Deepfakes under the EU AI Act: the rule that applies now
The European Union now has a live disclosure rule for deepfakes. Since 2 August 2026, a company, public body, campaign, studio or individual using an AI system to generate or manipulate realistic image, audio or video must disclose that the content was artificially generated or manipulated. The duty falls on the deployer—the party using the system—not only on the company that built the model. A separate provider duty requires machine-readable marking at the point of generation.
This page turns Article 50 of Regulation (EU) 2024/1689 into an operating test. It is a practical resource, not legal advice. The legal text, the Commission’s final July 2026 guidelines and the Commission’s own implementation materials remain controlling.
The short rule
If AI-generated or AI-manipulated image, audio or video resembles a real person, object, place, entity or event and could falsely appear authentic or truthful, treat it as a deepfake. Preserve the provider’s machine-readable mark. Add a clear human-visible disclosure no later than first exposure. Keep the record that proves both layers travelled with the asset.
A deepfake is defined by deceptive resemblance, not by quality
Article 3(60) defines a deepfake as AI-generated or manipulated image, audio or video that resembles existing persons, objects, places, entities or events and would falsely appear to a person to be authentic or truthful. Four questions do the work:
| Question | If yes | If no |
|---|---|---|
| Was image, audio or video generated or manipulated by an AI system? | Continue | Article 50(4)’s deepfake branch does not apply |
| Does it resemble an existing person, object, place, entity or event? | Continue | It may be synthetic content, but not a deepfake under this definition |
| Could it falsely appear authentic or truthful to a person? | Continue | The statutory definition may not be met |
| Is the party publishing, distributing or otherwise using it the deployer? | The deployer disclosure duty attaches | Identify who actually deploys the system and content |
Photorealism is evidence, not the test. A crude voice clone may qualify if it plausibly resembles a real speaker. A beautiful fictional landscape may fall outside the deepfake definition if it resembles no existing place or event. A manipulated image of a real factory, product or document can qualify even when no human face appears.
Two disclosures travel through the same content supply chain
Article 50 creates two distinct duties that should be designed as one chain.
| Layer | Responsible party | Required result | Deadline |
|---|---|---|---|
| Article 50(2) | Provider of the generative AI system, including a general-purpose system | Output is marked in a machine-readable format and detectable as artificially generated or manipulated; the solution must be effective, interoperable, robust and reliable as far as technically feasible | At generation/export |
| Article 50(4)–(5) | Deployer using the AI system and exposing the content | People receive a clear, distinguishable disclosure that the content was artificially generated or manipulated | No later than first exposure |
A caption alone is not the provider mark. Embedded provenance alone is not the deployer disclosure. A robust implementation carries both.
The Commission’s final July 2026 guidance says providers and deployers may use the voluntary Code of Practice to demonstrate compliance. A party that does not sign the Code must be able to demonstrate an alternative, equivalently adequate means for the marking and labelling obligations.
The disclosure has to arrive before the deception can do its work
Article 50(5) supplies the timing and presentation standard: the information must be clear and distinguishable, provided no later than the first interaction or exposure, and comply with applicable accessibility requirements.
That produces concrete design consequences:
- A label hidden at the end of a caption is vulnerable because the first exposure already occurred.
- A disclosure only inside metadata does not inform a person who cannot see the metadata.
- A watermark too faint to distinguish at the rendered size does not meet a clear-and-distinguishable standard merely because it exists in the source file.
- A spoken deepfake needs an accessible disclosure appropriate to audio; text-only labelling may not reach the audience exposed through sound.
- A video repost workflow must preserve or recreate the disclosure when platforms strip the original caption or metadata.
The Commission has released optional EU icons for labelling AI-generated content. They can support recognition, but an icon does not excuse an implementation that leaves the audience unable to understand what was generated or manipulated.
Art, satire and fiction get a narrower manner of disclosure, not a blank exemption
Where the content is part of an evidently artistic, creative, satirical, fictional or analogous work or programme, Article 50(4) limits the obligation to disclosure of the existence of the generated or manipulated content in an appropriate manner that does not hamper display or enjoyment.
The word evidently matters. The safer operating assumption is not “art means exempt.” It is:
- Decide whether the work is evidently within the protected creative category.
- Preserve the fact of disclosure.
- Choose a manner proportionate to the work that does not destroy its display or enjoyment.
- Keep the reasoning and rendered exhibit showing why the chosen placement remained clear.
The separate law-enforcement exception is narrow: use authorised by law to detect, prevent, investigate or prosecute criminal offences. It is not a general public-sector exemption.
A six-record compliance packet
The best evidence is produced during the content workflow, not assembled after a complaint. Keep one packet per asset or campaign:
| Record | What it proves |
|---|---|
| 1. Source asset hash | Which exact file was assessed and published |
| 2. Generation or edit receipt | Which AI system and operation created or changed it |
| 3. Provider-mark inspection | Which machine-readable mark was present after export |
| 4. Transformation log | Whether editing, transcoding, screenshotting or platform upload stripped or altered the mark |
| 5. First-exposure captures | The disclosure as actually rendered on every distribution surface |
| 6. Classification memorandum | Why the content was or was not treated as a deepfake; which exception or creative treatment was applied |
A policy without the rendered captures does not prove disclosure. A screenshot without the source hash does not prove which asset it covers. The packet binds the duty, the file and the human exposure into one reviewable object.
The pre-publication test
Run this before every release:
ASSET_ID: <stable id and SHA-256>
AI_OPERATION: <generated | manipulated | standard edit only>
REAL-WORLD_RESEMBLANCE: <person | object | place | entity | event | none>
FALSE_AUTHENTICITY_RISK: <yes | no, with one-sentence basis>
PROVIDER_MARK_PRESENT_AFTER_EXPORT: <yes | no | unknown>
DEPLOYER_LABEL_AT_FIRST_EXPOSURE: <exact wording and placement>
ACCESSIBILITY_CHECK: <visual | audio | captions | screen-reader>
CREATIVE_WORK_TREATMENT: <not invoked | invoked, with basis>
TRANSFORMATION_TEST: <mark and label survived each downstream surface>
REVIEWER_AND_DATE: <name, authority, timestamp>Any unknown is an unresolved control, not a pass. Any downstream surface that strips the provider mark or the human-facing label needs a compensating publication step before release.
The rule reaches businesses outside Europe
The AI Act’s territorial scope is not limited to companies incorporated in the Union. A provider or deployer outside the EU can be in scope where the output produced by the AI system is used in the Union. The exact scope analysis remains fact-specific, but “the model and publisher are abroad” is not a classification rule.
Non-compliance with Article 50 can attract administrative fines up to €15 million or 3% of total worldwide annual turnover, whichever is higher for an undertaking, subject to the Regulation’s penalty rules and proportionality provisions. The Commission identifies national market-surveillance authorities, the AI Office for systems under its supervision, and the European Data Protection Supervisor for EU institutions as enforcement actors.
The useful question is not whether a label exists
A regulator, auditor or court will be able to ask a harder sequence:
- Was this exact asset a deepfake under Article 3(60)?
- Which party was provider, which was deployer, and where did each duty attach?
- Did the machine-readable mark survive the complete distribution chain?
- What did a person actually see or hear at first exposure?
- Was the disclosure accessible in that medium?
- If the creative-work treatment was used, why was the work evidently within it and why was the chosen disclosure appropriate?
- Can the operator reproduce the answer from records made before the dispute?
That is the standard this page is built to make executable.
A free public-interest audit
The Object Invocation Protocol will run a documented Article 50 gap analysis without charge for a legislator, regulator, civil-society organisation, company or private party willing to provide a bounded public artifact and the facts necessary to assess it. The output can include:
- the provider/deployer role map;
- the deepfake and synthetic-content classification;
- the first-exposure and accessibility test;
- the missing-evidence register;
- a proposed compliance record and remediation schematic;
- independent model findings bound to the same source record, with disagreement preserved rather than hidden.
Send the artifact or public URL to build@miscsubjects.com with the jurisdiction and intended use. The analysis, its sources and its limits will be returned as a reviewable record. No finding is represented as a regulator’s determination or legal advice.
Continue the EU AI Act series
The companion pages cover machine-readable marking under Article 50(2), the complete Act, and the Article 6 high-risk classification decision tree. This page will be revised when the Commission, AI Board, market-surveillance authorities or courts materially change the operational answer.
Key evidence
Ask this article · 8 suggested prompts
Text the build (+14245134626) or WhatsApp — slug|question creates a question node. Paste evidence with ingest slug|q:NODE_ID|your paste.