AI Ad Compliance

How to Review AI-Generated Ads Before They Ship in a Regulated Industry

What the FTC, FDA, FINRA, New York and Google require of AI-generated ads in regulated industries in 2026, with an approval checklist and an asset log template.

On this page

AI-generated advertising in a regulated industry follows the same compliance guidelines in 2026 as any other advertising, plus a short list of disclosure duties that attach to the asset itself. We found no exception for AI-drafted ads in the FTC and FDA materials we read, and FINRA says outright that firms answer for AI-generated communications. The changes sit at the edges, where New York began requiring disclosure of synthetic performers, Google started permitting AI labels inside creatives in July, and the FTC set aside one of its own 2024 AI orders. What follows turns those sources into a review workflow, with an approval checklist and an asset log you can copy. Have counsel confirm how each rule applies to your category.

What the FTC expects you to disclose and prove

FTC disclosure rules for AI-generated advertising in regulated industries are the agency's general advertising rules; we found no FTC rule that requires a label on an ad because AI produced it. The duties that bite are substantiation and qualifying disclosures. The FTC puts the first one plainly in its advertising FAQs: "The law requires that advertisers have proof before the ad runs." Health and safety claims usually need what the agency calls competent and reliable scientific evidence, and proof is required for implied claims as well as express ones.

Implied claims are where generated copy drifts. In a hypothetical supplement account, a request for 40 headline variants can return "supports joint comfort" as "ends joint pain", a new claim that needs its own evidence. Where a qualifier keeps an ad from misleading, the same FAQ tells advertisers to "use clear and unambiguous language, place any qualifying information close to the claim being qualified, and avoid using small type or any distracting elements that could undercut the disclosure." Automated resizing and cropping can break that placement without anyone editing a word. Agencies carry their own exposure too: "Advertising agencies have a duty to make an independent check on the information used to substantiate ad claims."

Where the FTC stands on deceptive AI claims after 2025

FTC guidance on deceptive claims in AI advertising changed tone during 2025, and teams using generative AI should read both ends of the record. On September 25, 2024 the FTC announced Operation AI Comply, five enforcement actions, with then-Chair Lina M. Khan saying: "The FTC's enforcement actions make clear that there is no AI exemption from the laws on the books." One complaint alleged that a company claimed in social media ads that its clients could make $10,000 monthly and had "no evidence to back up those claims."

Another of the five targeted Rytr, an AI writing service, over generated reviews. On December 22, 2025 the FTC reopened and set aside that order, saying the complaint "failed to satisfy the legal requirements of the FTC Act". The same release adds: "The FTC will continue to hold accountable actors that use AI to violate the law or deceive consumers about the capabilities of their generative AI." The 2025 release objects to condemning a technology because it could be misused, and both releases treat deceiving consumers as the violation, so review effort belongs on a register of approved claims.

Does the FDA have guidance on AI-generated drug ads?

FDA guidance on AI-generated content in prescription drug advertising, on social media or elsewhere, is something we searched for and could not locate: we found no FDA guidance document that addresses AI-generated promotional content specifically. The existing rules apply in full. Announcing a crackdown on drug advertising on September 9, 2025, the FDA restated them: "Current law requires that advertisements present a fair balance between a product's risks and benefits; avoid exaggerating benefits; not create a misleading overall impression; properly disclose financial relationships; and include information regarding major side effects and contraindications."

The same announcement said the agency was sending thousands of letters warning companies to remove misleading ads and approximately 100 cease-and-desist letters, named undisclosed paid influencer promotion on social channels as a concern, and added: "The FDA is already implementing AI and other tech-enabled tools to proactively surveil and review drug ads." For a team generating variants, the safe design keeps risk language out of the model entirely. Important safety information sits in locked blocks that a generator may position and may never rewrite or shorten.

Financial services has the plainest statement of the principle. In an advertising FAQ posted May 10, 2024, FINRA answers whether a firm is responsible for communications created with AI: "Firms are responsible for their communications, regardless of whether they are generated by a human or AI technology." Supervision and recordkeeping requirements apply to them as well.

What Google Ads policy says about AI-made assets

Google Ads policy on AI-generated content applies the same prohibited content rules to generative AI ads as to every other ad. Google says so directly: "All advertising content is subject to Ads Policy, regardless of how it's created, and generative AI content is held to the same set of content standards, reviews, and enforcement for any policy violations, including inappropriate content and misrepresentation." Its own generators limit some outputs, among them children and prominent likeness, and branded items and logos not provided as input. Google also says its AI is designed to not automatically suggest generated images for sensitive verticals such as political or pharmaceutical ads. Review stays with the advertiser: generated assets "aren't guaranteed to be approved by Ads Policy", and Google tells advertisers to check them for accuracy and legality before publishing.

Labeling is the newer part. A policy update Google posted on July 9, 2026 says: "AI regulations in the European Union, India, and New York require that ads with certain AI-generated or edited assets include disclosures and/or labels that inform consumers that the ads were made with AI." Since July, Google permits text or visual AI labels inside image and video creatives, and the update said an AI label setting would launch gradually that month across its ad products. It warns that using the setting "doesn't guarantee compliance with specific regulations."

New York's rule is the one we read in full. New York State Senate bill S8420A, signed December 11, 2025 and effective 180 days after becoming law (June 9, 2026 by our count), requires a business that produces or creates an ad to conspicuously disclose a synthetic performer in it, where it has actual knowledge of one. The bill defines a synthetic performer as a digitally created asset, made or modified with generative AI or a software algorithm, that is intended to give the impression of a human performer not recognizable as any identifiable natural performer. The civil penalty is $1,000 for a first violation and $5,000 for any subsequent violation. Exemptions include audio ads and AI used solely to translate a human performer's language.

Where the guardrails go in the creative workflow

Brand safety guardrails in a generative AI advertising creative workflow belong at four points: the brief, the prompt, the platform settings and the approval gate. The first three reduce how much bad output gets made, and the gate is the only one that produces evidence of review. Platforms add labels of their own: Meta, in a post updated June 1, 2026, says it labels ads created or significantly edited with its generative AI tools and will begin automatically detecting ads made with third-party AI tools. The checklist below is our proposed implementation, drawn from the sources above; rename the sign-off roles to fit your org chart.

Check before an asset shipsEvidence the reviewer needsSigns off
Every express and implied claim maps to an approved claimClaim ID and substantiation fileLegal or regulatory
Qualifiers and risk text are present, unedited and next to the claimLocked copy block, rendered preview per placementLegal or regulatory
No AI-made person appears, or the disclosure is on the assetGeneration record, label statusCompliance
No real person's likeness, third-party logo or competitor namePrompt and input filesBrand
Voice rules pass: banned terms, required phrases, toneRule list and scan resultBrand
Platform label and exclusion settings match the planExport of campaign settingsMedia lead

Whoever wrote the prompt should have someone else approve its output, and a held asset goes back with the failed row named so the fix is specific.

What changes at enterprise volume

A brand safety workflow for enterprise AI ad generation depends on a log, because no reviewer can recall which of several hundred variants carried which claim. The sources above all turn on records: FINRA ties AI communications to recordkeeping, the FTC expects proof to exist before the ad runs, and New York's rule turns on actual knowledge of a synthetic performer. One row per shipped asset covers it.

FieldExample entry (hypothetical)
Asset ID and campaignIMG-0412, spring refinance, Performance Max
Tool, model and dateImage generator in Google Ads, 2026-10-02
Prompt and input filesLink to stored prompt text and source photo
Claims made, with claim IDs"No application fee" (C-07)
Disclosures and labelsAPR qualifier block D-03; AI label on
Synthetic personNo
Approver and dateCompliance lead, 2026-10-03
StatusLive; pulled assets keep their row

A hypothetical run shows the gate at work. Assume a lender generates 60 variants against a register of 9 approved claims. Review finds 49 that map cleanly, 8 that introduce a claim outside the register and 3 that show an AI-made person with no disclosure. Eleven assets are held, and the 8 new claims reach legal as requests before any of them is live. The log pays off in measurement as well: tagged variants can be compared on ROAS and tested for incrementality, and review hours are an acquisition cost that belongs in CAC.

Keeping brand voice consistent from brief to headline

Brand voice best practices for AI headlines start in the creative brief and the prompt, because consistency comes from rules a model can follow literally. Google describes text guidelines for Performance Max and Search campaigns with AI Max as "an experimental beta" that accepts up to 25 term exclusions and up to 40 messaging restrictions per campaign, and it is blunt about phrasing: "The model can only take hard requirements." Its examples of restrictions that work include "Don't imply our products are discounted." Its example of one that fails is "My ads should bring joy".

Write the brief the same way, whatever tool you generate with. Four parts carry most of the weight: a banned-terms list; required phrases tied to a trigger (Google's own example is that an asset promoting a discount must include "T&C apply"); tone stated in two or three plain adjectives; and the approved claims with their IDs, with an instruction to use only those. Two cautions from the same page are worth carrying over. Term exclusions are language-specific, so an English ban will not stop the equivalent word in another language, and Google warns that inefficient or counterintuitive guidelines "may cause removal of a large number of good text customization assets, and lead to drop in campaign performance."

Review capacity ends up setting the ceiling on creative volume, which is why it belongs in any plan for scaling paid ads without killing ROAS. Our paid media team and the ROAS calculator are further resources for sizing that trade.

Sources

  • FTC, Advertising FAQ's: A Guide for Small Business (April 2001, edited January 2025)
  • FTC, FTC Announces Crackdown on Deceptive AI Claims and Schemes (September 25, 2024)
  • FTC, FTC Reopens and Sets Aside Rytr Final Order (December 22, 2025)
  • FDA, FDA Launches Crackdown on Deceptive Drug Advertising (September 9, 2025)
  • FINRA, Advertising Regulation FAQs, D.8 (posted May 10, 2024)
  • Google, About generated images in Google Ads
  • Google, Updates to AI labeling requirements (July 2026)
  • Google, Use text guidelines with Performance Max and Search campaigns (beta)
  • New York State Senate, Senate Bill S8420A (signed December 11, 2025, chapter 617)
  • Meta, Expanding GenAI Transparency for Meta's Ads Products (updated June 1, 2026)

Frequently asked questions

Do AI-generated ads need a disclosure label in the United States?
We found no FTC rule that requires a label only because AI produced an ad. New York has one for a specific case: Senate Bill S8420A, signed December 11, 2025, requires a conspicuous disclosure when an ad contains a synthetic performer the advertiser has actual knowledge of, with a civil penalty of $1,000 for a first violation and $5,000 for any subsequent violation. Google's July 2026 policy update also names the European Union and India as places with AI labeling rules.
Who is responsible when an AI tool writes a misleading ad claim?
The advertiser, and sometimes its agency. The FTC's advertising FAQs say the law requires advertisers to have proof before the ad runs, and that advertising agencies have a duty to make an independent check on the information used to substantiate claims. FINRA says firms are responsible for their communications regardless of whether a human or AI technology generated them. Google holds generative AI content to the same Ads Policy standards as any other ad.
Has the FDA issued guidance on AI-generated prescription drug ads?
We found no FDA guidance document that addresses AI-generated promotional content specifically. The existing requirements apply. In its September 9, 2025 announcement the FDA said current law requires ads to present a fair balance between a product's risks and benefits and to avoid creating a misleading overall impression. The agency also said it is already implementing AI and other tech-enabled tools to surveil and review drug ads.
What should an asset log for AI-generated ads record?
One row per shipped asset: the asset ID and campaign, the tool, model and date, the prompt and input files, every claim with its approved claim ID, the disclosures and AI label status, whether a synthetic person appears, the approver and date, and the current status. Keep the row when an asset is pulled, so the record still shows what ran and who approved it.
How do you keep AI-written ad copy in brand voice?
Turn the voice into rules a model can follow literally: a banned-terms list, required phrases tied to a trigger, tone in two or three plain adjectives and a list of approved claims. Google's text guidelines feature, which Google calls an experimental beta, works the same way. It accepts up to 25 term exclusions and up to 40 messaging restrictions per campaign for Performance Max and Search campaigns with AI Max.

Free tools for this topic

CALCULATORROAS & Break-Even CalculatorKnow the ROAS you actually need before you scale.FREE TOOLCompetitor Ad ExplorerSee every ad your competitor is running right now.CALCULATORMedia Mix PlannerSplit any budget across channels with live projections.

Keep reading

GuidesHow to Scale Paid Ads Without Killing ROASRead →GlossaryWhat Is Incrementality? The Question Attribution Can't AnswerRead →GlossaryWhat Is ROAS? Formula, Benchmarks & Break-Even MathRead →
CATALIST NEWSLETTER

Monthly dose of growth marketing.

Get marketing tips, narratives, guides, and playbooks delivered to your inbox.

Protected by reCAPTCHA — Google's Privacy Policy and Terms of Service apply.