What Article 50 requires
Article 50 of the EU AI Act imposes disclosure and labelling obligations on operators of AI systems that generate or manipulate content reaching an EU audience. Deepfakes require user-facing disclosure. Synthetic content requires machine-readable metadata. The trail must travel with the asset, across every system that touches it not just the one that created it.
Where the typical FS pipeline breaks
Adobe Content Credentials cover Adobe-originated assets. Salesforce Marketing Cloud's audit stops at its edge. A campaign that touches Canva, Figma, Marketing Cloud, and an external agency's SharePoint typically breaks the chain of custody four times before the asset reaches the inbox. On 3 August 2026, that break becomes a legal gap.
What defensible looks like
Every artefact is a versioned node in an artefact graph. Every transformation is a signed edge. Every approver and model invocation enters the ledger. An Evidence Pack assembles on demand PDF + JSON-LD with cryptographic signatures. The GC can hand it to the Irish Data Protection Commission, the AI Office, or outside counsel, in seconds.
16-week readiness checklist
Map every creative source. Catalogue every vendor in the pipeline. Inventory synthetic-performer usage in trailing 90 days. Deploy a draft-time policy pack for Article 50 before mid-July. Pre-execute a retrospective scan. Negotiate a shared-responsibility clause that absorbs first-loss on misclassified disclosures within covered packs.