Article 50 transparency obligations apply from 2 August 2026. Any organisation using AI to reach EU audiences is in scope, regardless of where it is based.
The EU AI Act is the world's first comprehensive AI regulation. It applies to any organisation using AI in a professional context that reaches European audiences, wherever that organisation is based.
Start the readiness assessmentRead the guidance
In force
August 2025
GPAI model obligations live
Transparency rules
August 2026
Article 50 applies
Maximum fine
€15m or 3%
Of global annual turnover
01
The EU AI Act takes a risk-based approach. AI systems are classified into four tiers, with different obligations at each level.
| Risk tier | What it covers | What it requires | Relevance to tourism |
|---|---|---|---|
| Unacceptable risk | AI used for social scoring, subliminal manipulation, real-time biometric surveillance in public spaces, emotion recognition in workplaces | Prohibited outright. No exemptions. | No standard tourism use case falls here. Emotion recognition tools for customer service might. |
| High risk (Annex III) | AI in employment decisions: recruitment, performance management, task allocation. Also: public benefit systems, critical infrastructure, education | Risk assessments, human oversight mechanisms, technical documentation, registration in a public database | Applies to any tourism organisation using AI in hiring or HR performance tools. Higher compliance burden. Seek legal advice. |
| Transparency risk | AI-generated or AI-manipulated content; AI systems that interact with people | Disclose that content is AI-generated. Inform users at point of first interaction with an AI system. | The primary tier for most tourism organisations. Applies to content marketing, chatbots, recommendation engines, visitor-facing AI tools. Enforceable from August 2026. |
| Minimal or no risk | Most AI systems not captured by the above: spam filters, AI-enabled spreadsheets, search recommendations in limited contexts | No specific obligations. Voluntary codes of conduct encouraged. | Many internal productivity uses of AI fall here. |
02
The obligations that apply most widely to tourism organisations sit in the transparency risk tier. The assessment tool below covers these in detail. The areas of exposure are as follows.
August 2026 · Article 50
Any image, video or audio that is artificially generated or manipulated must carry disclosure. AI-generated text published to inform the public on matters of public interest must be labelled.
August 2026 · Article 50
Deployers of AI systems that interact with people must inform users at the point of first interaction that they are talking to an AI. The disclosure must be clear and distinguishable, not buried in documentation.
August 2026 · Annex III
AI used in hiring, candidate screening, performance evaluation or task allocation is classified as high risk. The compliance burden is substantially heavier than for the transparency tier. Legal advice should be obtained if this applies.
Already in force · Article 4
Organisations must ensure staff working with AI systems have adequate understanding of what those systems do and what the risks are. This obligation has applied since February 2025.
03
The Act applies in phases. Select any milestone for detail.
1 August 2024Entry into force
PassedThe EU AI Act enters into force
The Regulation was published in the Official Journal of the European Union and entered into force. The phased application timeline begins from this date. Most provisions do not yet apply, the Act is in force but not yet operative for most obligations.
2 February 2025Prohibitions + literacy
ActiveUnacceptable risk practices prohibited. AI literacy obligations apply.
The banned practices under Article 5 became enforceable: social scoring, subliminal manipulation, emotion recognition in workplaces and certain biometric systems are prohibited. Article 4 AI literacy obligations also apply from this date, organisations must ensure staff working with AI have adequate understanding of what those systems do and what the risks are.
2 August 2025GPAI models
ActiveGeneral-purpose AI model obligations apply.
Obligations for providers of large general-purpose AI models (including frontier models like GPT-4, Claude, Gemini and equivalents) apply from this date. Tourism organisations using these models via API should satisfy themselves that their provider has met their obligations as a provider. GPAI providers are required to publish technical documentation and comply with copyright law regarding training data.
2 August 2026Main application date
ApproachingTransparency obligations, high-risk rules and enforcement with fines begin.
This is the primary compliance deadline for most tourism organisations. Article 50 transparency obligations become enforceable: AI-generated content must be labelled; users must be informed when they interact with an AI system. High-risk AI system obligations (Annex III), including those covering AI in employment decisions, also apply. Fines of up to €15 million or 3% of global annual turnover become enforceable from this date. The Digital Omnibus simplification proposal has introduced some adjustments for SMEs, but Article 50 transparency obligations are not affected by these simplifications.
2 August 2027Regulated products
FutureHigh-risk AI embedded in regulated products.
AI systems embedded in products governed by existing EU product safety legislation (medical devices, transport systems, aviation safety equipment) have a further extended transition period to 2 August 2027. Most tourism AI use cases are not affected by this extension. It is relevant to tourism organisations operating regulated transport services or medical wellness facilities where AI is embedded in regulated product categories.
04
The DTTT AI Framework is designed to align with the EU AI Act's transparency, literacy and governance requirements. The four Tier 1 disclosure models and three Tier 2 organisational instruments map directly to the Act's obligations for tourism organisations.
EU AI Act obligation
Disclose when content is AI-generated or AI-manipulated. Label AI-generated images, video and text published to inform the public. Article 50(4)
Framework instrument
Transparency Model + Content Integrity Model
Grades AI involvement A through E. The Content Integrity Model classifies risk across intervention, consent and disclosure axes and produces a machine-readable three-part disclosure code.
EU AI Act obligation
Inform users when they are interacting with an AI system. Disclosure must be clear and distinguishable, not buried in documentation. Article 50(1)
Framework instrument
Content Integrity Model
The disclosure axis of the Content Integrity Model maps directly to Article 50(1) requirements. The model produces a classification (Clear, Caution, High Risk or Not Recommended) applicable to visitor-facing AI systems.
EU AI Act obligation
Ensure staff working with AI have sufficient AI literacy. Document the approach. Article 4
Framework instrument
AI Capability Model + AI Maturity Model
The Capability Model produces a structured profile across 16 named capabilities. The Maturity Model gives the organisational baseline. Both produce documented outputs that can serve as evidence of a structured literacy approach.
EU AI Act obligation
Maintain governance and oversight of AI use. Human review mechanisms required where AI informs decisions. Article 26
Framework instrument
AI Transparency Model + AI Maturity Model
The Transparency Model provides the grading structure for individual deliverables. The Maturity Model's Strategic Vision dimension assesses governance readiness. Together they provide the documented governance infrastructure Article 26 requires.
05
This assessment maps your organisation's current practices against the EU AI Act's key obligations for tourism organisations. It covers content and media, visitor-facing systems, employment AI, AI literacy and governance. It takes around ten minutes to complete and produces a prioritised action list with specific Article references.
This is a structured starting point, not a legal compliance audit. For high-risk AI category obligations, seek specialist legal advice.
EU AI Act readiness · Your results
Based on your responses, here is where your organisation stands and what to address.
Reference code—Save this to share your assessment profile
DTTT can help you go further. Whether you need structured support adopting the framework, facilitated team assessments, or a governance programme built around your organisation's specific profile, we work with destinations at every stage.
This page provides practical guidance and does not constitute legal advice. EU AI Act references current as of May 2026.
