Your AI-generated content needs a label. Here's what that actually means.
A pattern I keep running into when I look at how teams actually handle AI content labeling: it works for the first week. Someone adds the “AI-generated” caption by hand, carefully, every time. Then a launch happens, or that person goes on vacation, or the content starts coming from three tools instead of one, and the caption becomes something that happens most of the time instead of every time. Nobody decided to stop labeling things. It just stopped being the first thing anyone thought about at publish time.
That's the part of content labeling under Article 50 that doesn't get talked about enough: it's not really a legal question. Almost everyone already agrees AI-generated content should say so. It's an operations question. And most teams are solving it with a process, when what it actually needs is infrastructure.
For context on the obligation itself: I wrote a longer explainer on Article 50 a little while back. The short version for this post is that content labeling is one of its three obligations, alongside disclosure and audit logging, and it covers AI-generated text, images, audio, and video that gets published or distributed. It needs to be identifiable as AI-generated where the Act requires it. It doesn't say how, and that gap is exactly where the gallery-page problem lives.
“How” usually turns into: someone adds a caption when they remember, a CMS field that's optional and therefore empty half the time, or a note in the team wiki that says “always label AI content” that nobody has opened since the day it was written. None of these are bad-faith. They're just what happens when a compliance requirement gets treated as a checklist item instead of a property of the content itself.
The alternative is to make the label a byproduct of generating the content, not a separate step after it. Concretely, that means two different things depending on what you're labeling, and it's worth being specific here because the two cases really don't work the same way:
- For an image, the label has to be part of the file. A caption on the page around the image doesn't survive that image being downloaded, reposted, or screenshotted, and images get downloaded, reposted, and screenshotted constantly. The only way a label travels with an image is if it's baked into the pixels.
- For text or an article, baking anything into the content itself would mean mangling the actual words, which obviously isn't acceptable. What works instead is a badge positioned with the content, generated at the same time as the content and returned alongside it, so there's no separate step where someone has to remember to add it.
That image/text split maps onto a distinction worth understanding on its own: machine-readable marking versus a visible label aren't interchangeable, and Article 50(2) asks for the former even when a visible badge is also present.
This is, not coincidentally, exactly how Disclarion's SDK approaches it: a real watermark pixel-baked into images, a positioned HTML badge for text, both produced by the same call that logs the interaction in the first place. I'm not going to pretend that's an unbiased example, it's literally the product I work on, but I think the underlying point holds regardless of which tool anyone uses for it: if labeling depends on a human remembering to do it at publish time, it will eventually not happen. Not because anyone stops caring, but because that's what happens to every manual step over a long enough timeline.
Most of the unlabeled AI content out there almost certainly isn't trying to mislead anyone. It's just what a missed caption looks like at scale, and scale is the normal operating condition for anything generating content with AI. Worth checking your own output against, before an auditor, or a customer, does it for you.
More from the blog
Your internal AI tools owe the same disclosure duty the customer-facing one does
An HR bot or IT helpdesk assistant used only by your own staff still interacts with natural persons. Article 50 doesn't carve out an exception for "internal-only."
Does the EU AI Act apply if you're not based in the EU?
"We're a US company, we don't have an EU entity" isn't the exemption it sounds like. The actual test is about who's on the other end of the conversation, not your mailing address.
Why I built Disclarion as an SDK, not a dashboard
The easier product to build is a dashboard you configure after the fact. I built Disclarion to sit inside the AI call itself instead, and it's worth explaining why.
Deepfakes get a stricter rule than an AI-written blog post
Article 50(4)'s deepfake duty isn't the same obligation as ordinary AI content labeling — it applies to image, audio, and video specifically, and the built-in exemptions work differently too.
Your chatbot isn't the only thing that owes a disclosure under Article 50.
Article 50's disclosure duty doesn't stop at chatbots — emotion recognition and biometric categorization systems carry the same obligation, and they're the two system types teams miss most often.
You named it "AI Assistant." That's not the same thing as disclosing it.
A bot's name feels like disclosure. Article 50 cares whether a reasonable user actually understood they were talking to an AI — not whether a label existed somewhere on the page.
Your editor touched it. Article 50's label exemption still might not apply.
Article 50(4) waives the visible AI-content label when a human takes substantive editorial responsibility for a piece — but a quick skim doesn't qualify, and the exemption doesn't touch the audit-trail duty underneath it.
You labeled the article. That's not the same thing as marking it.
Article 50(2)'s machine-readable marking and Article 50(4)'s visible label are two different duties. Images already meet the first one by accident. Article text usually doesn't meet it at all.
Your AI answers the phone now. There's no modal for that.
Article 50's disclosure duty doesn't go away because there's no screen. What actually discloses an AI voice agent on a phone call, when a modal isn't an option.
An AI audit trail doesn't need to know what your users actually said.
Teams hear "audit trail" and picture a database of every conversation. Article 50's version is narrower: it has to prove disclosure and labeling happened, not repeat what was said.
Article 50 skips disclosure when it's "obvious from context." That word is doing more work than it looks like.
Disclosure isn't required when AI use is obvious from context, but Article 50 never defines obvious, and most of the cases teams assume qualify, don't.
Your chatbot needs to disclose it's an AI. Once, not every message.
Disclosing a chatbot is AI sounds simple until you build it: repeat it every message and people tune it out, show it once and later visitors never see it.
You have logs. That's not the same thing as an audit trail.
Under Article 50, an audit trail has to be insert-only, complete, and producible on demand, not a data-engineering project when a regulator actually asks.
EU AI Act Article 50, explained: who it affects and what it requires
Article 50 of the EU AI Act has been enforceable since August 2, 2026: who it applies to, its three obligations, and the penalties for getting it wrong.