Last year the U.S. Federal Trade Commission (FTC) launched Operation AI Comply, a law enforcement sweep targeting companies that misuse or overhype AI in ways that deceive consumers. The aim is to make it clear that the same consumer protection rules still apply in the AI era. Companies cannot make false or misleading claims, engage in unfair practices, or obscure how their technologies actually work. In other words, there is no “AI exemption” because long-standing advertising, privacy, and consumer protection standards remain fully in force.
Here’s a breakdown of what’s going on, why it matters, and what legal teams should do in response.
What the FTC is Cracking Down On
In Operation AI Comply, the FTC has brought actions against several companies that made misleading claims about AI capabilities. Key issues include:
- AI tools marketed as a substitution for professional services, such as “AI lawyers” that promise to replace attorneys.
- AI-powered systems claiming to help consumers make passive income via online storefronts, but failing to deliver.
- Services enabling fake reviews or deceptive content through AI, which mislead consumers.
Some of the named companies in the FTC’s actions are DoNotPay, Ascend Ecom, Rytr, Ecommerce Empire Builders, and FBA Machine. Several of the companies promoted bold claims of earnings and success from their AI tools, but the FTC found those promises fell short in practice.
Why Legal Professionals Should Pay Attention
The implications of Operation AI Comply go well beyond marketing departments. For legal teams and practitioners, the risks are real and immediate:
- Misleading claims. Using or endorsing AI tools that overpromise can land a business in hot water with regulators. Regulators may view inflated claims as misrepresentation even if they originate with third-party vendors.
- Client expectations and duty of candor. Clients who hear that AI guarantees faster results or perfect accuracy may assume that the company stands behind those claims. If results fall short, questions of competence, misrepresentation, or failure to provide appropriate advice may arise.
- Due diligence. Lawyers evaluating AI tools must move beyond marketing decks and promotional copy. Critical questions include: What data trained the system? How was it tested? What limitations were identified? How are errors addressed? Documenting this inquiry helps establish a record of diligence.
- Transparency needed. Clients and courts need clarity about AI use. Effective practice means explaining both capabilities and limitations, setting realistic expectations, and ensuring outputs are verified before being presented as fact.
What to Do Now
Here are some practical actions legal departments should consider to respond to these kinds of regulatory pressures:
| Action | What it looks like in practice |
|---|---|
| Audit AI tool claims | Review vendor contracts, product literature, and marketing materials. Do the claims match what the tool actually does? |
| Set guardrails | Create internal policies about how AI outputs are reviewed, fact-checked, and used in client or court materials. |
| Train staff | Make sure lawyers and support staff understand AI’s limitations, such as hallucinations and weak citations, so they don’t blindly trust outputs. |
| Require vendor transparency | Ask AI vendors for evidence of reliability and accuracy. What data did they train on? How often do they update models? |
| Monitor regulatory trends | Keep an eye on FTC guidance and complaints, state bar ethics opinions, and industry reports. The legal environment around AI is changing fast. |
The Gist of It
Operation AI Comply is a strong signal from regulators that hype and marketing about AI won’t excuse inaccurate or misleading claims. For legal teams, the lesson is that any AI tools adopted or promoted must be described accurately, deployed responsibly, and supported with real results. AI tools can indeed deliver efficiencies and insights but only when paired with professional judgment, thorough verification, and attention to ethical, legal, and regulatory risk.
Download this resource to share with your team.
