Transparency rules and AI disclosure

1. Why disclosure arrived when it did

Three developments converged. Generated text and images became cheap enough to use at scale, so the question of what was machine-made stopped being hypothetical. Distribution moved onto ranked surfaces where readers cannot see who produced what or why it reached them. And a sequence of European instruments — on data protection, on platform governance, on artificial intelligence and on media pluralism — established transparency as a general regulatory technique rather than a sector-specific one. For newsrooms the practical effect is that disclosure is moving from a voluntary marker of good practice towards an expected feature of publishing, with obligations that vary by role and by material.

2. The EU AI Act in outline

Regulation (EU) 2024/1689 takes a risk-based approach, banning a small set of practices, imposing substantial requirements on high-risk systems, and applying lighter transparency duties to certain other uses. The provisions most relevant to publishing concern transparency: informing people when they are interacting with an AI system in specified circumstances, machine-readable marking of synthetic content, and disclosure of deep-fake material, with particular provision for material forming part of an evidently artistic or editorial work. Obligations phase in over time and depend on whether you are a provider or a deployer. Read the current text and take qualified advice.

3. The Digital Services Act and news

Regulation (EU) 2022/2065 governs intermediary services rather than publishers as such, but it shapes the environment news travels through. It sets rules on notice and action, statements of reasons for content decisions, advertising transparency and repositories, disclosure of the main parameters of recommender systems, and — for very large platforms and search engines — systemic risk assessment and vetted researcher access to data. For a newsroom the practical uses are indirect: the transparency databases and advertising repositories are reportable sources, and the recommender-parameter duties provide a useful template for a publisher’s own voluntary ranking statement.

4. Data protection and journalism

The GDPR applies to journalistic processing, but Article 85 requires member states to reconcile it with freedom of expression and information, and Irish law provides for exemptions where compliance would be incompatible with journalistic purposes. This is a genuine exemption with genuine limits: it does not cover a publisher’s ordinary commercial processing, its subscriber records, its measurement or its marketing. In Ireland the supervisory authority is the Data Protection Commission. The exemption is also fact-specific rather than a general shield, which is why editorial processing decisions with a privacy dimension are worth taking advice on before publication rather than after a complaint.

5. The Irish media framework

Coimisiún na Meán was established under the Online Safety and Media Regulation Act 2022 as the regulator for broadcasting, video-on-demand and online safety, taking over functions previously held by the Broadcasting Authority of Ireland, whose codes continue to matter as the legacy reference point for broadcast standards. Alongside statutory regulation, the Press Council of Ireland and the Office of the Press Ombudsman operate an independent complaints system for member publications under the Code of Practice for Newspapers and Magazines. Naming these bodies neutrally in reporting is normal; claiming membership, recognition or supervision by any of them without it is not.

6. Writing a disclosure that means something

A useful disclosure answers three questions: what was machine-produced, at which stage, and who verified it. Compare “this article used AI” with “the interview transcript was produced by automatic speech recognition and checked line by line against the recording by the reporter”. Only the second lets a reader assess the reliability of what they are reading. Disclosures should sit with the item, use consistent wording across the publication, and reference a stable policy page that explains the threshold. Wording that changes from item to item reads as improvisation and undermines the credibility the disclosure was meant to build.

7. Setting a threshold and defending it

Every publisher needs a line between assistance that is disclosed and assistance that is not, because disclosing spellcheck would render the label meaningless. Most thresholds turn on whether a machine produced material that reaches the reader substantially as generated. Transcription, translation and summarisation of supplied documents typically fall below the line when fully checked; generated prose, synthetic voice and generated imagery typically fall above it. Whatever line a desk draws, it should publish it, date it, and change it deliberately with a visible revision note rather than silently as tools evolve.

8. Keeping a record

Transparency claims that cannot be evidenced are a liability. A lightweight compliance log — one row per item, recording tools used, stage, verifier, disclosure applied and any correction — costs little and answers a complaint in minutes rather than days. Alongside it, keep a dated register of policy versions, so it is possible to say which rules were in force when a given item was published. Neither record needs to be public. Both need to exist before the first serious challenge, because reconstructing them afterwards is exactly what an accountability process is designed to test.

Instruments a European newsroom encounters

This table is an orientation aid compiled from public sources and is not legal advice. Scope, timing and applicability depend on the specific service and material; confirm the current position with a qualified professional.

Disclosure review

• The disclosure threshold is written down, dated and published.
• Disclosure wording is consistent across the publication.
• Each disclosure names the stage, the artefact and the human check.
• Synthetic voice and generated imagery are labelled in the asset itself.
• Labels survive syndication and republication.
• A compliance log records tools, stage, verifier and disclosure per item.
• A dated register shows which policy version applied to which period.
• No claim of membership, recognition or supervision by any regulator is made.
• Legal questions are referred to a qualified professional rather than resolved in-house.

Transparency is a practice, not a page. The register and the log are what make the page true six months after it was written.

Questions readers ask