skip to content
toms-tech-report

cd ~/posts

6 min read

The FTC's AI 'Accuracy' Statement Is Really About Your System Prompt

The FTC wants comments by July 31 on a proposed policy statement saying that steering a model's outputs away from what users expect can be deception under Section 5, even when a state law told you to. The preemption fight got the headlines. The disclosure standard is what product teams will live with.

Tom · July 9, 2026

#ftc#ai-policy#section-5#preemption#colorado-ai-act#executive-orders

If your product’s system prompt tells the model to avoid a topic, soften an answer or weigh something other than what the user asked for, is that deception?

The Federal Trade Commission’s answer, in a proposed policy statement published in the Federal Register on July 7, is: it can be, unless you tell people clearly enough [1]. The preemption argument aimed at Colorado is the loud part. I read the whole thing, and the part that will touch the most products is the disclosure standard on its last page.

What the FTC actually proposed

The Commission voted 2-0 on July 1 to put out the “Policy Statement Concerning the Suppression of Accuracy in Artificial Intelligence Systems” for comment [2]. It’s File No. P264200, it runs five pages in the Federal Register at 91 FR 41638, and comments are due July 31 [1].

It didn’t come out of nowhere. Section 7 of Executive Order 14365, signed December 11, 2025, told the FTC chairman to issue a policy statement on how the FTC Act’s ban on deceptive practices applies to AI models, and to explain when state laws that “require alterations to the truthful outputs of AI models” are preempted [3]. The order gave the chairman 90 days [3]. By my count that deadline passed in March, so this arrived roughly four months late, and as a proposal rather than a final statement.

The core argument has three steps.

One: AI companies have promised accuracy. The statement says AI companies have represented “explicitly and implicitly” that their systems aim to produce the best output possible within their technical limits [1]. As evidence it quotes marketing copy from Anthropic, OpenAI and xAI, and cites a Forbes report on an Anthropic finding that users accept AI output without further fact-checking more than 90% of the time [1].

Two: steering away from that is likely deception. The key sentence: companies that “steer the outputs of their AI systems toward unexpected objectives, and away from the objectives set by or reasonably expected by users, are likely to deceive consumers” in violation of Section 5 [1]. The examples given are training a model to produce “ideologically motivated distortions,” changing outputs under pressure from a state law, and quietly avoiding “politically inflammatory outputs” [1].

Three: state law is no excuse. Motive doesn’t matter under Section 5, the statement says, and that includes deceiving consumers to comply with a state law [1]. It concedes the FTC Act “does not expressly preempt State law,” then argues conflict preemption: a state law that requires deception “obviously conflicts” with Section 5 [1]. Colorado is the named target. The statement says the original 2024 Colorado AI Act imposed a broad duty to avoid outputs that could lead to disparate impacts, and that the version Colorado enacted on May 14, 2026, makes AI companies liable for discriminatory outcomes caused by their customers’ use of their products [1]. The press release goes further and says the Colorado law “appears to coerce companies” into altering outputs [2].

FTC Chairman Andrew Ferguson said the agency wants to hear about “subversion of AI systems for ideological ends,” according to Bloomberg [4].

Covington’s privacy team flagged the shift in a July 8 alert: earlier FTC AI cases mostly went after claims about what a product could do, while this one asks “whether AI systems are designed to pursue undisclosed objectives” [5].

What it means if you build on a model

Start with what’s carved out, because it’s narrower than you might hope.

Hallucinations are out. Footnote 46 says errors that come from “technological and resource limitations” don’t raise Section 5 issues in themselves, though lying about how often they happen still could [1]. A user who asks for output that puts something like entertainment ahead of accuracy is fine too [1]. And footnote 40 says nothing in the statement stops you from limiting model use to prevent cybersecurity attacks, and that no reasonable consumer expects output like child sexual abuse material [1].

That’s the whole explicit list. There’s no carve-out for declining to give medical dosing advice, for brand-safety filters, for a customer-support bot told to stay on topic or for a model that won’t help with weapons. Most of those probably match what users “reasonably expect,” which is the test the statement uses [1]. But “probably” is doing a lot of work, and the statement admits as much: “the exact line of what constitutes bias may be difficult to draw” [1]. That’s an honest sentence. It’s also the sentence a small team’s lawyer will read twice.

Then the disclosure standard, which I’d call the most useful part of the document. A company can avoid deception by “clearly and conspicuously” disclosing that its system prioritizes other objectives, but [1]:

  • the disclaimer “could not be buried in terms of service”;
  • “it is doubtful a one-time disclosure subsequently hidden away in fine print would suffice”;
  • “The more the disclosure cuts against the reasonable expectations users would take away from other contexts, the more persistent and prominent it would need to be.”

That is ordinary FTC disclosure law, the same net-impression reasoning the agency used against checkout flows in the Genesis Tech complaint. Applied to a chat interface, though, it raises design questions nobody has answered. Where does a persistent disclosure go in a conversation? On every answer that was shaped? In the UI chrome? I don’t know, and the statement doesn’t say.

The wrapper question is the one I’d put to the FTC if I were filing a comment. Plenty of startups don’t train models; they ship a fine-tuned or prompted layer on top of someone else’s. If the base model provider steers outputs and you resell the result under your own marketing, whose representation is it? The statement talks about “AI companies” throughout and never separates developers from deployers [1]. Its complaint about Colorado’s revised law is that it reaches outcomes caused by customers’ use of a product [1], so the FTC is clearly thinking about the supply chain. It just doesn’t say where your piece of it sits.

A few opinions, labeled as such.

On process, credit where it’s due. The executive order asked for a policy statement, and the FTC could have just issued one. Putting it out for comment first is better than a guidance document nobody got to respond to.

On legibility, I’m less happy. The deception theory rests on what users “reasonably expect” from AI in general, built partly from the marketing of three frontier labs [1]. A company that never claimed its product gives “the best answer possible” is still measured against the “inherent value proposition” of AI, in the statement’s words [1]. That’s a baseline you didn’t write and can’t control.

And on preemption, the statement is an agency’s view of how conflict preemption should work, not a holding [1]. Colorado’s law stays on the books until a court says otherwise.

What I’m watching

  • July 31. Comments close [1]. I’ll be reading the filings from model developers and from the companies that build on top of them; whether anyone asks for a deployer safe harbor will say a lot.
  • Unfairness. The draft says the Commission takes no position yet on whether these practices are also unfair, only deceptive [1]. A final statement that adds an unfairness theory would be a different and broader document than this draft.
  • The rest of EO 14365. The same order sent Commerce to evaluate state AI laws and the FCC to consider a federal disclosure standard that would preempt state rules [3]. The FTC piece is one of several moving parts aimed at the same state laws.

Tom

you might be asking

  1. When are comments due on the FTC's AI accuracy policy statement?

    July 31, 2026 [1]. Comments go to docket FTC-2026-0859 on Regulations.gov and should be labeled "AI Policy Statement; Matter No. P264200" [1].

  2. Does the FTC consider AI hallucinations deceptive?

    Not by themselves. The proposed statement says hallucinations caused by technological and resource limits don't raise Section 5 issues on their own, though misrepresenting how often they happen could [1].

  3. Can an AI company avoid FTC liability by disclosing that it steers outputs?

    Possibly, if the disclosure is clear, conspicuous and strong enough to reset what users expect [1]. The FTC says it can't be buried in terms of service, and a one-time notice tucked into fine print probably won't be enough [1].

  4. Does the FTC statement preempt Colorado's AI Act?

    Not directly. The statement argues that a state law requiring an AI company to deceive consumers would be impliedly preempted where it conflicts with Section 5, and names Colorado's law as one that creates pressure to alter outputs [1, 2]. It is a proposed agency position, and no court has ruled on it [1].

  5. Why did the FTC issue a policy statement on AI outputs?

    Section 7 of Executive Order 14365, signed December 11, 2025, told the FTC chairman to issue one explaining when state laws requiring changes to "truthful outputs" of AI models are preempted by the FTC Act [3].

sources

  1. Policy Statement Concerning the Suppression of Accuracy in Artificial Intelligence Systems (91 FR 41638, FR Doc. 2026-13628)Federal Trade Commission, via the Federal Register · July 7, 2026 · federalregister.gov
  2. FTC Seeks Public Comment on Policy Statement Addressing AI AccuracyFederal Trade Commission · July 1, 2026 · ftc.gov
  3. Executive Order 14365, Ensuring a National Policy Framework for Artificial Intelligence (90 FR 58499)Executive Office of the President, via the Federal Register · December 11, 2025 · federalregister.gov
  4. FTC Seeks Public Comment on Policy Statement About AI AccuracyBloomberg News (via Bloomberg Law) · July 1, 2026 · news.bloombergtax.com
  5. FTC Seeks Comment on Proposed Policy Statement Addressing AI Accuracy and Output SteeringCovington & Burling, Inside Privacy · July 8, 2026 · insideprivacy.com

on sourcing

This is a proposed policy statement, open for comment until July 31, 2026; the final version could change, and a policy statement does not itself create new legal obligations or bind a court. The Commission approved it 2-0. The FTC says it takes no position yet on whether the practices it describes are also unfair, as opposed to deceptive. Its preemption reasoning has not been tested in any court, and Colorado officials' response is not reflected here. The description of Colorado's revised AI law comes from the FTC's statement rather than from the Colorado statute. The observation that the statement arrived after the executive order's 90-day deadline is the column's own date arithmetic.

ls ~/posts --related

  1. The FTC Wants to Know What Your Ad Tools Do for Scammers. Its Definition of 'Platform' Is Wide.
  2. The Copyright Office Will Renew Every DMCA Exemption but One. Medical Device Repair Has to Start Over.
  3. DHS Ordered DeepSeek Out of Civilian Agencies. The Order Also Covers Products 'Developed Using' It.