EU AI Act compliance for media and publishing SaaS

Media and publishing SaaS face the heaviest Article 50(2) burden of any vertical: every AI-generated article, headline, summary, image, or audio output must be marked as AI-generated in machine-readable form. The interplay with the DSA (Digital Services Act) and the Copyright Directive intensifies the obligation. Most media SaaS is not high-risk under Annex III but the Article 50(2) marking and Article 53 GPAI transparency obligations are substantial.

Is your product high-risk under Annex III?

Media and publishing SaaS is rarely high-risk under Annex III. Exception cases: AI used in election-related content recommendation or microtargeting (Annex III point 8), AI used in employment decisions for journalists or editorial staff (Annex III point 4). Standard content generation, recommendation, comment moderation, fact-checking automation, and editorial AI are not in Annex III but face heavy Article 50 obligations.

Article 50 transparency obligations

Article 50(2) is the central concern: every AI-generated piece of media content must be marked. Practical implementation: machine-readable C2PA marker plus visible 'AI-generated' label on every article, image, audio, and video output. Article 50(4) deepfake disclosure: AI-generated synthetic interviews, AI-manipulated news footage, AI-synthesized voices of real people must be clearly disclosed. Article 50(1): media chatbots, AI editorial assistants, AI-driven reader engagement must disclose AI nature. Article 53 stacks if you fine-tune a foundation model on your editorial corpus.

Self-audit checklist before 2 August 2026

Seven checks:

  1. Inventory AI features: content generation, headline writing, summarisation, image generation, voice synthesis, recommendation, moderation, fact-checking.
  2. Build C2PA marking pipeline for every output type by default.
  3. Add visible 'AI-generated' label on every AI-produced item in the user-facing UI.
  4. For AI-generated synthetic media of real people, add explicit disclosure per Article 50(4).
  5. If fine-tuning models on proprietary editorial corpus, prepare Article 53 training-data summary.
  6. Document copyright policy for training data (overlaps with Copyright Directive Article 4 text-and-data-mining exception).
  7. Coordinate with DSA Article 14 (notice and action) and Article 16 (statement of reasons) obligations.

Penalties and enforcement

Penalty ceilings: €15M or 3% of global turnover for Article 50, €15M or 3% for Article 53 GPAI. DSA fines stack separately, up to 6% of global turnover. Worked example: media SaaS with €5M ARR faces theoretical max of €150,000 (AI Act) plus DSA exposure. Bigger cost: distribution platform delisting. Major news aggregators (Google News, Apple News, MSN) enforce platform-level Article 50 marking compliance and remove content that ships unmarked AI output.

Last updated: 2026-05-28