Regulation2026-10-29

ETSI released a new Technical Specification to reduce harmful deepfake production. It treats deepfake prevention as a security and governance challenge across the AI lifecycle. The standard builds on ETSI’s EN 304 223 baseline cybersecurity requirements. It supports objectives in the EU AI Act. Required measures include risk assessments before deployment. Human oversight processes must be established. Safeguards include content filtering, AI-generated-content labelling and user warnings. Ongoing monitoring and evidence-based assessment are mandated. Test scenarios and pass/fail criteria are provided. The specification is available now.

What changed

Deepfake prevention was addressed mainly through detection after creation.

What it unlocks

Organisations can now demonstrate reduced risk of harmful deepfake production in generative AI systems.

Send this to someone who needs it

Shares the story and its sources. Nothing about you.

What does this mean for your job?

This is the story as everyone gets it. Once a week we send you the version written for your role — what changed, why it matters for the work you actually do, and one thing to try. Free while we tune it.