Yes. Since 2 August 2026, the EU AI Act requires that guests know they are talking to an AI system. They must be told from the start of the first interaction, in a clear way, unless it is already obvious. The legal duty to build that disclosure in sits with the AI provider. As the hotel, you choose the tool and put it in front of your guests, so you should check that it does this. GDPR adds its own rules on recordings, transcripts and guest data. An AI receptionist for booking questions and FAQs is not a high-risk AI system, so the rules are manageable: disclose, inform, limit data, and always offer a route to a person.
Key points
- Article 50 of the EU AI Act applies from 2 August 2026 to chatbots and voice agents that talk directly to people.
- Guests must be informed at the start of the first interaction. The “it’s obvious” exception is interpreted narrowly.
- A hotel AI receptionist is not listed as high-risk, so the heavy compliance duties for high-risk systems don’t apply.
- Fines for breaching the transparency rules can reach €15 million or 3 percent of worldwide turnover. For SMEs, regulators can take proportionality into account.
- In the Netherlands, the Autoriteit Persoonsgegevens (AP) will supervise the transparency rules.
- GDPR still applies to everything the AI records or writes down. Tell callers, keep data only as long as needed, and sign a data processing agreement with your provider.
Why hotels are looking at AI receptionists now
The phone is still one of the most valuable channels a hotel has:
- Revinate’s 2025 Hospitality Benchmark Report found the voice channel converts better than any other hotel marketing channel, at around 50 percent in North America.
- A large share of those calls goes unanswered. Hospitality.today reports that about 40 percent of incoming hotel calls are missed. StayNTouch data puts it at up to 62 percent at properties without dedicated reservations staff.
Staffing makes this worse. In the Netherlands, CBS reported 27,000 open vacancies in hospitality in the first quarter of 2026, even as vacancies fell across the wider economy. When one receptionist is checking in guests, the phone waits.
An AI receptionist closes that gap. The questions most hotel managers ask before switching one on are no longer about whether it works. They’re about what they are allowed to do, and what they must tell guests.
What the EU AI Act requires
The rule that matters for hotels is Article 50(1). According to the European Commission’s FAQ on Article 50:
- What: providers of AI systems that interact directly with people must design them so that people are informed they are dealing with AI, unless that is obvious.
- When: from the start of the first interaction.
- How: in a clear and distinguishable way, and in line with accessibility requirements.
- The exception: it only applies when a reasonably well-informed, observant person would find it obvious that they are talking to AI, and it must be interpreted restrictively.
A natural-sounding voice on your reservations line is exactly the case where it is not obvious. That makes a spoken disclosure at the start of every call the safe standard.
It is not high-risk. The AI Act’s heavy obligations apply to systems listed in Annex III, such as AI used in hiring, credit scoring or access to essential public services. An AI receptionist that answers questions about rooms, parking and breakfast times is not on that list. Transparency is the main AI Act duty that applies.
Enforcement and fines.
- National market surveillance authorities enforce the rules.
- Fines can reach €15 million or 3 percent of worldwide annual turnover. Proportionality can be taken into account for SMEs, according to the European Commission.
- In the Netherlands, the government’s draft implementation law gives the Autoriteit Persoonsgegevens and the Rijksinspectie Digitale Infrastructuur a central role. The AP is also already informing businesses and the public that a voice answering on behalf of an organisation must make clear it is AI.
Who is responsible: the provider or the hotel?
Under the AI Act, the company that builds the AI receptionist is the provider, and your hotel is the deployer. For interactive AI, the Commission places the design duty on the provider. In practice, you are the one guests call and the one whose reputation is on the line. Treat it as a shared responsibility.
| Task | AI provider | Your hotel |
|---|---|---|
| Build the AI disclosure into every conversation | Yes, legal duty under Article 50(1) | Check it happens on your line, in every language you serve |
| Explain recordings and transcripts to callers (GDPR) | Supports with scripts and settings | Yes, you are the data controller |
| Data processing agreement | Signs as processor | Must have one in place |
| Retention periods | Offers settings | Decides and documents them |
| Route to a human | Provides transfer and callback features | Decides when and to whom calls go |
| Privacy statement | Provides details on its processing | Updates your own statement |
What GDPR adds
The AI Act doesn’t replace GDPR. Every call your AI receptionist handles involves personal data: a name, a phone number, dates of stay, and sometimes a recording or transcript. Check these five points.
1. Tell callers about recordings and transcripts. According to the Autoriteit Persoonsgegevens, as explained by Kassa, a business doesn’t always need consent to record a call. For example, it can record when that is necessary to perform an agreement or based on legitimate interest. It must, however, tell the caller at the start of the call. The same logic applies to AI transcripts.
2. Sign a data processing agreement. Your AI provider processes guest data on your behalf. Article 28 GDPR requires a written processor agreement (in Dutch: verwerkersovereenkomst). Ask your provider for it before you go live.
3. Keep data only as long as you need it. Decide how long recordings, transcripts and call logs are stored, and document it. “Forever by default” is not a retention policy.
4. Be careful with sensitive details. Guests sometimes mention health information when asking about accessible rooms, allergies or medical needs. That falls under the special categories in Article 9 GDPR. Instruct your AI to note only what is needed to arrange the stay, and to pass these calls to staff where possible.
5. Keep card details off the phone line. Don’t let guests read card numbers to any automated system. Send a secure booking or payment link instead, for example over WhatsApp or SMS.
Guests also keep their normal rights. Under Article 15 GDPR, they can ask what data you hold about them, including call recordings.
Always offer a way to a person
The law requires transparency, and Dutch regulators are clear that transparency alone is not enough. The ACM and the AP are drafting joint guidance on responsible chatbot use in customer service. Their central principle is that technology must never become a barrier to good service. Accessible human contact is one of their focus areas.
For a hotel, that means:
- a clear transfer to the front desk when a guest asks for a person,
- automatic escalation for complaints and emergencies,
- a callback with full context when no one is available.
Checklist: before your AI receptionist goes live
- Test the disclosure yourself. Call your own number in every language you offer and check that the AI identifies itself in the first sentence.
- Update your privacy statement. Mention the AI receptionist, what it records, why, and for how long.
- Sign the data processing agreement with your provider.
- Set retention periods for recordings, transcripts and logs.
- Define escalation rules. Decide which calls go to a person: complaints, emergencies, medical questions, group bookings above a set size.
- Keep payments off the call. Use booking and payment links, not card numbers read out loud.
- Brief your team. Staff should know what the AI handles, how transfers arrive, and where callback requests land.
- Review a sample of calls monthly. Check accuracy, disclosure and escalations, and adjust the instructions.
A disclosure script you can use
Keep it short, friendly and at the very start of the call.
English:
“Good afternoon, welcome to Hotel De Linde. You’re speaking with Bonnie, the hotel’s AI assistant. How can I help you? If you’d prefer to speak with a colleague, just say so.”
Dutch:
“Goedemiddag, welkom bij Hotel De Linde. U spreekt met Bonnie, de AI-assistent van het hotel. Waarmee kan ik u helpen? Wilt u liever een collega spreken, zeg het gerust.”
If you record calls or keep transcripts, add one line after the greeting, for example: “This call is recorded to handle your request. You can find more in our privacy statement on our website.”
Where Bonnie fits
Bonnie was built with this disclosure in mind:
- It always introduces itself as an AI assistant, as set out in Bonnie’s ethical framework.
- Answering schedule: you decide when Bonnie picks up. It can answer straight away, or only when your team doesn’t answer first.
- Transfers with context: Bonnie passes complex requests to your front desk with the full conversation. When no one is available, it logs the details and emails a callback request.
- Links instead of card details: for rooms, Bonnie collects the enquiry and sends your booking link via WhatsApp, so guests book and pay in your own booking engine.
- Languages: it handles calls in more than 20 languages, so the disclosure reaches international guests in their own language too.
Setup takes less than 30 minutes of your time, and you can test everything during a 7-day free trial before a single guest call goes through it.
For more on how AI receptionists perform in practice, read how reliable AI phone assistants are compared with human receptionists and how an AI assistant keeps your front desk with guests.
FAQ
Is it legal to use an AI receptionist in a hotel in the EU?
Yes. The EU AI Act allows AI receptionists, but since 2 August 2026 guests must be told at the start of the conversation that they are talking to AI. An AI receptionist for bookings and guest questions is not classed as high-risk, so the transparency duty and GDPR are the main rules to follow.
What happens if my AI receptionist doesn’t say it’s an AI?
It breaches Article 50 of the AI Act. Fines can reach €15 million or 3 percent of worldwide turnover, with proportionality for smaller businesses. Beyond fines, a guest who discovers halfway through a call that they weren’t talking to a person is unlikely to trust your hotel again.
Do I need guest consent to record AI receptionist calls?
Not always. Under GDPR, you can often rely on performing an agreement or on legitimate interest, but you must tell the caller at the start of the call and explain it in your privacy statement. If you want to use recordings for other purposes, such as training, check whether you need a separate basis.
Who supervises AI receptionists in the Netherlands?
The Autoriteit Persoonsgegevens (AP) is set to supervise the AI Act’s transparency rules, working with the Rijksinspectie Digitale Infrastructuur (RDI). The AP already supervises GDPR, so it covers both the AI disclosure and the handling of guest data.
Does the AI Act apply to small hotels and B&Bs?
Yes. The transparency duty applies regardless of size. Regulators can take proportionality into account for SMEs when setting fines, but there is no exemption for small properties.
Can guests always ask to speak to a person?
The AI Act doesn’t explicitly require it, but Dutch regulators ACM and AP treat accessible human contact as a core part of responsible AI in customer service. In practice, offer a transfer to your front desk or a callback on request.