AI Act: end of grace period for marking AI-generated content in pre-existing systems; ban on non-consensual intimate deepfake generators
86 days from today
Date note: Grace period introduced by the Digital Omnibus on AI (Reg. 2026/1744) for systems placed on the market before 2026-08-02; the new prohibition was also added by the Omnibus
Generative AI systems that were already on the market before 2 August 2026 get until 2 December 2026 to implement machine-readable marking and detection of AI-generated output. From the same date AI systems built to generate non-consensual intimate or sexual imagery are prohibited outright.
Who is affected
Providers of generative AI products released before August 2026 that have not yet implemented watermarking; any business deploying image or video generators.
Sizes: micro, small, medium, large · Sectors: Software / SaaS, Media / marketing, All sectors · Applies if: We use or build AI systems
What to do
Confirm that every generative feature you provide emits watermarks or provenance metadata by 2 December 2026. Check vendor roadmaps if you resell or embed third-party generators. Remove or block any functionality that could generate intimate imagery of real people.
Penalty
Up to €15M or 3% of worldwide turnover; prohibited practices up to €35M or 7%
In force since 2025-02-02; the Digital Omnibus on AI (Reg. 2026/1744, in force 2026-07-27) softened Art. 4 to a duty to support AI literacy rather than guarantee it
Any business that develops or uses AI systems in the EU, including ordinary firms using AI chatbots, recruiting tools or analytics.
Commission (AI Office) enforcement powers only from 2026-08-02; models placed on the market before 2025-08-02 have until 2027-08-02
Companies that train or substantially fine-tune general-purpose AI models and place them on the EU market. Businesses merely using such models via API are not GPAI providers.
Kept at 2026-08-02 by the Digital Omnibus on AI; only the marking/detection duty for systems already on the market before this date is deferred to 2026-12-02
Any company that offers a customer-facing chatbot, generates synthetic media or text for the public, or uses emotion recognition or biometric categorisation.
Postponed from 2026-08-02 by the Digital Omnibus on AI, Regulation (EU) 2026/1744 (OJ 2026-07-24, in force 2026-07-27)
Companies building such AI systems, and any employer or lender that uses them (deployer duties), regardless of size. SMEs get simplified documentation templates.