EU AI Act for AI deployers in media & publishing

This guide maps the EU AI Act (Regulation (EU) 2024/1689, as amended by the 2026 Digital Omnibus) to the AI systems AI deployers actually run in media & publishing: which uses are high-risk, which only carry transparency duties, and what is due by when. It reflects the post-Omnibus dates — the high-risk regime now applies from 2 December 2027 (Annex III) and 2 August 2028 (Annex I), while Article 50 transparency has applied since 2 August 2026.

Are you the deployer?

You are a deployer if you use an AI system under your own authority in the course of business — e.g. running a vendor's screening tool, chatbot or scoring model on your own customers, staff or applicants (Article 3(4)).

Deployers must use high-risk systems per the provider's instructions with competent human oversight, monitor operation and keep logs (Article 26), and carry the user-facing transparency duties of Article 50(1), (3) and (4) — chatbot disclosure, emotion-recognition notices and deep-fake labels. If your organisation also acts as a provider, read the companion guide for AI providers in media & publishing too — many companies are both.

Typical AI uses in media & publishing

• AI-assisted news writing and translation
• synthetic images, audio and video for stories
• AI news anchors and voice narration
• automated content summarisation

High-risk triggers in media & publishing

Typical AI uses in this industry do not fall into the Annex III high-risk categories — the practical workload is the Article 50 transparency tier below. Re-check if you expand into employment screening, credit, education scoring or other Annex III contexts, and remember Article 6(3) edge cases cut both ways.

Transparency duties (Article 50) — since 2 August 2026

• AI-generated text published to inform the public on matters of public interest must be disclosed as AI-generated — unless it underwent human review with editorial responsibility (Article 50(4)).
• Realistic synthetic depictions of people, places or events are deep fakes requiring a visible label at first exposure (Article 50(4)).
• Providers of generation tools must machine-readably mark outputs (Article 50(2)) — C2PA is already used by major newsrooms.

Your timeline (post-Digital-Omnibus)

• 2 February 2025 — prohibitions (Article 5) and AI literacy (Article 4) apply. Already in force.
• 2 August 2025 — GPAI model rules (Chapter V) apply.
• 2 August 2026 — general application: Article 50 transparency, governance, penalties. In force.
• 2 December 2026 — Article 50(2) marking grace period ends for systems on the market before 2 August 2026; new Omnibus prohibitions apply.
• 2 December 2027 — high-risk obligations for Annex III systems (moved from 2 August 2026 by the Digital Omnibus).
• 2 August 2028 — high-risk obligations for AI embedded in Annex I regulated products (moved from 2 August 2027).

Penalties

Prohibited practices: up to €35,000,000 or 7% of worldwide annual turnover (Article 99(3)). High-risk and transparency breaches: up to €15,000,000 or 3% (Article 99(4)), whichever is higher. See what you actually risk in practice.

Next step: get your specific list

The fastest way to turn this into your own obligation list is the free 3-minute EU AI Act risk self-assessment — risk tier, obligations with article references, personalised timeline and penalty exposure. If your exposure is chatbots or AI-generated content, the Article 50 checker goes clause by clause.

← All role & industry guides