From 2 August 2026, EU AI Act enforcement moves into an active phase and Article 50 transparency duties start to matter in day-to-day product work. Headlines often focus on “AI content labelling” or headline fine amounts.
📑Table of Contents
- From 2 August 2026, how AI content appears becomes a compliance surface
- Four Article 50 scenarios — what is actually required
- Provider vs deployer — duties follow the role, not the feature name
- Deadlines and fine ranges — 2 August vs 2 December
- Decision table and checklist for builders
- FAQ
- Summary — decisions for today and next actions
Why the provider / deployer split comes first
For engineering and operations teams, the first design decision is not a single on/off disclosure toggle. Duties split by actor (provider vs deployer) and deadline, covering:
- interactive AI notices
- machine-readable marks on synthetic content
- deepfake / certain public-interest text labels
If you ship EU-facing SaaS, APIs, chatbots, agents, marketing/support generation, or customer-facing content delivery, start by mapping each product to:
- provider
- deployer
- or both
Scope and sources used here
This article synthesizes European Commission press materials, Guidelines, and the Code of Practice with independent analyses from Addleshaw Goddard, Reed Smith, Stibbe, and JETRO.
It then converts those sources into an operational checklist. It is not legal advice.
What this article covers
From 2 August 2026, how AI content appears becomes a compliance surface
Design starting point
The practical starting point is not “did we use AI?” but which outputs are published, by whom, and when. The European Commission’s 31 July 2026 press release states that from 2 August the AI Office and national authorities begin enforcing the AI Act.
Source: European Commission Digital Strategy
Transparency rules described as entering force include:
- interactive AI disclosure
- deepfake labelling
- machine-readable marks on AI-generated or altered content
Discovery signals vs primary facts
News clips about “identification duties” or converted fine figures are useful discovery signals. Treat bookmark counts and popularity metrics the same way: attention indicators, not proof of a legal duty.
Prefer official documents and independent legal analyses for facts, then translate them into role/output/timeline tables instead of panic-driven one-shot programs.
Four Article 50 scenarios — what is actually required
Four transparency scenarios
Addleshaw Goddard’s 31 July 2026 briefing maps Article 50 into four transparency scenarios.
Source: Addleshaw Goddard
Provider-centric scenarios
- Direct interaction with natural persons — disclose that the counterpart is AI (chatbots, agents, virtual avatars)
- Generation or manipulation of synthetic content — attach machine-readable marks and support detectability for audio, image, video, and text (provider-centric)
Deployer-centric scenarios
- Emotion recognition / biometric categorisation — inform exposed users (deployer-centric)
- Deepfakes and public-interest text without meaningful human review/editorial responsibility — human-readable labels (deployer-centric)
How Commission Guidelines split the same duties
Commission Guidelines describe the same split:
- provider duties for AI-interaction notices and machine-readable marks
- deployer duties for deepfake and unreviewed public-interest text disclosure
Source: EC Guidelines

Critical nuance: “we used AI” is not enough
Using generative AI does not automatically trigger every disclosure duty. Teams must separate at least the following:
- deepfake status
- public-interest text scope
- routine edits (crop/color correction/background swap)
- human-review exceptions
Addleshaw’s examples suggest AI edits that make a product look better than reality may require deepfake-style disclosure, while crop/color/background-only edits may fall outside.
Boundaries are case-by-case—fix a joint design/legal allowed-edit list before launch pressure arrives.
Provider vs deployer — duties follow the role, not the feature name
Core duties by role
- Provider: machine-readable marking/detection for synthetic outputs and AI-interaction notices when you supply the system. Code of Practice (CoP) Section 1 aligns with Art.50(2)-style measures.
- Deployer: deepfake disclosure, AI-origin labels for unreviewed public-interest text, and emotion/biometric exposure notices. CoP Section 2 aligns with Art.50(4)/(5).
Code of Practice vs binding Article 50 duties
The Commission’s Code of Practice page stresses the following:
- following the code is voluntary
- Article 50 legal duties still apply
- roughly 190 signatories by end-July 2026
Source: EC Code of Practice
Press materials also cite 180+. Treat headcount as a dated indicator, not proof of compliance.
Signature vs compliance evidence
Reed Smith’s notes for operators:
- The Commission (8 July) and AI Board (9 July) assessed the CoP as adequate for implementing Art.50(2)/(4)/(5)
- Signature is a predictable compliance path rather than final proof
- Guidelines expect equivalent alternative evidence if you do not sign
Source: Reed Smith
Decompose each product
Decompose each product:
- Do you host the model, wrap an API as an application provider, or act only as an internal deployer?
- Do Guidelines-style OSS splits treat systems and components differently?
- Do customer-facing generation and conversational UI make you both provider and deployer?
JETRO’s Japanese business brief similarly separates the following:
- provider machine-readable marks (metadata/watermarks; removal/alteration restricted in the summary)
- deployer labels for deepfakes and unreviewed public-interest text
Source: JETRO
Deadlines and fine ranges — 2 August vs 2 December
Anchor date: 2 August 2026
2 August 2026 is the enforcement and transparency application anchor for user-visible duties such as interactive notices and deepfake / certain text labels.
Split timeline: 2 August vs 2 December
Do not design as if every technical control lands on one day.
Reed Smith and Stibbe independently describe this split:
- Art.50(4)-style duties on 2 August 2026
- Art.50(2) machine-readable marking for pre-existing generative systems extended to 2 December 2026
Sources:
Reporting on icons and carve-outs
FashionNetwork Japan (AFP) likewise mentions:
- a 2 December transition for existing systems
- official icon templates (“AI”, “AI-generated”, “AI-modified”)
- carve-outs for art/satire/fiction and supportive editing
Source: FashionNetwork Japan
Fine ranges without scare design
On penalties, Stibbe cites an upper frame of up to EUR 15 million or 3% of worldwide annual turnover, whichever is higher.
- Converted “multi-billion yen” headlines are FX- and time-dependent reporting devices
- They are not a single fixed statutory number to hard-code into risk models
- Keep maximum frames separate from authority practice
- Avoid roadmap design driven only by fear
Boundary examples
Boundary examples from independent legal analysis:
- Pre-generation, unpublished content may not need retroactive labelling
- Already-generated content published on/after 2 August may still need labels
- Log both generation time and publication time
Decision table and checklist for builders
Working decision matrix — date, role, output
The tables below translate public Commission and independent-law firm guidance into operations language. Confirm with counsel for your facts.
| Dimension | What to verify | Public-source working guide |
|---|---|---|
| Effective date | Is the feature on the 2 Aug track or the 2 Dec marking transition? | 50(4)-style labels: 2 Aug; 50(2) marks for existing systems: 2 Dec extension in Reed Smith/Stibbe analyses |
| Role | provider / deployer / both | Conversational AI plus branded generation often lands on both |
| Output type | interaction / synthetic A/V/text / deepfake / public-interest text | Four-scenario split (Addleshaw / Guidelines) |
Working decision matrix — mark and label
| Dimension | What to verify | Public-source working guide |
|---|---|---|
| Marking | machine-readable marks, robustness, no removal | Provider CoP Section 1; metadata/watermark combinations (JETRO summary) |
| Labelling | human-readable deepfake / AI-origin notices | Deployer CoP Section 2; official icon templates reported via AFP-family coverage |
Working decision matrix — exceptions, proof, enforcement
| Dimension | What to verify | Public-source working guide |
|---|---|---|
| Exceptions | routine edits, human editorial responsibility, creative carve-outs | Record deepfake status and who owns edits (Addleshaw) |
| Evidence | CoP signature or equivalent | Non-signers need alternative compliance evidence (Guidelines) |
| Enforcement | ceilings vs case practice | EC enforcement press + firm-stated ceilings; case-by-case legal review |
Sources for the matrix (official)
Sources (public materials as of July–August 2026):
Sources for the matrix (independent)
Checklist you can run this week — inventory and role map
- Inventory EU-facing products (chat, agents, automated marketing/support generation, user-facing AI edits).
- Draft-classify each product as provider / deployer / both with a one-line rationale (who hosts the model; who publishes).
- Map outputs to the four scenarios; split 2 Aug must-haves (notices/deepfake/public-interest labels) from 2 Dec marking work.
Checklist you can run this week — controls and release gate
- If you rely on human-review exceptions, define workflow ownership and logs for editorial responsibility.
- Choose a machine-readable mark strategy (in-house / foundation-model provider / third party) and test removal/alteration resistance.
- Decide CoP signature vs equivalent evidence packs (playbooks, UI screens, detection tests) with legal.
- Add a pre-publish release-gate item so missing labels block shipping.
Related reading
For adjacent product hygiene, see:
- share-scope checks for generative assets: Muse Image sharing confirmation
- local reviewability of AI HTML deliverables: RHW local review
- verification design when models avoid saying “I don’t know”: LLM abstention design
FAQ
Q1. Does this affect Japanese companies?
A. It can, if you provide or deploy AI systems or AI-generated content for users in the EU. Do not decide from server location alone—inspect audience and publication surfaces. Final calls belong to counsel. Start from EC Guidelines/press.
Q2. Does calling a third-party API automatically make us a provider?
A. Not automatically in the same sense as a foundation-model provider. Your own conversational UI often triggers notice duties; publishing branded generated content often raises deployer labelling issues. Split the value chain per product.
Q3. What differs between 2 August and 2 December 2026?
A. 2 August is the enforcement/transparency anchor. Reed Smith/Stibbe-style analyses separate Art.50(4)-track duties from Art.50(2) marking for pre-existing generative systems, which may transition to 2 December. Do not plan releases against a single date.
Q4. Is signing the Code of Practice enough?
A. No. The CoP is a voluntary practical framework. Even if assessed as adequate, it is not final proof. Article 50 duties still apply, and non-signers need equivalent evidence.
Q5. Do crop/color-only image edits need deepfake labels?
A. Addleshaw’s guideline-style examples suggest cosmetic product-enhancing AI edits may be in scope, while crop/color/background-only edits may be out of scope. Treat boundaries as casework and pre-agree an allowed-edit list.
Q6. Is a headline “multi-billion yen” fine a fixed amount?
A. Treat it as reporting conversion/emphasis. Independent firm summaries more often cite frames such as up to EUR 15m or 3% global turnover. Separate statutory ceilings from enforcement practice; do not design only from scare headlines.
Summary — decisions for today and next actions
Takeaway: “labelling” is a bundle, not a single toggle:
- notices
- machine-readable marks
- deepfake/public-interest text labels
Split work by provider/deployer roles and by 2 August vs 2 December tracks.
If you have EU-facing generative UI or distribution, build a one-page product × role × scenario matrix this week and close 2 August gaps first. Popularity metrics alone do not justify an all-hands emergency.
Primary vs secondary sources
- Prefer Commission primaries
- Then firm/JETRO secondaries
Next actions
- Inventory affected products
- Role classification
- Freeze 2 August UI copy for notices/labels
- Validate marking supply chain technically
- Lock CoP-or-equivalent evidence strategy with legal
This article is a general synthesis of public materials, not legal advice. Applicability depends on product facts and audience; reconcile with counsel before release.
Author
krona23
Over 20 years in the IT industry, serving as Division Head and CTO at multiple companies running large-scale web services in Japan. Experienced across Windows, iOS, Android, and web development. Currently focused on AI-native transformation. At DevGENT, sharing practical guides on AI code editors, automation tools, and LLMs in three languages.
🔥 Most Popular
- Obsidian Visualization Tools: Graph, Canvas, Excalidraw (2026)
- Claude Desktop Won't Install? Windows & Mac Fixes That Worked (2026)
- What Is VS Code? Features, Extensions & Copilot — Complete Guide (2026)
- Claude Code CLI vs Web vs Desktop: A Daily User's Guide (2026)
- LM Studio Bionic Preview: Local Open-Model Agent for Docs and Code









Leave a Reply