AI Security Wiki GitHub

Home / EU AI Compliance / T06 Transparency Notice (AI Act Article 50 and GDPR)

T06 Transparency Notice (AI Act Article 50 and GDPR)

Verification required. This is a working template, not a regulator-approved form. Where it cites an article or a date, the citation comes from secondary sources or from memory of the legal text and is a pointer to check. This is not legal advice.

How to use: This is a blank form. Copy it and fill in the empty cells and blanks for your system. To copy it, follow the "Suggest an edit to this page" link in the footer to reach its Markdown source.

Wiki controls: AI-CTRL-039, AI-CTRL-013. Related cases: TC-L03-003, TC-L03-030. The Art. 50 duties are [Recalled], and the date question is [Conflict] (hub section 2.2). The voluntary marking and labelling code (June 2026) is a reference and does not by itself give legal protection [Reported]. Translate the notice into the language of each Member State you serve, and have a native legal reviewer check each version.

1. Short notice (point of interaction)

You are interacting with an AI system. It may make mistakes. [Company] uses it to [purpose]. You can ask for a person to review any decision that affects you. More information: [link].

2. Full notice (GDPR Arts. 13 and 14 elements, plus AI)

Element Text to complete
Controller identity and contact
DPO contact
What the AI does, in plain language
Role of human review
Personal data categories and sources
Purposes and lawful basis
Legitimate interest explained (if used)
Recipients and suppliers
Transfers outside the EEA and safeguards
Retention
Rights: access, rectification, erasure, restriction, portability, objection, withdrawal of consent
Automated decision-making: existence, the logic involved in meaningful terms, significance and consequences
Right to human intervention, to express a view, to contest
Right to explanation of an individual decision (high-risk, where applicable)
Right to complain to a supervisory authority
Limits and risks of the system

3. AI Act transparency add-ons

Case Wording or action
Chatbot or interaction Tell people they are interacting with AI, unless that is obvious
Synthetic audio, image, video, text Machine-readable marking by the provider; detection support
Deepfake The deployer discloses that the content is artificially generated or manipulated
AI-generated text on matters of public interest Disclose, unless human review and editorial responsibility apply
Emotion recognition or biometric categorisation Inform the persons exposed
Workplace high-risk system Inform workers and their representatives before use

Sample label: "This [image/audio/text] was generated or altered by AI."

4. Checklist

  • [ ] Language versions reviewed
  • [ ] Accessible before first use
  • [ ] Marking technique implemented and tested
  • [ ] Label visible and persistent for deepfakes
  • [ ] Contact and authority details checked
  • [ ] Version, date and owner recorded