The European Commission published the final Code of Practice on marking and labelling of AI-generated content in early June 2026. If you use AI tools to create content for customers in Europe, you now have a clear compliance target — and less than 60 days to hit it.
The hard deadline is August 2, 2026. That is when Article 50 of the EU AI Act’s transparency obligations become enforceable law.
What the Code Actually Requires
The Code is voluntary. The obligations it helps you meet are not.
The rules are split into two sections depending on where you sit in the AI supply chain.
Providers of generative AI systems (if you build AI tools, deploy AI APIs, or offer AI-powered applications) are covered by Section 1. The requirement is to embed machine-readable signals into AI-generated outputs — watermarks, metadata, or content credentials — so that downstream systems can detect that the content was AI-generated. The technical standard the Code references most is C2PA (Coalition for Content Provenance and Authenticity), already being implemented by Adobe, Google, Microsoft, and the major AI labs.
Deployers (businesses that use generative AI to create content for end users) are covered by Section 2 when content involves deepfakes or AI-generated text on matters of public interest. The requirement there is visible labelling.
Where Most Businesses Are Misjudging the Risk
The business implications run wider than most companies realise. “Matters of public interest” under the AI Act includes employment decisions, healthcare information, financial guidance, and legal communications. If your AI-powered workflows touch any of these areas for EU-based customers, deployer obligations apply.
Consider what that actually covers: an AI agent that drafts a client report, summarises policy options for an insurance customer, generates a treatment summary, or produces a hiring recommendation letter. When that content reaches someone in the EU, the labelling question becomes a compliance question.
The Commission notes that hundreds of organisations participated in drafting the final code — industry, academia, and civil society. These companies are not surprised by the August deadline. They have been building toward it. If your competitors are in that group and you are not, the gap will show up in procurement conversations soon.
What to Check Before August 2
If your business uses AI to generate content that reaches EU customers, audit four things now.
Your AI-generated output inventory. What does your AI actually produce? Reports, emails, customer chat responses, marketing copy, legal summaries? Map it before you can label it.
Your providers’ content credential support. Are the AI tools you use implementing C2PA? If your provider cannot tell you whether their outputs carry content credentials, that is a due diligence issue.
Your deployer obligations. If any AI content touches financial, health, legal, or employment topics for EU users, visible labelling requirements likely apply. Get legal to confirm which outputs fall into scope.
Your documentation trail. Regulators ask for evidence of assessment, not just compliance. A documented audit of your AI content flows — even if it surfaces gaps — reduces enforcement risk compared to having nothing on file.
What This Means for Business
The EU AI Act is not trying to make AI adoption harder. It is trying to make it sustainable. The argument for content transparency is the same argument that made food labelling standard: people deserve to know what they are consuming before they rely on it.
Businesses that treat content provenance as a design requirement rather than a last-minute checkbox will build more durable customer trust. And in regulated industries — finance, health, legal, HR — that trust is competitive differentiation.
The clock is running. Fifty-three days is enough time to act, but not enough time to procrastinate.
Enterprise DNA helps businesses audit their AI workflows, identify compliance exposure, and build processes that hold up to scrutiny. Book a discovery session to understand where your AI stack stands before August 2.