Italy bans Mediaset deepfakes of news anchor over disclosure failures

This decision signals that European regulators will use existing GDPR frameworks to police synthetic media even as the EU AI Act takes full effect. By setting a transparency standard based on the 'inattentive' viewer rather than the informed one, the Garante creates a significant compliance hurdle for broadcasters and marketers using AI for creative or satirical purposes. Broadcasters can no longer rely solely on general licensing agreements to justify AI alterations of talent; they must ensure that synthetic modifications are clearly perceptible at every stage of the broadcast. Expect other national authorities to adopt this 'by-design' transparency requirement for synthetic video appearing in professional contexts.

The Garante’s action against Mediaset arrived just as the EU AI Act’s transparency obligations became applicable on August 2, 2026. Per The Brussels Times, these rules now mandate that any AI-generated or manipulated content resembling real people—commonly known as deepfakes—must carry clear, visible, and machine-readable labels. While the Act provides a 'lighter' disclosure regime for satirical or artistic works, the Italian decision illustrates that GDPR transparency requirements remain a parallel and potentially stricter hurdle. Fines for non-compliance under the new AI Act can reach up to €15 million or 3% of global annual turnover, according to European Commission guidelines published in late July 2026.

Regulators across the bloc are tightening their focus on synthetic content and biometric data. Per DataGuidance, the Garante issued a separate broad warning in January 2026 regarding the high risks of AI deepfakes for fraud and impersonation. Additionally, the authority fined data broker Lusha €2 million in July 2026 for violations related to lawfulness and transparency, further demonstrating its aggressive posture toward unauthorized data processing. Meanwhile, major platforms are formalizing their own compliance tools; per Google, the company added specific synthetic content attestation fields to its Display & Video 360 and Campaign Manager 360 APIs in late July 2026 to align with the new EU standards.

This enforcement trend is not isolated to Italy. DLA Piper reported in August 2026 that the European AI Office has launched tools for reporting non-compliance with Article 50 disclosure duties. While some industry players sought to delay the most stringent 'high-risk' AI rules, the transparency requirements for deepfakes and chatbots were excluded from recent pushbacks in the Digital Omnibus on AI, according to NetInfluencer. The Mediaset case sets a vital precedent: even when images are purchased through legitimate footage licenses, the lack of explicit consent from the human subject for AI alteration remains a legal vulnerability under European privacy law. EU AI Act mandates disclosure labels for generative content by December.