Table of contents
- What changed on 2 August 2026
- Are you a provider or a deployer?
- Which marketing formats are in scope
- The deadlines and the fines
- Disclosure as a trust asset, not a scarlet letter
- A five-step readiness audit
- Conclusion
- Additional resources
Most coverage of the EU AI Act treats Article 50 as a social-media problem. It is not. The sharpest compliance exposure for software businesses reaching EU users sits in advertising creative, video production, and publishing pipelines, where AI-generated imagery, synthetic voices, and AI avatars ship at scale, often without any disclosure at all. If your team has been watching the “AI Act delay” headlines and banking on breathing room, this guide is for you. The compounding business risks of unchecked AI content were already real before August 2026; now there is a regulatory deadline attached.
What changed on 2 August 2026
Article 52 of Regulation (EU) 2024/1689 became applicable on 2 August 2026. It imposes four transparency duties across AI systems that interact with people or generate synthetic content:
- Providers of AI systems designed to interact with natural persons must ensure those systems identify themselves as AI when asked.
- Providers of generative AI systems must mark their outputs with machine-readable signals so that synthetic content can be detected.
- Deployers of emotion-recognition or biometric-categorisation systems must inform people when those systems are in use.
- Deployers who produce deepfake-style content, or who use AI to generate text on matters of public interest without human editorial control, must make that content visibly disclosed.
For marketing teams, duties two and four are the ones that matter. The provider-side machine-readable marking covers the tools you buy; the deployer-side visible disclosure covers the campaigns you ship. Non-compliance carries penalties of up to EUR 15 million or 3% of worldwide annual turnover, whichever is higher.
Are you a provider or a deployer?
Almost certainly a deployer. If your team uses Midjourney, Sora, Veo, ElevenLabs, or similar tools to produce campaign assets, you are a deployer under the AI Act. The tool vendor is the provider and carries the machine-readable marking duty. Your organisation carries the visible disclosure duty for any realistic synthetic content you publish.
That split matters, but it does not make the provider’s duty irrelevant to you. Deployers inherit risk when upstream marking is missing or has been stripped. If your CMS, CDN, or export pipeline removes the provenance metadata a provider attached, and content later surfaces without any signal of its AI origin, the compliance gap lands on you. You need to know what your tools mark, and you need to confirm that marking survives your publishing workflow.
One more thing to hold clear: these obligations apply because of the situations the content falls into, not because the AI system involved is classified as high-risk. Using a generative tool to produce a photorealistic ad does not reclassify that tool as high-risk. It simply means the Article 50 transparency rules apply to what you do with the output.
Which marketing formats are in scope
The scope test the regulation applies is not “did AI touch this?” It is closer to “could a person reasonably mistake this for authentic human-made content?” or, for text, “was this published on a matter of public interest without human editorial review?” Mapping the content types most likely to fall within Article 50 scope to that test produces a clear in/out picture.
Formats that are in scope
- Photorealistic AI imagery of real or plausible people, places, and events, including product photos generated or substantially altered by AI
- AI avatars and synthetic spokespeople used in video ads, explainers, or on-platform content
- UGC-style ads designed to read as genuine customer-generated content but produced with generative tools
- Cloned or fully synthetic voiceover, including AI voice-doubles of real people or constructed personas
- AI-generated text on matters of public interest published without a human editorial layer, such as automated news summaries or press-release-style content produced without review
The disclosure duty attaches to the visual and auditory media itself. A video ad with an AI-generated spokesperson needs a label. The script brief you wrote with an AI assistant does not.
Formats that are outside scope or lighter-touch
- Clearly stylized or artistic creative where no reasonable viewer would mistake the content for documentary reality
- Obvious illustration, animation, or CGI
- AI used as an assistive editing layer that does not substantially alter the nature of the input: captions, hashtags, grammar checks, script suggestions
- Internal content or content not directed at the public
- Creative, fictional, satirical, or artistic works, where a limited disclosure may still apply in some cases but the full deepfake-labelling duty does not
If your social team uses AI to draft caption copy or generate hashtag sets, that is outside scope. If your creative team uses Sora to produce a photorealistic lifestyle video for a paid campaign, that is squarely inside it.
The deadlines and the fines
The two-tier deadline is where most teams have gone wrong.
2 August 2026 is the live date for deployer disclosure duties and for all obligations that attach to AI systems newly placed on the market. If your agency launched a campaign using a new generative feature after that date, disclosure is required from day one.
2 December 2026 is a grace window, but it is narrow and specific. It covers only the Article 50(2) machine-readable marking duty, and only for generative AI systems that were already on the market before 2 August 2026. It does not defer chatbot disclosure, it does not defer deployer visible-disclosure duties, and it does not cover new features or systems launched after 2 August.
There is no retroactive labelling requirement. Content generated before 2 August does not need to be relabelled.
The trap many teams fell into: the AI Act’s high-risk provisions did get extended timelines, and those headlines were real. But the transparency clock under Article 50 was not moved. Teams that read “AI Act delayed” and stood down from disclosure planning made a costly mistake.
Penalties run up to EUR 15 million or 3% of worldwide annual turnover, whichever is higher. For a software business with significant global revenue, 3% of worldwide turnover is likely the operative ceiling.
Disclosure as a trust asset, not a scarlet letter
The European Commission published a free set of AI-content icons on 10 June 2026. They come in four visual treatments: black, white, and two half-transparent variants, available in both SVG and PNG, free to use without attribution. Brands may also design their own equivalent labels rather than using the Commission icons. Worth noting: using the Commission icon does not by itself establish legal compliance. The label must be visible, legible, and placed so that users encounter it.
User-testing across 1,016 respondents in France and Romania found that comprehension and trust improved when the icon was paired with a short text label such as “AI modified,” outperforming icon-only designs on both measures. If you are designing a label, pair the visual signal with a word or short phrase.
The platform precedent is already established. TikTok, Meta, and YouTube all require AI-content disclosure. TikTok reads C2PA Content Credentials to auto-detect synthetic content and has confirmed that switching on the AI-generated content setting does not reduce distribution when the video follows community guidelines. Meta enforces AI labelling on Facebook and Instagram, reading C2PA signals to auto-label photorealistic synthetic content. YouTube has its own manual creator disclosure requirements. Platform labels on compliant content already satisfy part of the deployer duty from 2 August 2026.
This is why disclosure is worth treating as a content-operations discipline rather than a legal liability. Early, well-designed disclosure is a differentiator while competitors are scrambling. As argued in more depth in why disclosure is a more reliable policy than detection, detection technology is unreliable and contested; disclosure is durable. Brands that build it into their production workflow now will not be retrofitting it under enforcement pressure in 2027.
A five-step readiness audit
Step 1: Inventory your AI content surfaces
Map every place AI-generated content ships, including output from agencies and freelancers. The question to ask for each is not “which model produced this?” but “does this content fall on a disclosure surface?” Scope by output type and destination, not by tool. Brief your agency partners now and update contracts so that upstream machine-readable marking is warranted and AI content is flagged before it reaches your production pipeline.
Step 2: Check what your tools already mark
Provenance signals are consolidating around a dual-layer model. OpenAI now pairs C2PA Content Credentials with Google DeepMind’s SynthID watermarking on images generated through ChatGPT, Codex, and the API. Platforms read C2PA signals to auto-label content where those credentials survive. The problem is that C2PA metadata can be stripped by uploads, screenshots, format conversions, and CDN processing. Confirm whether your CMS or CDN preserves signed metadata on upload. If it does not, you cannot rely on provider marking to carry your disclosure obligation.
Step 3: Decide your visible label design
Choose between the Commission’s free icons and a branded equivalent. Whatever you use, test it for legibility at the sizes and placements your formats require. Pair any icon with a short text label. “AI generated” or “AI modified” outperformed icon-only treatments in user comprehension testing. Build the label into your template library so creative teams apply it without a separate approval loop.
Step 4: Update agency contracts and briefs
Your disclosure duty does not disappear because an agency produced the content. Make clear in every brief and contract that AI-generated or AI-substantially-modified assets must be flagged as such, that upstream C2PA or equivalent marking must be preserved, and that the agency warrants compliance with Article 50 deployer obligations for assets they deliver on your behalf. Technical writing practices that keep AI-assisted content accountable apply here too: documentation of process is part of demonstrating compliance, not an afterthought.
Step 5: Document your process
The voluntary Code of Practice on Transparency of AI-Generated Content, published 10 June 2026, is the benchmark regulators will reference when assessing compliance. Signing is one route to demonstrate that your organisation meets the standard. If you do not sign, national market surveillance authorities will assess compliance by other means, and your internal documentation is what they will look at. Record what tools you use, what marking those tools apply, how your publishing pipeline preserves or handles that marking, and what visible labels you apply to which content types.
Conclusion
The EU AI Act transparency obligations that landed on 2 August 2026 are not a social-media story. For software businesses shipping AI-assisted advertising, video, and published content to EU users, the exposure is material and it is live. The scope test is clean: if the content could be mistaken for authentic human-made reality, or if it is public-interest text without editorial control, it needs a visible label. Most AI-assisted workflows clear that bar without triggering a duty. The ones that do not include UGC-style ads, AI avatars, cloned voiceover, and photorealistic campaign imagery of people and places. Treat this as a content-operations problem, build disclosure into your production templates, confirm your pipeline preserves provenance metadata, and document the process. Teams that do this now will ship compliant campaigns without slowing down. Teams that wait for enforcement pressure will pay more in remediation time and potentially in fines to reach the same place. If you want to build AI-assisted brand content that works without cutting compliance corners, technical content as a compliant alternative to AI-generated brand assets is worth reading alongside this guide.
Ready to make your AI content workflow compliant without slowing your team down? Book a consult with Weesho Lapara or get in touch directly and we will help you scope the work.
Additional resources
- Transparency obligations under Article 50 of the AI Act — European Commission FAQ
- EU icons for labelling AI-generated content — European Commission
- The AI Act’s transparency obligations: rules, scope and timeline — Stibbe
- Advancing content provenance — OpenAI
- How to label AI-generated content in the EU: Article 50 and the new EU Code of Practice — AI Ethics Assessor
References
- Transparency obligations under Article 50 of the AI Act | Shaping Europe’s digital future
- Quick Facts: Transparency rules for AI systems | Shaping Europe’s digital future
- The AI Act's Transparency Obligations: Rules, Scope and Timeline
- EU AI Act Article 50 Implementation Checklist for SaaS and AI Agents
- What Actually Comes Due on August 2, 2026: EU AI Act Article 50 Transparency and the Digital Omnibus Reset
- TikTok AI Generated Content Policy and Labeling Requirements in 2026
- EU Icons for labelling AI-generated content | Shaping Europe’s digital future
- AI Ad Disclosure Requirements in 2026: Meta, TikTok, YouTube, and the EU Compared
- How to Label AI-Generated Content in the EU: Article 50 & the New EU Code of Practice (2026)
- AI UGC Disclosure Rules in 2026: Meta and TikTok Requirements
- https://openai.com/index/advancing-content-provenance/