# AI AVATAR PRODUCTION — EU VARIANT (Disclosure Law)

> **Region:** European Union (27 member states), EEA, post-Brexit UK
> **Primary law:** **EU AI Act, Article 50** — mandatory disclosure for AI-generated content
> **Secondary law:** UCPD (Unfair Commercial Practices Directive) + GDPR + per-country media laws
> **Penalty:** AI Act fines up to EUR 15M or 3% global turnover; GDPR fines stack on top

---

## Legal foundation — EU AI Act (Article 50)

The EU AI Act (Regulation 2024/1689) entered into force on 1 August 2024, with most transparency obligations applying from **2 August 2026**.

### Article 50 — Transparency obligations

For AI-generated or AI-manipulated content depicting real or synthetic people, places, events:

| Type | Disclosure required | Form |
|------|---------------------|------|
| Synthetic audio | YES | Machine-readable + human-readable label |
| Synthetic video (deepfake) | YES | Clearly disclose to viewers |
| AI avatar (general) | YES | Clearly disclose at the start |
| AI translations / dubbing | YES (if generating likeness/voice) | Disclose method |

### The "deepfake" obligation

Article 50(4) specifically requires deployers of AI generating "deepfake" content (defined as AI-generated or manipulated image, audio, or video resembling existing persons, objects, or events that would falsely appear to a person to be authentic) to **disclose that the content has been artificially generated or manipulated**.

> Practical implication: ALMOST EVERY AI AVATAR VIDEO falls under Article 50(4). Disclosure is not optional.

---

## Unfair Commercial Practices Directive (UCPD)

Directive 2005/29/EC bans misleading commercial practices. Updated guidance (2021, 2024) clarified:

- Hiding the commercial nature of content is a "misleading omission"
- Influencer / sponsored content must be clearly labeled
- AI-generated endorsements that imply human experience are misleading

---

## Per-country sponsored content tags

| Country | Required tag | Notes |
|---------|--------------|-------|
| Germany (DE) | "Werbung" or "Anzeige" | Strictest in EU; "Ad" alone is not enough |
| France (FR) | "Publicite" or "Communication commerciale" | Required by ARPP code |
| Italy (IT) | "Post sponsorizzato" or "Pubblicita" | IAP-enforced |
| Spain (ES) | "Publicidad" or "Patrocinado" | AEA / AUTOCONTROL |
| Netherlands (NL) | "Advertentie" or "Reclame" | Stichting Reclame Code |
| Poland (PL) | "Reklama" or "Material promocyjny" | UOKiK |
| Sweden (SE) | "Reklam" or "Annons" | Konsumentverket |
| Belgium (BE) | "Publicite" / "Reclame" (depending on region) | JEP |
| Austria (AT) | "Werbung" (same as DE) | Werberat |
| UK (post-Brexit) | "#Ad" + ASA CAP Code | Still aligned with EU practice |

> **Critical:** "#Ad" alone may be acceptable in UK but NOT in DE, FR, IT, ES. Always use the national-language tag for the audience country.

---

## GDPR — Voice and Face as Personal Data

The General Data Protection Regulation (Regulation 2016/679) classifies biometric data (voice, face) as **special category personal data** under Article 9.

### Consent requirements for voice/face cloning

- Explicit, informed, written consent (not buried in T&Cs)
- Purpose limitation — consent for specific use only
- Right to withdraw at any time
- Data minimization — only what's needed for the clone

### Consent template (GDPR-compliant)

```
VOICE / FACE LICENSING AND DATA PROCESSING CONSENT (GDPR Art. 9)

Data subject: [Full name, date of birth]
Data controller: [Company name, address, DPO contact]
Special category data processed: voice recording, facial likeness

Purposes of processing:
1. [Specific purpose — e.g. creating AI avatar marketing videos for Product X]
2. [Any secondary purpose — separate consent required]

Lawful basis: Article 9(2)(a) — explicit consent
Retention period: [X months, then secure deletion]
Recipients / processors: [List of AI tools, e.g. ElevenLabs, HeyGen]
Third country transfers: [If any — e.g. US for HeyGen — note SCC / adequacy basis]

Rights: I understand I have the right to access, rectify, erase, restrict, port,
and object to processing, and to lodge a complaint with my supervisory authority.

I consent to the above processing.
Signature: _______________
Date: [YYYY-MM-DD]
```

### Penalty stacking

The same act of cloning a voice without consent can trigger:
- GDPR fine: up to EUR 20M or 4% global turnover
- AI Act fine: up to EUR 15M or 3% global turnover
- UCPD national enforcement

---

## Penalty structure (EU AI Act)

| Violation tier | Fine cap |
|----------------|----------|
| Prohibited AI practices (Art. 5) | EUR 35M or 7% global turnover |
| High-risk system violations (Art. 16-26) | EUR 15M or 3% global turnover |
| **Transparency violations (Art. 50)** | **EUR 15M or 3% global turnover** |
| Incorrect information to authorities | EUR 7.5M or 1% global turnover |

> SMEs and startups may receive a reduced fine ceiling under Art. 99(6).

---

## Platform policy in EU

| Platform | Policy |
|----------|--------|
| Meta (FB / IG) | AI labeling required (auto-detect + manual); "Paid partnership" tag for sponsors |
| TikTok | AI-generated label required for synthetic media; Branded content toggle |
| YouTube | "Altered content" disclosure required; YPP terms apply |
| LinkedIn | Sponsored content tagging required; less stringent AI rules currently |
| X / Twitter | Synthetic media policy applies; ad labels required |

---

## Practical disclosure decision tree (EU)

```
Is the content AI-generated or manipulated?
    Yes (almost all AI avatar content) -> Article 50 disclosure REQUIRED
        + Is it commercial / sponsored?
            Yes -> ALSO national sponsorship tag (Werbung / Publicite / etc.)
        + Does it use a real person's voice or face?
            Yes -> ALSO GDPR Article 9 consent required
        + Is it a deepfake (resembles real person/event)?
            Yes -> Article 50(4) explicit deepfake disclosure
    No -> N/A (but still disclose paid sponsorship if applicable)
```

---

## Recommended disclosure templates (per country)

### Germany

```
On-screen first 3s: "Werbung — KI-Avatar"
Spoken: "Dieses Video ist Werbung und wurde mit einem KI-Avatar erstellt."
Description: "#Werbung — Bezahlte Partnerschaft mit [Brand]. KI-generierte Inhalte."
```

### France

```
On-screen first 3s: "Publicite — Avatar IA"
Spoken: "Cette video est une publicite, creee avec un avatar IA."
Description: "#publicite — Partenariat remunere avec [Brand]. Contenu genere par IA."
```

### Italy

```
On-screen first 3s: "Pubblicita — Avatar IA"
Spoken: "Questo video e una pubblicita, creata con un avatar IA."
Description: "#sponsorizzato — Partnership a pagamento con [Brand]. Contenuto generato da IA."
```

### Spain

```
On-screen first 3s: "Publicidad — Avatar IA"
Spoken: "Este video es publicidad, creado con un avatar de IA."
Description: "#publicidad — Asociacion remunerada con [Brand]. Contenido generado por IA."
```

### UK (post-Brexit)

```
On-screen first 3s: "#Ad — AI avatar"
Spoken: "This video is an ad, created with an AI avatar."
Description: "#Ad — Paid partnership with [Brand]. AI-generated content."
```

---

## EU AI Act timeline

| Date | Milestone |
|------|-----------|
| 1 Aug 2024 | AI Act enters into force |
| 2 Feb 2025 | Prohibited AI practices (Art. 5) apply |
| 2 Aug 2025 | GPAI obligations + governance start |
| **2 Aug 2026** | **Transparency obligations (Art. 50) apply — DISCLOSURE BECOMES MANDATORY** |
| 2 Aug 2027 | High-risk system obligations apply |

> If you publish AI avatar content in EU after 2 Aug 2026 without disclosure, you are non-compliant.

---

## EU-specific checklist before publishing

- [ ] Article 50 disclosure present (AI label visible + audible)?
- [ ] National-language sponsored tag used (Werbung / Publicite / etc.)?
- [ ] Voice / face clone has GDPR Art. 9 written consent on file?
- [ ] Data Processing Agreement (DPA) with AI vendor signed?
- [ ] Third country transfer (e.g. to US AI tool) covered by SCCs?
- [ ] Retention policy documented (when is the clone deleted)?
- [ ] Platform AI label applied (Meta / TikTok / YouTube)?
- [ ] If targeting children (under 16): extra parental consent layer?

---

## References

- Regulation (EU) 2024/1689 — Artificial Intelligence Act (AI Act)
- Article 50 — Transparency obligations for certain AI systems and GPAI
- Directive 2005/29/EC — Unfair Commercial Practices Directive
- Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR)
- EDPB Guidelines on consent (05/2020)
- National self-regulation bodies: DE (Werberat), FR (ARPP), IT (IAP), ES (AUTOCONTROL), UK (ASA)
- European Commission AI Act FAQ (2024-2025)

---

*EU Variant | Skill 24 (AI Avatar Production Global) | v1.0.0*
