AI Act Transparency: Telling Irish Applicants They Are Talking to AI

Yes: applicants must be told

If your admissions chatbot talks directly to applicants, they must be told they are dealing with an AI system, unless that is obvious. Ireland is an EU member state, so the AI Act applies directly with no UK-style gap to bridge. The transparency obligations in Article 50 have applied since 2 August 2026.

Irish institutions have a particular exposure. Applications run through the CAO, so prospective students tend to arrive at a college website with a specific question: points for a course, deadlines, the Change of Mind window, or the Student Contribution. Those are exactly the questions a chatbot answers at 11pm, and exactly the moment a Leaving Certificate student should know whether a person is replying.

This piece is for admissions, digital and data protection leads at Irish universities, technological universities and private colleges. It is general information, not legal advice.

What Article 50 requires

Article 50(1) of Regulation (EU) 2024/1689 covers AI systems intended to interact directly with natural persons. They must be designed so those people are informed they are interacting with an AI system, unless that is obvious to a reasonably well-informed, observant and circumspect person given the context.

Article 50(5) sets the form: clear and distinguishable information, at the latest at the first interaction, meeting applicable accessibility requirements. The text is on the Commission's AI Act Service Desk.

• Timing: in the first message, not on a terms page.
• Visibility: distinct from the rest of the interface.
• Accessibility: usable with a screen reader and on mobile.

Provider or deployer?

On the wording, the Article 50(1) duty sits with the provider of the system, the vendor that builds the chatbot. Your college is normally the deployer.

You still carry practical responsibility. You choose the tool, write the welcome message, and answer to applicants, your governing body and your DPO. Removing the vendor's notice, or building your own agent on a third-party model, can change how you are classed. Take advice.

Penalties are in Article 99 and each member state designates its authorities. For data protection, the Data Protection Commission is the regulator you already deal with, but confirm which Irish bodies are competent for the AI Act itself before assuming.

What was not postponed

The Digital Omnibus on AI entered into force on 27 July 2026. The Digital Omnibus moved Annex III high-risk use cases to 2 December 2027, not Article 50. See the Commission's regulatory framework page and its transparency guidelines of 20 July 2026.

When you can skip the notice

The "obvious" exception is narrow. A widget labelled "Virtual assistant" with a robot icon might suffice in some contexts, but your audience includes fifth and sixth years, parents, mature applicants and international students.

Do not rely on it. One sentence costs less than arguing the point.

1. Handover: say when an adviser joins and when the AI resumes.
2. Other channels: on WhatsApp, SMS or voice, put the notice in the channel.
3. Human-sounding personas: a first name and realistic photo implies a person.
4. Automated emails: say so if an AI drafts replies in your name.

Sample wording

For your DPO to review; not prescribed by the regulation.

Avoid a bare "Assistant" label or a notice hidden in terms and conditions.

AI notice and GDPR are separate duties

Article 50 does not replace GDPR information. Applicants still need to know who controls their data, why, and for how long. Both can sit in one welcome banner with a link to your privacy notice. Irish institutions apply the GDPR alongside the Data Protection Act 2018.

Related reading: the EU AI Act and higher education, risk classification and the documentation checklist.

Three Irish scenarios

A technological university answering CAO questions. Applicants ask about course requirements, deadlines and the Change of Mind window. The notice appears in the first message, with a link to the admissions office. If the chatbot quotes a points figure, point to the official source: accuracy is a separate risk from transparency.

A private college recruiting international students. Applicants outside Ireland may have no idea how the CAO, QQI-validated awards or the Irish levels framework work. A clear opening line ("AI assistant, not an adviser") stops them reading answers as binding commitments.

A college with a PLC or further-education pathway. Applicants include mature learners and adults returning to education alongside school leavers. Their familiarity with chatbots varies widely, which is why the "obvious" exception is a poor bet.

Across all three, remember that Ireland is a small market where applicants talk to each other. A chatbot that sounds human and is later revealed to be automated costs more in trust than the single line of disclosure would have cost on day one.

Five-step action plan

1. List every channel where the chatbot talks to applicants.
2. Ask the vendor how the notice is displayed and whether you can edit it.
3. Draft the notice per channel and have your DPO review it.
4. Test it with a screen reader and on a phone.
5. Archive dated screenshots and schedule a review whenever you add a channel.

Evidence to keep

• dated screenshots of each channel showing the notice;
• the vendor contract clause on user information;
• a change log for the welcome message;
• accessibility test results;
• the name of the person who approves wording changes.

Review the file whenever you add a channel, for example if a web chatbot is extended to WhatsApp.