AI Act

The EU has empowered its executive branch to significantly scrutinize AI models, restrict market access, and impose substantial fines on providers. This move intensifies oversight of major U.S. AI companies like Anthropic and OpenAI, impacting their ability to deploy advanced AI systems in the bloc. These new powers, part of the EU AI Act, aim to assert technological sovereignty and manage the risks associated with increasingly powerful AI.

Article 50 of the EU AI Act mandates transparency for generative AI. Providers and deployers must disclose when users interact with AI or when content is AI-generated, particularly for deepfakes and public interest texts. This aims to prevent manipulation and deception. Specific requirements include machine-readable markings for synthetic media and clear notifications for emotion recognition/biometric categorization tools. Enforcement involves national authorities, the AI Office, and the EDPS. A voluntary Code of Practice aids compliance with marking obligations.

OpenAI is proactively aligning its safety, security, and transparency initiatives with the EU AI Act’s GPAI Code of Practice. The company highlights its rigorous testing, system cards, red-teaming, and internal governance frameworks as evidence of its commitment. OpenAI also addresses AI-generated content provenance through Content Credentials and SynthID watermarking, and manages dual-use risks in cybersecurity via its EU Cyber Action Plan. The company emphasizes the need for flexible regulations to keep pace with evolving AI technology.