EU AI Act transparency rules: what do AI teams need to do now?

TL;DR: EU AI Act Article 50 was not delayed by the Digital Omnibus, according to Lumenova AI, with transparency duties applied from 2 August 2026, Article 5 prohibitions having applied since 2 February 2025, and most enterprises still needing to sort provider versus deployer obligations. The compliance problem is now evidence, labelling, and role allocation, not high-risk readiness.

Editorial analysis by NHI Mgmt Group, based on content published by Lumenova AI: “EU AI Act Article 50 and Article 5: An Explainer on the Transparency and Prohibited-Practice Rules Already in Force”.

By the numbers:

• Article 5 prohibitions have been enforceable since 2 February 2025, with penalties of up to EUR 35 million or 7% of global annual turnover.
• Article 50 breaches carry up to EUR 15 million or 3% of global annual turnover under Article 99(4).

Key questions

Q: What breaks when organisations assume Article 50 can wait until high-risk AI deadlines?

A: They miss that Article 50 transparency duties already apply to many systems, including chatbots, synthetic media, and public-interest text.

Q: Why do deployers still carry AI Act risk when a third-party model provider marks the output?

A: Because the Regulation splits duties by role, not by commercial relationship.

Q: What are the most common control failures in AI transparency programmes?

A: The biggest failures are buried notices, labels that disappear after transformation, unclear provider-deployer ownership, and poor evidence of when disclosure occurred.

Practitioner guidance

• Establish a provider-versus-deployer ownership matrix Classify every AI system by who builds disclosure and marking features and who must expose or verify them at runtime.
• Test disclosure persistence across delivery paths Verify that labels, notices, and machine-readable marking survive file conversion, CDN delivery, mobile rendering, and downstream publishing tools.
• Treat prohibited practices as stop-work findings Block any system that falls inside Article 5 rather than routing it through a remediation queue, because no conformity assessment route makes a prohibited use lawful.

Bottom line: The article shows that EU AI Act compliance is already operational for many organisations, not merely a future high-risk exercise.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →