Adoption of Watermarking for Generative AI Systems in Practice and Implications under the new EU AI Act
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
AI-generated images have become so good in recent years that individuals often cannot distinguish them any more from "real" images. This development, combined with the rapid spread of AI-generated content online, creates a series of societal risks. Watermarking, a technique that involves embedding information within images and other content to indicate their AI-generated nature, has emerged as a primary mechanism to address the risks posed by AI-generated content. Indeed, watermarking and AI labelling measures are now becoming a legal requirement in many jurisdictions, including under the 2024 European Union AI Act. Despite the widespread use of AI image generation systems, the practical implications and the current status of implementation of these measures remain largely unexamined. The present paper therefore provides both an empirical and a legal analysis of these measures. In our legal analysis, we identify four categories of generative AI deployment scenarios and outline how the legal obligations could apply in each category. In our empirical analysis, we find that only a minority number of AI image generators currently implement adequate watermarking (38%) and deep fake labelling (18%) practices. In response, we suggest a range of avenues of how the implementation of these legally mandated techniques can be improved, and publicly share our tooling for the detection of watermarks in images.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 9 of its 72 references that are in the map. First posted on arXiv 23 Mar 2025.
Builds on
9 of 72 references.
Closest ancestors · 2
Same direction, newest first
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
Other references · 7
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 201
- 2023Typology of Risks of Generative Text-to-Image Modelscited by 55
- 2023Talkin' 'Bout AI Generation: Copyright and the Generative-AI Supply Chaincited by 46
- 2023A Representative Study on Human Detection of Artificially Generated Media Across Countriescited by 22
- 2024Transparent AI Disclosure Obligations: Who, What, When, Where, Why, Howcited by 17
- 2024What constitutes a Deep Fake? The blurry line between legitimate processing and manipulation under the EU AI Actcited by 3
Built on by
Citing papers per year: 2025: 3; 2026: 4.
7 papers.
- 2025AI-Generated Video Detection via Perceptual Straighteningcited by 34
- 2025Human-AI Governance (HAIG): A Trust-Utility Approachcited by 4
- 2026ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transportcited by 3
- 2026Authenticated Contradictions from Desynchronized Provenance and Watermarkingcited by 3
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictionscited by 1
- 2026Detecting Cognitive Signatures in Typing Behavior for Non-Intrusive Authorship Verificationcited by 1
- 2026Trustworthy AI: Ensuring Reliability and Accountability from Models to Agentscited by 0
- 2026Trustworthy AI: Ensuring Reliability and Accountability from Models to Agents9 May 2026
- 2026Authenticated Contradictions from Desynchronized Provenance and Watermarking2 Mar 2026
- 2026Detecting Cognitive Signatures in Typing Behavior for Non-Intrusive Authorship Verification26 Feb 2026
- 2026ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport6 Feb 2026
- 2025AI-Generated Video Detection via Perceptual Straightening1 Jul 2025
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions6 Jun 2025
- 2025Human-AI Governance (HAIG): A Trust-Utility Approach3 May 2025
Similar, not cited
Close in wording, no citation either way
- 2024SoK: Watermarking for AI-Generated Content
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology
- 2025Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey
- 2024SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI
- 2025Watermarking Without Standards Is Not AI Governance
- 2026"AI Watermarking": Bridging Policy Discourse and Technical Capabilities
- 2024Watermark-based Attribution of AI-Generated Content
- 2026From Forensics to Ecosystems: Rethinking Watermarks for Generative AI Oversight