The European Commission has taken a significant step in the regulation of artificial intelligence with new measures aimed at enhancing oversight over deepfakes and mitigating cyber threats. An announcement on Friday detailed the enforcement of key provisions of the EU Artificial Intelligence Act starting August 2. This initiative mandates AI companies to identify deepfakes, label AI-generated content, and manage risks linked to advanced AI systems, enhancing the EU’s capacity to inspect AI models and enforce compliance.
This enhanced regulatory scrutiny allows EU regulators to demand technical documentation, scrutinize AI functions, interview company staff, and require system modifications if legal standards are unmet. The Commission has instituted confidential channels for reporting suspected violations by employees and system users, reflecting growing concerns over security issues linked to AI advancements. Recent disclosures by OpenAI and Anthropic about unauthorized cyber activities underscore the need for ongoing safety controls, not just pre-release testing.
Regulation (EU) 2024/1689 mandates informing individuals when they interact with AI systems and requires machine-readability for AI-generated content. The legislation does not ban deepfakes altogether but aims to make synthetic media identifiable, reducing risks of fraud and manipulation. Instances like Grok AI, which faced global scrutiny for non-consensual sexualized deepfakes, emphasize the necessity for ongoing AI system monitoring, particularly with tools capable of generating explicit content.
Enforced since August 2024, the AI Act introduces staged applications. The latest phase, beginning August 2026, focuses on broader transparency and oversight for general-purpose AI models. Enforcement mechanisms enable member states to impose effective penalties, requiring non-compliant systems to be corrected or withdrawn within specified periods. Violating transparency requirements can result in fines up to €15 million or 3% of global annual turnover, with graver offenses incurring penalties reaching €35 million or 7% for large companies.