AI receptionists for small clinics and salons in Europe: what the AI Act requires from August 2026

As of 12 October 2026. This guide explains the rules as published at that date. It is not legal advice. If your set-up is unusual, or you handle a lot of health data, ask a lawyer or your data protection officer.

Why this matters now

AI receptionists have moved from pilots to price lists. In Germany, a third-party review of Doctolib’s pricing (published 4 May 2026) reports that an AI phone assistant is included from its €229-per-month-per-doctor tier (prices as of April 2026). In the UK, hosting providers such as Fasthosts now sell AI receptionists as monthly subscription plans alongside their other business services.

For a small clinic or salon, the appeal is simple. Calls come in while everyone is with a patient or a client, and many of them are routine: opening hours, parking, prices, moving an appointment.

The legal side changed on 2 August 2026, when Article 50 of the EU AI Act started to apply. On top of that, the EU amended the AI Act in July 2026. Here is what that means in practice.

What Article 50 requires

Tell people they are talking to an AI

Article 50(1) says AI systems intended to interact directly with people must be designed and developed so that those people are informed they are interacting with an AI system. The exception is when this is obvious to a reasonably well-informed, observant person, given the circumstances.

Do not rely on the exception. A natural-sounding voice on your clinic’s number is exactly the situation where it is not obvious.

Say it clearly and early

Article 50(5) adds that this information must be given in a clear and distinguishable way, at the latest at the first interaction, and must meet accessibility requirements.

For a phone receptionist, that means the greeting. For example: “Hello, you’ve reached the clinic’s AI assistant. I can book or change appointments, or pass a message to the team.” For a chat widget, a visible line in the window before the first message, not a footnote in the privacy policy.

Other parts of Article 50

• Marking synthetic content (Article 50(2)). Providers of systems that generate audio, images, video or text must mark the output in a machine-readable way. For systems placed on the market before 2 August 2026, the amended Act gives until 2 December 2026. This is mainly your vendor’s job.
• Emotion recognition (Article 50(3)). If a system recognises emotions, the business using it must inform the people exposed to it. If your voice tool offers “caller mood detection”, ask whether you need it at all.
• Deepfakes and public-interest text (Article 50(4)). Rarely relevant to a booking line.

Provider or deployer: who does what

The AI Act splits duties between two roles.

• The provider develops an AI system, or has one developed, and places it on the market or puts it into service under its own name.
• The deployer uses an AI system under its own authority in a professional context.

Article 50(1) is formally a provider obligation: the system has to be built to disclose. If you subscribe to an off-the-shelf AI receptionist, the vendor is normally the provider and your clinic or salon is the deployer.

That does not mean you can ignore it. You choose the greeting, the scripts and the channels. If your configuration removes or buries the disclosure, the system is no longer working as designed. And if you have a system built for you and run it under your own name, you may be treated as the provider yourself. Where the line falls in your case is a question for legal advice, but the practical answer is the same: make sure the disclosure is there and cannot be switched off by accident.

What the July 2026 amendments changed

Regulation (EU) 2026/1744, adopted on 8 July 2026, published in the Official Journal on 24 July and in force since 27 July 2026, amended the AI Act. For a small clinic or salon, four points matter:

1. Transparency was not delayed. Article 50(1) and 50(4) were not changed. Only Article 50(7), on codes of practice, was replaced, and the transition period for 50(2) was added.
2. High-risk rules were postponed. Systems that are high-risk under Annex III now face those rules from 2 December 2027, and those under Annex I (products such as medical devices) from 2 August 2028.
3. AI literacy was softened. Article 4 now says providers and deployers “shall take measures to support the development of AI literacy”, and that this “does not require” them to guarantee any specific level. Briefing your team on what the receptionist does and does not do is still sensible, and it is easy to document.
4. SME support. The amended Article 4 also asks the Commission and Member States to support smaller businesses.

Keep the receptionist away from clinical decisions

Annex III, which lists high-risk uses, includes systems used for emergency healthcare patient triage. A receptionist that books and moves appointments is not on that list. One that decides how urgent a caller’s symptoms are could come much closer to it.

The safe design is simple:

• the AI handles logistics: booking, changes, cancellations, opening hours, directions, prices from your approved list;
• anything that sounds clinical, urgent or worrying goes straight to a person, with a clear script (“I’ll pass this to the team now”);
• in an emergency, the script tells the caller to contact emergency services;
• the AI never gives medical, dental or treatment advice, and never comments on contraindications in a beauty context either.

Health data and GDPR

The AI Act sits on top of data protection law, not instead of it.

• Health data is special-category data under Article 9 GDPR. A clinic’s receptionist will hear it, even if you do not ask for it. Design scripts to collect the minimum needed to book: name, contact details, type of appointment.
• Recordings and transcripts. If calls are recorded or transcribed, tell callers at the start, set a retention period and decide who can access them.
• Processors and hosting. Your vendor processes data on your behalf, so you need a data processing agreement. Ask where data is stored and which sub-processors are used. EU hosting makes this simpler.
• UK businesses. The AI Act is EU law. A clinic or salon operating only in the UK is outside it, but UK GDPR still applies to the same data. Telling callers they are talking to an AI is good practice anyway.

Enforcement depends on the country

Each Member State designates its own authorities and procedures. Poland is an example of how this is being rolled out: its Act on artificial intelligence systems (Dz.U. 2026 poz. 1003) has mostly applied since 11 August 2026, and the chapters on inspections, proceedings (including complaints) and penalties, handled by a new commission known as KRiBSI, apply from 28 October 2026. Other countries are at different stages, so check the authority and timetable where you operate.

Checklist before you switch it on

1. The greeting says, in the first sentence, that the caller is speaking to an AI assistant.
2. The chat widget shows the same information before the first message, in every language you offer.
3. The disclosure is part of the vendor’s standard set-up and cannot be removed by editing a script.
4. A caller can reach a person, or leave a message for one, at any point.
5. Clinical, urgent or emotional calls are handed to staff, with a tested script.
6. The AI gives no medical, dental or treatment advice and makes no promises about results.
7. Prices and availability come only from your booking system or an approved list.
8. The booking script collects only what is needed to make the appointment.
9. Callers are told if calls are recorded or transcribed, and you have set a retention period.
10. You have a data processing agreement with the vendor and know where data is hosted.
11. Your privacy notice describes the AI receptionist, what it collects and why.
12. Staff know what the assistant does, how to review its summaries and how to correct it. Keep a short note of that briefing.
13. Emotion recognition or similar features are switched off unless you have a clear reason and inform callers.
14. You review a sample of conversations every month, especially the hand-overs.

How we can help

We build chatbots and voice receptionists for clinics and salons with the AI disclosure built in, hand-over to staff, data minimisation and EU hosting. We connect them to your booking system where it has an API, or set them up to collect requests for your team to confirm. We do not give legal or medical advice.

Tell us which booking system you use and how many calls you miss on a busy day. You will get a free quote within 24 hours, including weekends and public holidays.