EU AI Act Compliance Is Now Live — Does Your Indian Business Need to Care?

On August 2, 2026, the European Union’s AI Act Article 50 transparency obligations became enforceable. The penalties for non-compliance can reach 3% of a company’s global annual turnover. And if you’re an Indian business owner thinking this doesn’t apply to you — you’re probably wrong.

The Extraterritorial Reach You Need to Understand

The EU AI Act is not limited to European companies. It applies to any AI system whose outputs are used in the Union, or that interacts with EU-based individuals. If your Indian company serves EU customers, if your AI-generated content reaches EU users, or if your chatbot interacts with EU-based visitors — you’re in scope.

The European Commission’s guidelines, published July 20, 2026, clarify that providers established outside the Union are subject to the AI Act if the output of their AI system is used in the Union. The only carve-out is for “incidental, unforeseeable or unauthorized downstream use” — meaning if someone in the EU happens to find your AI tool online and uses it without your targeting, that alone may not trigger obligations. But if you deliberately serve EU users, you’re covered.

The Four Transparency Obligations

Article 50 imposes four specific duties, divided between providers (who build or place AI systems on the market) and deployers (who use AI systems in their operations). Many organizations are both — a provider for some systems and a deployer for others.

Obligation 1: Disclose AI Interactions (Provider)

If your AI system interacts directly with people — chatbots, virtual assistants, AI agents, avatars — you must design it so that individuals know they’re interacting with AI. This disclosure must happen at the start of the first interaction, in a clear and distinguishable manner.

The exception: if it’s obvious to a reasonably observant person that they’re interacting with AI, no additional disclosure is needed.

Obligation 2: Mark AI-Generated Content (Provider)

If your AI system generates synthetic audio, images, video, or text, the output must be marked in a machine-readable format that makes it detectable as artificially generated or manipulated. This includes general-purpose AI systems like GPT, Claude, and Gemini.

The marking must be effective, interoperable, robust, and reliable. A mark without an available detection method is insufficient — you need both the mark and a way to verify it. Standards like C2PA (Content Provenance and Authenticity) are emerging as the technical implementation.

One transition period: providers of relevant systems placed on the EU market before August 2, 2026 have until December 2, 2026 to implement machine-readable marking. New systems from August 2 onward must comply immediately.

Obligation 3: Inform on Emotion Recognition and Biometric Systems (Deployer)

If you deploy an emotion recognition or biometric categorization system, you must inform the people exposed to it. Note that certain forms of emotion recognition in workplaces and educational institutions are already prohibited as banned practices since February 2, 2025 — check Article 5 first before relying on the transparency route.

Obligation 4: Label Deepfakes and AI-Generated Public-Interest Text (Deployer)

If you generate or manipulate a deepfake, you must disclose that the content is artificial. For artistic, creative, satirical, or fictional work, a lighter form applies — the disclosure shouldn’t interfere with enjoying the work.

Additionally, AI-generated text published to inform the public on matters of public interest — politics, public administration, law enforcement — must be labeled as AI-generated, unless it has undergone human editorial review and is subject to editorial responsibility.

What This Is Not

Article 50 is a transparency regime, not a high-risk regime. There is no conformity assessment, no Annex IV technical documentation, no EU database registration. The obligations are about disclosure and marking — making sure people know when they’re interacting with AI and when content is AI-generated.

The high-risk obligations under Annex III (AI systems used in recruitment, credit scoring, medical diagnosis, etc.) don’t apply until December 2, 2027. Article 50 is the first major enforcement milestone, and it’s here now.

A Practical Compliance Checklist for Indian Businesses

Step 1: Determine Your EU Exposure

Ask yourself:

• Do you have any EU-based customers?
• Does your AI system interact with EU users (chatbot, virtual assistant, AI agent)?
• Are your AI-generated outputs (text, images, audio, video) accessible to EU users?
• Do you deploy emotion recognition or biometric categorization on EU individuals?

If yes to any of these, you’re in scope. If you’re not sure, assume you are and verify later.

Step 2: Conduct an AI Inventory

List every AI system your business uses or provides. For each:

• What does it do?
• Does it interact directly with people?
• Does it generate synthetic content?
• Does it use emotion recognition or biometric categorization?
• Does it produce deepfakes or public-interest text?
• Are you the provider, the deployer, or both?

Step 3: Classify and Assign Owners

For each AI system in your inventory, determine which Article 50 obligations apply and assign a compliance owner — someone responsible for ensuring the obligation is met. This should be a named individual, not a department.

Step 4: Implement Transparency Measures

• AI interaction disclosure: Add clear “You are interacting with an AI assistant” messaging to your chatbots and virtual assistants.
• Synthetic content marking: Implement machine-readable watermarking or provenance metadata for AI-generated content. If you’re using a major model provider (OpenAI, Anthropic, Google), check whether they already embed marking — many are building this in.
• Emotion recognition notice: If you deploy these systems, add clear signage or notification for exposed individuals.
• Deepfake labeling: If you produce AI-generated video or public-interest text, add visible labels disclosing AI generation.

Step 5: Document Everything

Keep records of your AI inventory, your classification decisions, your compliance measures, and your implementation timeline. If a regulator asks, you should be able to produce documentation showing you’ve assessed your obligations and taken reasonable steps to comply.

The Bottom Line

The EU AI Act’s transparency obligations are not a heavy regulatory burden for most businesses — they’re about disclosure and labeling. But they are enforceable, the penalties are significant, and the extraterritorial reach means Indian companies cannot ignore them.

The businesses that act now — conducting their AI inventory, implementing transparency measures, and documenting compliance — will be positioned to serve EU customers without legal risk. The ones that don’t will face a compliance scramble when a regulator comes knocking, or worse, a penalty that reaches 3% of their global turnover.

Need help assessing your EU AI Act exposure or implementing compliance measures? Book a CTO Technology Advisory session or explore our Digital Transformation Roadmap service to get a structured compliance plan tailored to your business.