What AI risks do marketing agencies face?

Last verified: April 21, 2026

Answer

Marketing agencies using AI for content generation, targeting, and analytics face risks from California's AI watermarking requirements, state consumer protection laws, and potential E&O claims if AI-generated content causes client harm.

Applicable Regulations

SB-942

California AI Transparency Act

enacted

Requires providers of large-scale generative AI systems (1 million+ monthly users) to make AI-generated content detectable through free public detection tools and embedded technical watermarks in image, video, and audio output. Signed September 19, 2024.

Key Requirements

Free AI Detection Tool Offer a free, publicly accessible tool allowing anyone to assess whether image, video, or audio content was created or altered by the provider's generative AI system
Manifest Disclosure Give users the option to attach a clear, conspicuous, human-readable disclosure on AI-generated content
Latent Technical Disclosure Embed technical metadata (provider name, system version, creation date, unique identifier) in AI-generated content, detectable by the provider's tool
Third-Party Licensee Enforcement Revoke licenses within 96 hours if a licensee disables disclosure capabilities
Effective: 2026-01-01 Penalties: Civil penalties of $5,000 per violation, each day constituting a separate violation.

Industry Context

Marketing Agencies

Marketing and creative agencies use AI across content creation, image and video generation, client-facing chatbots, and audience targeting — often embedding AI output directly into client deliverables. That creates layered exposure. The FTC has made clear under Section 5 of the FTC Act that deceptive AI claims and undisclosed AI-generated endorsements are enforceable "unfair or deceptive practices," and its 2024 "Operation AI Comply" sweep signals active scrutiny of AI-washing. Generative output carries IP risk: under Thaler v. Perlmutter, a purely AI-generated work is not copyrightable, so a deliverable the agency believes it "owns" may carry no protectable rights for the client, and image models can reproduce protected material from training data. Client-facing chatbots add contractual risk — in Moffatt v. Air Canada, a tribunal held the company liable for its chatbot's misstatements. Most agency E&O and CGL policies were never priced for these exposures, and AI exclusion endorsements are now narrowing what they cover.

Typical Compliance Gaps

No documentation of AI tools used in client deliverables
No client disclosure policy for AI-assisted work
No human review process for AI-generated content
Unaware of AI exclusion endorsements in E&O policy
No FTC-compliant disclosure when AI-generated endorsements or content appear in campaigns
No verification that AI-generated deliverables are free of training-data IP and protectable for the client

Where this lands operationally

Gridex turns the compliance or coverage question into operated workflow controls: intake, review points, audit trails, and the places a person stays in the decision.

Map This Workflow With Gridex

Use this research to identify the workflow, review points, and operating controls that would matter in your organization.

Map This Workflow With Gridex

Related Questions

  • Who must comply with the California AI Transparency Act? California SB-942 applies to developers of generative AI systems that are made available to consumers in California and that generate text, images, audio, or video. Covered developers must implement provenance standards (such as C2PA) to embed machine-readable watermarks in AI-generated content, provide publicly accessible tools for detecting AI-generated content from their systems, and disclose when users interact with AI. The law applies to developers with 1 million or more monthly users.
  • What should an AI governance framework include? An AI governance framework should include an AI use policy, an inventory of where AI makes or substantially influences consequential decisions, documentation requirements, incident response procedures, and regular audit mechanisms. Note that Colorado's AI Act (SB 26-189, which repealed and reenacted SB 24-205) dropped the old impact-assessment and high-risk-classification model in favor of disclosure, consumer-notice, and human-review duties — so a framework should map to those obligations rather than the repealed assessment regime.