EU AI Act obligations for general-purpose AI models apply

On August 2, 2025, a critical milestone of the EU Artificial Intelligence Act comes into force: obligations specifically governing general-purpose AI (GPAI) models become legally enforceable. The EU AI Act, which entered into force in August 2024, follows a phased implementation schedule, and this date marks one of the most consequential phases for the technology and advertising industries. GPAI models — large-scale foundation models such as those underpinning generative AI tools used for content creation, targeting, and audience analysis — must now comply with transparency requirements, technical documentation mandates, and copyright compliance obligations. Models deemed to pose systemic risk face additional scrutiny including adversarial testing and incident reporting to the European AI Office. The EU AI Act is a risk-based regulatory framework that categorizes AI applications by their potential for harm. It outright bans certain practices — such as subliminal manipulation, social scoring, and real-time biometric surveillance in public spaces — while imposing strict requirements on high-risk AI systems used in areas like employment, credit, and critical infrastructure. For the advertising technology sector, the most immediately relevant provisions include requirements to disclose AI-generated or AI-manipulated content (including synthetic media, deepfakes, and AI-written ad copy), transparency obligations around automated decision-making, and restrictions on certain forms of behavioral profiling and emotional inference. The Act also requires that AI systems interacting with humans identify themselves as such, directly impacting AI-powered chatbots and conversational ad formats. This regulatory milestone is significant for the AdTech ecosystem because it imposes enforceable legal standards on the AI tools that have rapidly become central to advertising workflows — from programmatic bidding algorithms and AI-generated creative assets to predictive audience modeling and AI-driven personalization engines. Non-compliance can result in fines of up to €35 million or 7% of global annual turnover for the most serious violations, creating substantial legal and financial risk for ad tech platforms, agencies, and brands operating in or targeting EU markets.

The enforcement of GPAI obligations under the EU AI Act creates a significant compliance inflection point for the AdTech industry, particularly for companies that have aggressively integrated generative AI into their product stacks. Demand-side platforms, supply-side platforms, creative automation tools, and data management platforms that leverage large language models or other foundation models for targeting, optimization, or content generation must now ensure their AI systems meet EU transparency and documentation standards. This is likely to accelerate a bifurcation in the market between well-resourced players — major holding companies, large DSPs, and cloud-based ad tech giants — who can absorb compliance costs, and smaller independent vendors who may struggle with the technical and legal overhead. The requirement to label or disclose AI-generated advertising content has direct implications for creative production pipelines. Advertisers and agencies using generative AI tools to produce ad copy, images, video, or audio for EU audiences must implement disclosure mechanisms, potentially affecting consumer perception and engagement metrics. This could slow adoption of fully automated creative generation in regulated markets or push vendors to build disclosure features into their platforms as a competitive differentiator. Identity and audience targeting solutions that rely on AI-driven inference — particularly emotional targeting, interest modeling from behavioral data, or lookalike modeling — face heightened scrutiny under both the AI Act and its interaction with GDPR. Competitively, US-headquartered AdTech firms with significant EU revenue exposure face the greatest near-term compliance burden, while EU-native players may benefit from having built compliance into their architectures earlier. The regulation is also expected to drive demand for AI governance, auditing, and compliance tooling — a growing adjacent market. Longer term, the EU AI Act is likely to serve as a global regulatory template, similar to GDPR, meaning AdTech companies that achieve compliance early may gain a structural advantage as similar frameworks emerge in other jurisdictions including the UK, Canada, and potentially the United States.