{"id":2805,"date":"2026-05-27T10:47:50","date_gmt":"2026-05-27T08:47:50","guid":{"rendered":"https:\/\/blog.eprivacy.eu\/?p=2805"},"modified":"2026-05-27T10:47:50","modified_gmt":"2026-05-27T08:47:50","slug":"ai-chatbots-tell-lies-companies-are-held-responsible-landmark-higher-regional-court-ruling-on-the-attribution-of-ai-statements","status":"publish","type":"post","link":"https:\/\/blog.eprivacy.eu\/?p=2805","title":{"rendered":"AI Chatbots tell lies \u2013 Companies are held responsible: Landmark Higher Regional Court ruling on the attribution of AI statements"},"content":{"rendered":"\n<p>OLG Hamm, Judgment of May 12, 2026 \u2013 I-4 UKl 3\/25 (not final)<br><br>The court ordered a cosmetic surgery clinic to cease and desist because its chatbot made false statements about the doctors.<br>The cosmetic clinic used an AI chatbot on its website that was intended to schedule appointments and answer questions. When asked, the bot replied that the two managing directors were \u201eFach\u00e4rzte f\u00fcr plastische und \u00e4sthetische Chirurgie&#8220; or \u201eFach\u00e4rzte f\u00fcr \u00e4sthetische Medizin&#8220; \u201c- titles that the two doctors in fact did not hold. Although the chatbot was shut down, the company did not issue a cease-and-desist declaration. The Higher Regional Court of Hamm therefore ordered the company to cease and desist.<\/p>\n\n\n\n<p>The court deemed the incorrect chatbot responses to be the&nbsp;<strong>company\u2019s own misleading commercial acts<\/strong>&nbsp;under \u00a7 5 Abs. 1, Abs. 2 Nr. 3 of the German Unfair Competition Act (UWG).<br>The court clarified two points in this regard:&nbsp;<\/p>\n\n\n\n<ul><li><strong>The chatbot is not to be regarded as a \u201cthird party\u201d<\/strong>&nbsp;within the meaning of competition law. It is part of the company\u2019s business organization\u2014its statements are attributed to the operator.<\/li><li><strong>Even correct programming does not preclude liability<\/strong>. Even if the chatbot was trained exclusively with accurate data sets, the company is liable for the false statements.<\/li><\/ul>\n\n\n\n<p>This means that companies cannot rely solely on compliance with their duty of care under competition law when using AI chatbots.<br>The ruling thus takes a clear position on the long-standing question of who is responsible for hallucinated or erroneous AI responses\u2014the company, the AI provider, or \u201cno one\u201d? According to the Higher Regional Court, at least in competition law: Whoever uses a chatbot on their site&nbsp;<strong>bears the risk of hallucinations<\/strong>&nbsp;themselves.<\/p>\n\n\n\n<p>Although the ruling was issued under competition law, the underlying principle\u2014\u201cWhoever uses the bot is responsible for its output\u201d\u2014can be applied to other areas of law:&nbsp;<\/p>\n\n\n\n<ul><li><strong>Data Protection Law (GDPR)<\/strong>: Even in the case of automatically generated personal statements (e.g., false information about customers, applicants, or employees), the controller may be responsible for their accuracy. In addition, information obligations under Art. 13\/14 GDPR and\u2014in the case of automated individual decision-making\u2014Art. 22 GDPR apply.<\/li><li><strong>AI Regulation (AI-VO\/AI Act)<\/strong>: Article 50(1) of the AI Regulation requires, effective August 2, 2026, that users be transparently informed that they are communicating with an AI.<\/li><li><strong>E-commerce \/ Consumer Law<\/strong>: Incorrect statements regarding products, prices, or delivery can, in addition to violations of information obligations that may warrant a cease-and-desist letter, also lead to contractual obligations, warranty claims, damages, or fines (UWG, PAngV).<\/li><li><strong>General Liability Law<\/strong>: Third-party personality rights, copyright, and trademark law may also be affected by chatbot outputs and give rise to claims by the affected parties.<\/li><\/ul>\n\n\n\n<p>In practice, therefore, when using chatbots and AI assistants, it is advisable to implement close monitoring of the admissibility and accuracy of the output, both technically and organizationally. This is most likely to be achieved through a combination of several measures (e.g., topic filters, guardrails, escalation to human review, ongoing monitoring, and random checks).<br>Due to the particular significance of the issues regarding the attribution of false statements made by chatbots, the Senate has granted leave to appeal to the Federal Court of Justice.<\/p>\n\n\n\n<p>(Dr. Marian Klingebiel, UNVERZAGT Law)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>OLG Hamm, Judgment of May 12, 2026 \u2013 I-4 UKl 3\/25 (not final) The court ordered a cosmetic surgery clinic to cease<\/p>\n<p class=\"link-more\"><a class=\"myButt \" href=\"https:\/\/blog.eprivacy.eu\/?p=2805\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/2805"}],"collection":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2805"}],"version-history":[{"count":1,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/2805\/revisions"}],"predecessor-version":[{"id":2806,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/2805\/revisions\/2806"}],"wp:attachment":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2805"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2805"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2805"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}