Resource guide

EU AI Act Article 50: Transparency Obligations and Rules

A complete guide to Article 50 disclosure rules, content marking, deepfake labels, timelines, and penalties.

Last updated September 30, 2026 1171-word guide Editor Ban the Bots

Short answer: Article 50 of the European Union Artificial Intelligence Act (Regulation (EU) 2024/1689) establishes transparency obligations for providers and deployers of artificial intelligence (AI) systems. It requires entities to inform individuals when they interact with AI, mark synthetic media in a machine-readable format, disclose emotion recognition or biometric categorisation systems, and label deepfakes or public-interest text generated by AI. The core duties apply from 2 August 2026, with an extended deadline of 2 December 2026 for marking systems placed on the market before that date.

Article 50 functions as a disclosure regime rather than a ban on artificial intelligence tools. It sits within the broader framework of AI regulation in Europe, alongside related frameworks discussed in our guide to the EU AI Act vs GDPR. The rules mandate visible notices and technical provenance markers to ensure consumers, end users, and downstream systems recognize synthetic material.

Scope of the Transparency Obligations

Article 50 of the European Union Artificial Intelligence Act divides legal responsibility between providers who develop artificial intelligence systems and deployers who operate them in public or professional contexts. The official European Commission FAQ on Article 50 outlines how these roles differ across four main operational areas.

Providers face obligations under paragraphs 1 and 2, which govern system design, user interaction notices, and synthetic media marking. Deployers face obligations under paragraphs 3 and 4, which govern the live deployment of biometric detection systems, deepfake media, and public-interest publishing. Readers can trace how these rules fit into the larger legislative structure in our overview of the EU AI Act.

Provision Regulated Entity Core Requirement Key Carve-Outs
Article 50(1) Providers Inform humans they are interacting with AI Obvious interaction contexts, machine-to-machine systems
Article 50(2) Providers Mark synthetic audio, image, video, or text in machine-readable formats Assistive editing, code, short character strings, closed industrial loops
Article 50(3) Deployers Inform individuals of emotion recognition or biometric categorisation operation None listed in the Commission FAQ
Article 50(4) Deployers Label deepfakes and artificial intelligence text published on public-interest matters Human editorial review, creative or satirical works

Direct Human Interaction Under Article 50(1)

Article 50(1) requires providers to build artificial intelligence systems so natural persons know they are interacting with software. Customer service chatbots, conversational agents, automated phone assistants, and interactive intake tools are the kind of systems this paragraph covers.

The requirement falls away when the automated nature of the communication is obvious to a reasonable person from the circumstances and context. Systems that run entirely in the background, such as machine-to-machine data exchanges, remain outside this disclosure requirement because no direct human communication occurs.

Synthetic Media Marking Under Article 50(2)

Article 50(2) requires providers of systems generating or manipulating synthetic audio, image, video, or text to ensure their outputs are marked in a machine-readable format and detectable as artificially created or altered. The aim is for such content to be detectable as artificially generated.

The European Commission FAQ lists specific exceptions to the marking duty in Article 50(2):

Biometric and Emotion Recognition Notices Under Article 50(3)

Article 50(3) places transparency duties on deployers of emotion recognition systems and biometric categorisation systems. When an organisation runs software designed to infer human emotions, or to categorise people, from biometric data, it must inform the individuals exposed to the technology that the system is operating.

The legal text does not require deployers to explain the underlying computational purpose or technical logic of the system under Article 50(3). The duty focuses solely on notifying the individual of the system's presence and real-time operation.

These deployer obligations operate in parallel with individual rights under existing data protection laws. Readers can examine statutory comparisons in our explainer covering the relationship between the EU AI Act and GDPR.

Deepfake and Editorial Disclosures Under Article 50(4)

Article 50(4) establishes transparency requirements for deployers distributing synthetic media that resembles existing people, places, objects, entities, or events. If an image, video, or audio recording would falsely appear authentic or truthful to a reasonable viewer, the deployer must disclose that the material has been artificially generated or manipulated.

The same paragraph sets rules for text published to inform the public on matters of public interest. When an organisation publishes artificial intelligence text covering news, politics, public health, or societal topics, it must clearly label the material as synthetic. The European Commission FAQ identifies two major exceptions to these publication duties:

State and federal rules regarding synthetic likenesses outside Europe follow different legal models, as detailed in our guide to US deepfake laws. In the European Union, the Article 50(4) mandate focuses on content transparency and public awareness rather than civil tort actions or criminal prohibitions.

Enforcement Structure and Penalty Ceilings

Enforcement of Article 50 transparency duties relies primarily on national market surveillance authorities. These domestic regulators monitor compliance within their borders.

The AI Office has a limited role, for systems built on general-purpose AI models. For European Union institutions, agencies, and bodies, the European Data Protection Supervisor (EDPS) acts as the competent supervisory authority.

The European Commission FAQ states that administrative fines for breaching transparency obligations can reach up to 15 million euros or 3% of total worldwide annual turnover for the preceding financial year. Regulatory authorities must consider proportionality when enforcing these rules against small and medium-sized enterprises (SMEs).

Codes of Practice and Implementation Timelines

Regulators are developing voluntary tools to help organisations meet the requirements of the text before enforcement begins. The Commission FAQ points to a voluntary Code of Practice on Transparency of AI-generated content, which focuses on technical marking methods and deepfake labelling protocols. Signing this code is voluntary.

The Commission has also published guidelines on transparency covering Article 50(1) to (3). These run separately from the General-Purpose AI Code of Practice, which addresses other articles of the regulation.

The core transparency obligations under Article 50 apply starting 2 August 2026. A transitional grace period applies to systems placed on the market before 2 August 2026: providers of those legacy systems must comply with the marking and detection duties of Article 50(2) beginning 2 December 2026.

While the European Union Digital Omnibus initiative has pushed certain Annex III high-risk compliance deadlines to 2 December 2027 according to legal and press reports, reports indicate that the Article 50 timeline remains set for 2026. Readers should consult the official register on EUR-Lex to verify ongoing timeline adjustments. Further statutory tracking is available in our index of AI legislation.

Facts above are drawn from the European Commission FAQ on Article 50 transparency obligations and Regulation (EU) 2024/1689. Organisations evaluating compliance should consult qualified legal counsel.

Frequently asked questions

▸ What is Article 50 of the EU AI Act?
Article 50 is a transparency and disclosure regime within Regulation (EU) 2024/1689. It requires providers and deployers to notify individuals when they are interacting with AI, apply machine-readable markers to synthetic media, disclose biometric or emotion recognition systems, and label deepfakes or synthetic public-interest text.
▸ When does Article 50 apply?
The core transparency obligations apply starting 2 August 2026. Systems placed on the market before 2 August 2026 have an extended grace period until 2 December 2026 to implement the technical marking and detection duties in Article 50(2).
▸ Does Article 50 ban deepfakes?
No. Article 50 is a disclosure and labelling regime rather than a ban. Deployers may create and share synthetic content, but they must clearly disclose that the media is artificially generated or manipulated when it resembles real persons, places, or events.
▸ Who has to label AI-generated content under the EU AI Act?
Providers must ensure synthetic media is marked in a machine-readable format under Article 50(2). Deployers must label deepfakes and artificial intelligence text published on public-interest topics under Article 50(4), unless the text has undergone human editorial review or represents an artistic or satirical work.
▸ What are the fines for breaking Article 50?
According to the European Commission FAQ, penalties for non-compliance with transparency duties can reach up to 15 million euros or 3% of total worldwide annual turnover for the preceding financial year, with proportional enforcement applied to small and medium-sized enterprises.
▸ Is the Code of Practice on AI-generated content mandatory?
No. Signing the European Commission Code of Practice on Transparency of AI-generated content is voluntary. It serves as a practical compliance tool to help organisations adopt standardized technical marking and labelling mechanisms.

Latest related briefings