AI governance

Chatbot Liability: You Own What Your AI Tells Customers

A Canadian tribunal, a German court and the UK competition regulator all put a chatbot's wrong answer on the business that runs it. Here is what failed as a defence, and which answers need a person.

An empty chat bubble linked by a dotted line to an orange shield, on cream paper.

TL;DRThe 6-minute read in 60 seconds

Yes. In the two rulings we found and in UK regulator guidance, a chatbot's answer counted as the business's own statement. Control what your bot may say before it says it.

  1. A Canadian tribunal (2024) and a German court (May 2026) held businesses to their chatbots' wrong answers. Neither accepted that the bot was separate from the business.
  2. The UK CMA says you answer for an AI agent as for an employee, even if someone else built it. Claiming only correct data did not save the German clinic.
  3. Singapore's trade ministry says its consumer law covers AI-generated claims in ads. We found no Singapore, Malaysian or Australian ruling on chatbot answers yet.

If your chatbot tells a customer something wrong, expect to own it. A Canadian tribunal and a German court held businesses to their bots' wrong answers, and the UK competition regulator says the same; neither ruling accepted that the bot, not the business, made the statement. This is general information, not legal advice.

At a glance: your chatbot's answer is your answer

3official positions put achatbot's answer on thebusiness: Canada, UK, Germany0 of 8defences accepted in thetwo rulings0Singapore, Malaysian orAustralian chatbot rulingsfound, to 7 November 2026
3official positions put achatbot's answer on thebusiness: CA, UK, DE0 of 8defences accepted inthe two rulings0Singapore, Malaysian orAustralian chatbot rulings,found to 7 Nov 2026
Sources: decisions and guidance linked below, read 7 November 2026.

Is a business liable for what its chatbot tells customers?

Yes, in the two rulings we found and in the UK regulator's guidance, so plan as if your bot's words are yours.

Timeline

Official positions on AI statements, 2024 to 2026

Select a date to see what was decided. None of these binds your courts in Singapore, Malaysia or Australia.

  1. 14 Feb 2024

    Canada: airline owns its bot's answer

    British Columbia Civil Resolution Tribunal, small claims. The chatbot told a customer a bereavement fare could be claimed after travel; the airline did not allow that. Negligent misrepresentation found and damages awarded. A small-claims decision; it binds no court in your market.

  2. 25 Feb 2026

    Singapore: AI claims in ads covered

    Written parliamentary reply from the trade ministry, to a question on ads that use AI-generated images: the Consumer Protection (Fair Trading) Act covers misleading claims by businesses, "including those involving AI-generated content". A ministry statement about ads; it does not mention chatbots.

  3. 9 Mar 2026

    UK CMA: you are responsible

    Competition and Markets Authority guidance: if your AI agent breaks consumer law, you are responsible, as for an employee, even if someone else built it. Guidance, not a ruling.

  4. 12 May 2026

    Germany: the bot spoke for the clinic

    Higher Regional Court of Hamm, case 4 UKl 3/25: a consumer association's injunction case, heard at first instance. The bot's false titles were the clinic's own misleading practice. The court gave leave to appeal to the Federal Court of Justice; its database, read 7 November 2026, marks the judgment final ("rechtskräftig").

It should be obvious to Air Canada that it is responsible for all the information on its website. It makes no difference whether the information comes from a static page or a chatbot.

British Columbia Civil Resolution Tribunal, Moffatt v. Air Canada, 2024 BCCRT 149, paragraph 27, 14 February 2024.

Which defences have failed?

Businesses have argued eight defences in these two cases, and none worked, so do not build your plan on them.

Eight defences you cannot rely on

Defence Rejected by Where
Our chatbot is a separate entity Moffatt tribunal Para 27
The right answer was on our other page Moffatt tribunal Para 28
Our bot answers on its own Hamm court Paras 70 to 73
Our bot is a third party Hamm court Para 77
We fed it only correct data Hamm court Press release
An outside firm built our bot Hamm court; CMA guidance agrees Para 94 (German rule); CMA
We could not foresee that question Hamm court Paras 91 to 95
Our customers know AI makes mistakes Hamm court Para 104
Sources, read 7 November 2026: Moffatt decision; Hamm press release and full judgment; CMA guidance.

The Hamm clinic said its bot used only its own website texts and FAQs; the court held it liable even so. The judgment calls the bot merely a technical tool ("technisches Mittel") the clinic controlled. A prompt rule and a keyword filter later stopped the false titles, so the court expected you to prevent that before launch.

How does a wrong answer become your liability?

Your bot's answer is your statement once it is sent, so you are exposed when a customer relies on it or a rival or consumer group objects.

How a wrong chatbot answer becomes your liability

Each step, then your control at that step (green).

1. Customer asksPrice, refund,staff, adviceCONTROLTest the obviousquestions first2. Bot answersFrom your pages,or it guessesCONTROLApproved lists;blocked topics3. Customer reliesBooks, paysor travelsCONTROLHandover forrefunds, exceptions4. ComplaintCustomer, rival orconsumer groupCONTROLLog each messageand its source5. DecisionTribunal, courtor regulatorCONTROLSwitch off; getlegal advice fastAt every step the statement is yours: Moffatt para 27, Hamm paras 70 to 77, CMA guidance.
1. Customer asksPrice, refund, staff, adviceTest obvious questions first2. Bot answersFrom your pages, or it guessesApproved lists, blocked topics3. Customer reliesBooks, pays or travelsRefunds, exceptions to a person4. ComplaintCustomer, rival or consumer groupLog each message and source5. DecisionTribunal, court or regulatorSwitch off; get legal advice
Origin Pi's diagram, built from the decisions and guidance cited in this post.

The CMA's guidance gives you four steps: tell your customers, train and test before launch, monitor with "a human in the loop", and refine quickly. The Hamm clinic switched its bot off but signed no binding cease-and-desist declaration, so the risk of repetition stood. What you sign after a complaint is a question for your lawyer.

What do Singapore, Malaysia and Australia say?

Each market has a consumer-law rule against misleading statements, and we found no court ruling on a chatbot's answer in the three. The Canadian and German rulings bind no court here; they show how your court may reason.

Who answers for your chatbot's statement, by market
MarketRule and official positionChatbot ruling?
SingaporeFair Trading Act covers AI-generated ad claims (ministry, Feb 2026)None found
MalaysiaAct 599 s9, s10 ban misleading conduct; excludes healthcare, regulated professionsNone found
AustraliaACCC guidance: intent to mislead does not matterNone found
Sources, read 7 November 2026: Singapore ministry reply, 25 Feb 2026 (quote verified 28 Oct); Act 599 (reprint as at 1 Nov 2021; check later amendments); ACCC. AI-written ads: our ad liability post.

Malaysia's Act bans false claims about a provider's "qualification or skill" or "any condition, guarantee, right or remedy", but excludes healthcare and regulated professions (section 2(2)). The ACCC says Australia's rule covers "websites or any other platform". We read both as covering your chatbot when you serve consumers; for business buyers, ask your lawyer.

Which chatbot answers need a human?

In our judgement, your bot's answers on prices, refunds, staff qualifications and advice carry the most risk: the two rulings concerned a refund answer and staff titles. Pick a statement type and who sends your answer.

Triage tool

Chatbot answer risk triage

Two questions. Tiers are our judgement built on the sources above; no court has graded them. Nothing leaves your browser.

Your risk tier by statement type and who sends your answer
Your bot statesBot answers alonePerson approves firstBot hands over
Price, fee or term of saleHighMediumLower
Refund, cancellation or policyHighMediumLower
Staff qualification or licenceHighMediumLower
Claim about what you sellHighMediumLower
Health, legal or financial adviceHighMedium, only if the approver is qualifiedLower, only if that person is qualified
Hours, directions, how to bookMediumLowerLower

Illustrative: asked "Is Ms Tan a trained teacher?", your tuition centre's bot should answer only from your approved staff list, or hand over.

Where Origin Pi stands

Score your bot against eight controls drawn from the two rulings and the CMA's four steps. Tick only what you have in place today.

Scorecard

Chatbot answer controls: 8 checks

Nothing leaves your browser.

What your bot may say
Your people
Your evidence and response
  • 0 to 49%: Exposed. Start with your approved list and testing.
  • 50 to 89%: Partly controlled. Close your list, blocked-topic, handover and testing gaps first.
  • 90% and above: Controls in place. Re-test after every change.

Illustrative weights: the approved list, blocked topics, testing and handover count 3 points, the rest 2 (total 20); missing any 3-point check keeps you below green. Not a compliance test.

Origin Pi's AI governance work builds the confirm step, access control and an audit trail; AI compliance maps them to your markets' consumer rules. Disclosing your bot is a separate duty: see our chatbot disclosure guide and, for approvals, designing the confirm step. For a second reader on your approved answer list, talk to us.

Take the data with you

Cite this post if you reuse the data.

Frequently asked questions

Is a company liable for what its AI chatbot says?
In the two rulings we read, yes. A British Columbia tribunal held Air Canada liable for its chatbot's wrong answer in February 2024. In May 2026 a German court treated a clinic chatbot's false claims as the clinic's own misleading commercial acts.
Does training a chatbot only on correct data protect the business?
No. The Hamm clinic said its bot used only correct data, and the court held it liable anyway. It said the clinic should have expected the obvious question and blocked the wrong answer before launch. Test yours before your bot goes live.
Is the chatbot vendor liable instead of the business?
Not instead of you. The UK CMA says you are responsible for an AI agent as for an employee, even if someone else designed or provides it. Whether your vendor also owes you anything is a question for your contract.
Is there a Singapore or Malaysia court ruling on chatbot statements?
None found as of 7 November 2026. Singapore's trade ministry said in February 2026 that its consumer law covers misleading claims involving AI-generated content in ads. If you sell in Malaysia, its Act 599 bans misleading conduct about services but excludes healthcare and regulated professions.
Does a disclaimer on the chatbot protect the business?
Neither ruling turned on a chat disclaimer. Hamm rejected the argument that your customers know chatbot answers need checking (paragraph 104), and Air Canada did not prove its contract-terms defence (paragraph 31). Do not rely on a disclaimer to fix your bot's wrong answers.

Next step

Ready to make your business agent-ready?

20 minutes on your sector, your systems, and where this applies. No deck, no templates.

Talk to us →