What the EU AI Act Means for Your Image Files
The reason your editor suddenly writes provenance data on every export, and why the tools that do not yet are on a clock that runs out in December.
What changed on 2 August 2026
Article 50 of the EU AI Act sets transparency obligations, and its requirements applied from 2 August 2026. The part that reaches your image files is short: providers of AI systems generating synthetic image, audio, video or text must ensure the outputs are marked in a machine-readable format and detectable as artificially generated or manipulated.
Machine-readable is the operative phrase. A visible watermark in the corner does not satisfy it, because the point is that other software can check the file automatically. The obligation is also framed with a feasibility qualifier — solutions must be effective, interoperable, robust and reliable as far as is technically feasible, accounting for the state of the art — which is why implementations differ between vendors rather than converging on one method.
In practice the industry settled on two layers: a signed C2PA manifest attached to the file, and for some vendors an invisible watermark embedded in the pixels. The first is metadata and comes off. The second is part of the image and does not.
This is why your tools changed
If you have noticed provenance data appearing on exports where it did not before, this is the cause. Vendors have been moving ahead of the deadline rather than waiting for it.
Adobe made Content Credentials mandatory for workflows touching generative features and removed the in-app option to disable them, with photographers reporting credentials on exports more broadly than they expected. OpenAI signs DALL-E and ChatGPT image output. Google output carries both Content Credentials and SynthID.
None of that is a change in what the tools can do. It is a change in what they write down, driven by a compliance deadline rather than by anything about your workflow.
The December date almost nobody mentions
The August date is not the end of it, and this is the part worth planning around.
The AI Omnibus provisional agreement reached in May 2026 gives generative systems that were already on the market before 2 August until 2 December 2026 to meet the machine-readable marking requirement under Article 50(2).
So the tools writing nothing today are not exempt — they are inside a grace period. If your current workflow produces unmarked files, the reasonable assumption is that it will start producing marked ones between now and December, without you changing anything.
That makes any list of which tool marks what a snapshot rather than a standing fact, including the ones on this site. Checking your own exports periodically is the only approach that stays accurate.
Who the obligation actually falls on
This is the question people get wrong most often, and the distinction matters.
The marking duty in Article 50(2) is placed on the provider of the AI system — the company shipping the model or the tool. It is a requirement that outputs leave their system marked. It is not framed as a duty on you to keep a mark that is already in a file you hold.
There is a separate obligation, in Article 50(4), on those who deploy AI systems that generate or manipulate deep fake content, requiring disclosure that the content is artificially generated or manipulated. That one attaches to the person publishing, and it is about disclosure rather than about metadata.
The practical consequence: removing a manifest does not discharge a disclosure duty if one applies to you. The two are separate mechanisms, and a clean file does not answer a question the law is asking about the content.
This is a description of how the provisions are structured, not legal advice. If your work falls near deep fake territory or you publish commercially into the EU, the disclosure question is worth asking someone qualified rather than inferring from a metadata guide.
What it means for photographers specifically
The awkwardness for photographers comes from a mismatch the law does not really address. The marking records that a generative feature was involved. It does not record proportion.
A photograph where a generative tool removed a power line is marked the same way as an image generated entirely from a prompt, and the platforms reading those marks mostly do not distinguish between them either. Retouching has removed distractions for decades; what changed is that the tool now writes it down.
Two things follow. Removing the manifest from files you publish is ordinary metadata removal and does not alter the picture. And the copies you keep are the ones that matter for proving authorship, so archive originals with their metadata intact and clean only what goes out.
What the marking cannot do
Provenance metadata makes a claim about origin. It does not establish that an unmarked file is a camera original, and this asymmetry is permanent.
A file can arrive unmarked for many innocent reasons: a screenshot, a format conversion, a platform re-encode, a tool inside its grace period, or a generator outside EU jurisdiction. Absence of a mark is not evidence of anything.
Marking also says nothing about truthfulness. An image can be entirely camera-captured and still be a lie about what it depicts, through framing, caption or context. Provenance answers how a file was made, which is a narrower question than whether it is honest.
Check what your exports carry now
See exactly which AI markers an image carries before you publish it. This tool only reads — nothing is changed, and nothing is uploaded.
Open AI Metadata CheckerFrequently asked questions
When did the EU AI Act start requiring AI images to be marked?
The Article 50 transparency obligations applied from 2 August 2026. Providers of systems generating synthetic image, audio, video or text must ensure outputs are marked in a machine-readable format and detectable as artificially generated or manipulated.
Why did my editing software start adding metadata I did not ask for?
Vendors moved ahead of the deadline. Adobe made Content Credentials mandatory for workflows involving generative features and removed the option to disable them, and other vendors sign their output by default. It reflects a compliance schedule rather than any change in your workflow.
Some of my tools still write nothing. Are they exempt?
Probably not — they are likely inside a grace period. The AI Omnibus provisional agreement of May 2026 gives systems already on the market before 2 August until 2 December 2026 to meet the machine-readable marking requirement, so unmarked output today may become marked by then.
Does the law say I have to keep the metadata in my files?
The marking duty in Article 50(2) is on the provider of the AI system, requiring that outputs leave their system marked. It is not written as an obligation on you to preserve a mark in a file you already hold. This is a description of the structure, not legal advice.
So is removing Content Credentials legal?
The marking obligation sits with the tool vendor, not the file holder. But a separate provision, Article 50(4), places a disclosure duty on those deploying AI to generate or manipulate deep fake content, and stripping a manifest does not discharge that duty. If your work is near that line, ask someone qualified.
Does a visible watermark satisfy the requirement?
No. The requirement is specifically for machine-readable marking, so that other software can detect it automatically. That is why vendors implemented signed C2PA manifests, and in some cases invisible pixel watermarks, rather than visible corner marks.
If an image has no AI marking, was it made by a camera?
No. Marks are absent for many ordinary reasons — screenshots, format conversions, platform re-encoding, tools still inside the grace period, or generators outside EU jurisdiction. Absence of a mark supports no conclusion about origin.
Does this apply to me outside the EU?
The obligations fall on providers placing systems on the EU market, but the practical effect is global: vendors ship one build. If you use a major tool anywhere, you are likely getting the marking behaviour built for EU compliance.