I recently interviewed Kathy Zant at WordCamp US 2026 about AI transparency, privacy, and security for r/Wordpress website owners.

One of her most important points was that businesses outside the EU may still need to pay attention if people in the EU use their websites or AI-powered features.

Some of the issues we discussed:

• Whether your business is acting as an AI provider or deployer
• When users may need to be told they are interacting with AI
• Transparency requirements for certain AI-generated or manipulated content
• AI chatbots connected to WordPress
• The privacy and security risks of giving an AI tool access to personally identifiable information

The practical takeaway was to create an inventory of every AI feature being used on your website and ask:

1. What does this AI tool do?
2. What information can it access?
3. Are visitors clearly told when they are interacting with AI?
4. Are we the provider, deployer, or both?
5. What safeguards prevent the tool from accessing customer information it does not need?

Here is the interview:

Watch the Kathy Zant interview on YouTube

What are WordPress site owners overlooking most right now: AI disclosure, privacy, security, or access to customer data?

This interview is for general educational purposes and should not be considered legal advice.