EU AI Act Article 50: what film and advertising producers have to mark

Article 50 of the EU AI Act sets transparency obligations for certain AI systems and their outputs. Two of them touch audiovisual work, and — this is the part most summaries get wrong — they fall on different parties.

Article 50(2) requires that AI-generated or AI-manipulated output be marked in a machine-readable format and be detectable as artificially generated. That duty sits on the provider of the generative AI system, not on the production. In the Act's vocabulary a production is a deployer; the tool vendor is the provider. Article 50(4) is the one that attaches to you: as deployer, you disclose that the content has been artificially generated or manipulated.

The practical consequence is that the marking task is a procurement question rather than a finishing question. Confirm with each AI vendor that their system marks its outputs, and keep the confirmation. Productions routinely over-comply here, spending finishing time on watermarking that Article 50(2) does not ask of them, while under-documenting the vendor confirmations that actually matter.

C2PA Content Credentials remain worth applying at export — not because Article 50(2) obliges you to, but because they give you a positive, contemporaneous record of what was generated and when. Treat credentials as evidence you choose to create, not as discharge of a duty you owe.

The Article 50 trigger is the content and its distribution, not the contract under which it was made. A production can hold perfect SAG-AFTRA riders, a complete consent file and a clean chain of title, and still have nothing that satisfies a machine-readable marking obligation, because none of those artifacts live in the file.

This is also why it arrives late and badly. The obligation attaches when the title reaches the EU, and EU distribution is frequently a decision made after post has wrapped — a festival pickup, a territory sale, a platform adding a market. The finishing suite that could have applied credentials at export has moved on to another job, and the person now asking for provenance is a delivery coordinator with a spreadsheet.

The mitigation is to decide the export spec before finishing, on the assumption that EU distribution is possible rather than confirmed. Applying Content Credentials to material that never ships to the EU costs almost nothing. Not having applied them to material that does is a re-export.

Machine-readable marking is invisible to the audience; it is for systems and downstream reviewers. Deep fake disclosure is visible; it is for viewers. Doing one does not do the other, and productions routinely conflate them because both get filed under “AI transparency”.

For narrative work the disclosure obligation is materially lighter than most coverage suggests. Where the content forms part of an evidently artistic, creative, satirical, fictional or analogous work, Article 50(4) is relaxed to disclosing the existence of generated or manipulated content, in a manner that does not hamper the display or enjoyment of the work. In practice that supports an end-credit or metadata disclosure rather than a persistent on-screen legend. Note the relaxation applies to 50(4) only — it has no bearing on 50(2), which was never your obligation in the first place.

Advertising sits outside the obvious centre of that carve-out, and the answer there is more legible anyway: ad formats already carry disclosure conventions, and the audience-facing rules from Google, Meta and New York all point the same way. Where you do rely on the lighter route, write down the basis on which the work was treated as evidently creative before you rely on it.

Keep the two in separate columns on your delivery checklist, and note that they have different owners in the legal sense as well as the practical one. Marking under 50(2) is the AI provider's duty; your task is procurement — getting and keeping the vendor's confirmation, with credentialed export as a voluntary belt-and-braces record produced by finishing. Disclosure under 50(4) is genuinely yours, owned by the producer or brand, triggered by the nature of the content, and output as something the viewer sees.

Credentials can be stripped or lost when an asset is re-encoded, re-wrapped or re-uploaded downstream, and you do not control every hop. That is a reason to keep your own provenance record rather than to skip the credentials.

A provenance and export manifest — which shots contain AI-generated or AI-manipulated material, which tool or vendor produced them, which export carried credentials, and the hash of the delivered master — is the artifact that survives when the file’s own metadata does not. It is also what lets you answer a question about a specific shot two years later without re-opening the project.