Labelling AI Content: The EU Code of Practice Explained
The EU has published its Code of Practice for labelling AI-generated content. What applies from 2 August 2026, and what businesses should do now.
In short
On 10 June 2026 the European Commission published its final Code of Practice on labelling AI-generated content. It is voluntary and helps meet the EU AI Act's transparency duties (Article 50), which apply from 2 August 2026: chatbots must disclose themselves, and deepfakes and AI texts on public-interest topics must be labelled.
Auf Deutsch lesen: deutsche Fassung
On 10 June 2026 the European Commission published its final Code of Practice on labelling AI-generated content (press release IP/26/1328). The Code is voluntary and sets out practical steps for meeting the transparency duties of the EU AI Act, which apply from 2 August 2026. For small and mid-sized businesses that use AI day to day, this is a concrete roadmap, not an abstract legal topic.
What applies from 2 August 2026
On that date, the transparency obligations under Article 50 of the AI Act take effect. They apply regardless of whether your AI is high-risk; the point is the open disclosure of AI interaction and AI content.
- Interactive AI such as chatbots: users must be able to recognise that they are talking to an AI, not a human.
- Deepfakes: AI-generated or AI-manipulated images, audio and video must be labelled as such.
- AI texts on matters of public interest: must be labelled when published without human or editorial oversight.
- Providers of generative AI: must mark their AI outputs in a machine-readable way, so they are technically detectable as artificially generated.
The new Code of Practice mainly operationalises two of these: machine-readable marking by providers (Article 50(2)) and the visible labelling of deepfakes and published texts by deployers (Article 50(4)). The plain chatbot disclosure is the related duty under Article 50(1) and also applies from 2 August 2026.
Provider or deployer: where do you stand?
The AI Act distinguishes two roles, and the Code is split into two sections accordingly. The decisive point for most companies: anyone who merely uses AI is a deployer, not a provider.
- Providers: develop or distribute generative AI systems and must ensure the machine-readable marking of outputs.
- Deployers: use AI, and must visibly label deepfakes and AI texts on public topics, and disclose the AI in chatbots.
What this means for mid-sized businesses
Most mid-sized companies are deployers. Even so, real obligations arise as soon as generative AI becomes visible to the outside world:
- A chatbot on your website or in customer service: a clear notice such as "You are chatting with an AI" meets the requirement.
- AI-generated images or videos in marketing and social media: check whether a deepfake label is needed.
- AI-created texts published without human review that concern public-interest topics: label them.
- Keep an internal record of where AI is used at all. That is the basis for any labelling.
How to label: the EU icon
For visible labelling, the Code of Practice provides an official EU icon that may be used freely and without attribution. There are two variants: "AI GENERATED" for fully AI-created content and "AI MODIFIED" for partly AI-altered content. This answers the question "How do I label?" in concrete terms.
- Images and videos: place the icon clearly visible, for example top right; in videos at the start and after ad breaks.
- Published texts: place the notice near the headline or at the start of the text.
- Audio-only with no screen: prepend a short, clearly understandable audible notice.
- The label must be clearly recognisable and accessible at the latest on first contact.
When you do not have to label
The Code sets out clear exceptions. Not every piece of AI content needs to be labelled:
- Published texts that have undergone human or editorial review and for which a person holds editorial responsibility.
- Artistic, creative, satirical or fictional works: here labelling is done so it does not impair the work, for example in accompanying text or credits.
- Content whose use is legally permitted for detecting, preventing or prosecuting criminal offences.
Voluntary, but with an upside
The Code is not mandatory. However, those who sign it can, once approved by the Commission and the AI Board, more easily demonstrate compliance with the relevant AI Act duties. In addition, the Commission has announced practical guidelines that will further clarify the scope. The Code was drawn up by six independent experts with the involvement of more than 180 stakeholder groups.
People in Europe have a right to know whether what they see, hear or read was created or altered by AI. Transparency is how we protect trust. (paraphrased: Henna Virkkunen, Executive Vice-President of the European Commission)
The bridge to ISO 42001
Labelling is not a standalone topic but part of a whole: those who know which AI systems run in their organisation, who is accountable for them and how their outputs are handled meet transparency duties almost in passing. That is exactly what an AI management system (AIMS) under ISO/IEC 42001 delivers. It makes the AI Act's duties structured and demonstrable. I build such systems so they work in day-to-day operation, and I check beforehand whether your labelling holds up.
If you are unsure whether you count as a provider or a deployer, and which labelling your AI requires, a short initial conversation is enough to classify your systems. Source: European Commission, press release IP/26/1328 of 10 June 2026.
Frequently asked questions
Is the Code of Practice mandatory?+
No, it is voluntary. The underlying transparency obligations under Article 50 of the EU AI Act, however, become binding from 2 August 2026. Those who sign the Code can more easily demonstrate compliance with these duties.
From when must I label AI content?+
The AI Act's transparency obligations (Article 50) apply from 2 August 2026, regardless of whether your AI is classified as high-risk.
As a mid-sized business, am I even affected?+
If you use generative AI that becomes visible to the outside world, such as a chatbot or AI-generated content, you are affected as a deployer. Most companies are deployers, not providers.
Do I really have to label every AI text?+
No. The labelling duty targets deepfakes and AI texts on matters of public interest that are published without human or editorial oversight. For chatbots, the AI disclosure is always required.
How exactly do I label AI content?+
The EU provides an official, freely usable icon in the Code of Practice: "AI GENERATED" for fully AI-created and "AI MODIFIED" for partly AI-altered content. It is placed clearly visible, for images and videos top right, for texts near the headline, and for audio-only as an audible notice, at the latest on first contact.
What does ISO 42001 have to do with labelling?+
ISO/IEC 42001 is the standard for AI management systems. It ensures you know which AI you use and how its outputs are handled, so transparency duties such as labelling become achievable and demonstrable in a structured way.
Author & expert review: Lars Zimmermann · ISO/IEC 42001 Senior Lead Auditor & ISO/IEC 27001 Lead Auditor (PECB)
Last updated: 12 June 2026. Researched and reviewed to the best of our knowledge; not a substitute for individual legal advice.
Sources & further reading
Questions about your own case?
In a free 15-minute intro call we assess where you stand on ISO 42001, ISO 27001 and the EU AI Act, honestly and without a sales pitch.