The EU AI Act’s Article 50(2) marking obligation carries exactly one grace period, and it closes on 2 December 2026. If a generative system you already run was on the market before 2 August 2026, that is your deadline — not next August’s.
Who this is for
- Providers who put a generative or content-manipulating AI system into the EU market before 2 August 2026 and assumed the whole of Article 50 lands in August.
- Product and platform teams responsible for synthetic audio, image, video or text output, including anything that can produce a deepfake.
- Compliance and legal leads mapping AI Act milestones and trying to work out which ones have a runway and which do not.
What’s happening
Article 50 — the AI Act’s transparency tier — applies from 2 August 2026. It requires that AI-generated or manipulated content be marked in a machine-readable way and be detectable as artificial. For most of Article 50, that is the date and there is no runway.
The one exception sits in Article 50(2). Providers whose generative systems were already placed on the market before 2 August 2026 get a four-month extension for the marking-and-detection requirement specifically. Their date is 2 December 2026. The European Commission’s own Article 50 guidance confirms it: existing systems must meet the marking obligation by 2 December 2026, and content generated before 2 August 2026 does not have to be labelled retroactively.
Free · 4 minutes
Do you know where AI is already being used in your business — and what it can see?
Fourteen questions on shadow AI, data exposure, oversight, and governance debt — the gap between how fast AI is arriving and how much control you have over it. Banded finding on screen, full sheet by email.
So there are two clocks. New systems: 2 August. Systems already live: 2 December. If you assumed the whole article lands in August, you have quietly given yourself a deadline four months too early — or, worse, missed that the December date is a hard stop, not a soft encouragement. December is already a crowded month for the Act; the Article 5 prohibition additions bite in the same window.
Why it bites
Marking is not a wrapper you bolt on the afternoon before. To be compliant the mark has to be machine-readable, reasonably robust to ordinary editing, and interoperable enough that a downstream detector can actually read it. That means picking a scheme — C2PA content credentials, a SynthID-style watermark, embedded metadata — and wiring it into the generation path, not the publishing path. Retrofitting that into a system that has been in production for a year touches the model output, the storage layer and often a CDN that strips metadata by default.
The interoperability problem is the part that catches people. A watermark only counts if something can detect it. Two vendors each shipping their own proprietary mark, neither readable by the other, is close to no mark at all in regulatory terms. I set out the C2PA-versus-SynthID trade-off in a companion piece, and it is worth reading before you commit to an approach.
The one thing to do before 2 December
Make one list: every generative or content-manipulating AI system you had in production before 2 August 2026. For each, write down what marking it emits today and whether an independent detector can read it. Any blank row is in scope for the 2 December deadline and needs a marking scheme chosen and integrated now — four months is enough time only if you start from a known inventory. Do the inventory this week; the integration is the slow part.
If you want a second pair of eyes on which of your systems are in scope, and on which watermarking approach survives your own pipeline, that is the kind of question I take on advisory.
Advisory is scoped and fixed-fee — you will know the number before any work starts.
The August headline will have passed by the time this matters to you. The date that still counts for anything you already run is 2 December 2026.
Free interactive tool
Website compliance checklist
What your site has to do, based on what it actually does
Answer as much or as little as you like — the list builds as you go. Nothing is stored against your name and no email is required.
Everything that applies
Ordered by what to do first: legal requirements you can close quickly, then larger pieces of work, then what is expected rather than required. Not exhaustive, and not a legal audit.
Dated PDF, yours to keep or circulate.
Free interactive tool
Interactive deadline calculator
Check which regulations apply to you and when
Regulation across the EU, UK, US and Asia-Pacific has moved considerably in the past eighteen months, and several headline dates have shifted more than once. Twelve questions, about three minutes.
Results are shown on screen — no email required. A dated summary is available to download, and can be sent on if that's more useful. What we do with your answers.
Most technology problems are not technology problems. They are control problems.
The systems exist. The investment has been made. The question is whether leadership can understand, direct, evidence, and sustain what those systems produce. Find out where control exists — and where it only appears to.
Full Governance by Sixteen Pillars
Govern your business. Prove your compliance.
A board assurance cockpit for EU-regulated financial firms — tamper-evident, hash-chained proof of governance across DORA, GDPR, NIS2, ISO 27001, the EU AI Act and MiCA. In development.
See what's coming