple, visible and immediate;
    • terms of service should be easily accessible and properly localised;
    • in sensitive areas (legal, medical, tax), enhanced warnings are advisable.

    Artificial intelligence putting corporate governance to the test: adequate arrangements, model 231 and liability
    The use of artificial intelligence is (also) progressively becoming part of…
    Read more
    GEMA v. Suno: a new european precedent on the relationship between generative AI and copyright
    The very recent judgment handed down by the Regional Court of Munich in the GEMA…
    Read more
    Dupes and Brand Protection | Video
    The term dupe (from duplicate) refers to products that deliberately replicate…
    Read more
    ARTIFICIAL INTELLIGENCE: NEW CRIMINAL LAW IMPLICATIONS REGARDING CORPORATE LIABILITY UNDER ITALIAN LEGISLATIVE DECREE No. 231/2001
    On 15 September 2026, Legislative Decree No. 160 of 9 September 2026 (the…
    Read more
    AI Enters Trade Secret Protection
    On 10 June 2026, the Italian Council of Ministers approved two draft legislative…
    Read more
    THE COMMISSION’S NEW GUIDELINES ON THE CLASSIFICATION OF HIGH-RISK AI SYSTEMS
    The context and structure of the Guidelines Regulation (EU) 2024/1689 (“AI…
    Read more
    WHY DID THE COURT OF ROME ANNUL THE DATA PROTECTION AUTHORITY’S ORDER ON OPENAI?
    Summary of the judgement On 18 March 2026, the Court of Rome annulled in its…
    Read more
    Cyber Resilience Act: the countdown has started
    With Regulation (EU) 2024/2847 (“Cyber Resilience Act” or “CRA”), the European…
    Read more
    AI: Council of Ministers gives preliminary approval to two draft legislative decrees implementing law no. 132/2025
    Overview On 10 June 2026, exercising the powers delegated under Law No.…
    Read more