What constitutes a Deep Fake? The blurry line between legitimate processing and manipulation under the EU AI Act

TL;DR

This paper critically examines the EU AI Act's definitions and transparency requirements for deep fakes, highlighting ambiguities and challenges in implementation due to unclear distinctions and exceptions.

Contribution

It provides an analysis of the current legal framework, identifying gaps and ambiguities in defining and regulating deep fakes under the EU AI Act.

Findings

Deep fakes are ill-defined in the EU AI Act.

Unclear how editing features are treated under transparency obligations.

Substantial editing exceptions raise questions about content perceptibility.

Abstract

When does a digital image resemble reality? The relevance of this question increases as the generation of synthetic images -- so called deep fakes -- becomes increasingly popular. Deep fakes have gained much attention for a number of reasons -- among others, due to their potential to disrupt the political climate. In order to mitigate these threats, the EU AI Act implements specific transparency regulations for generating synthetic content or manipulating existing content. However, the distinction between real and synthetic images is -- even from a computer vision perspective -- far from trivial. We argue that the current definition of deep fakes in the AI act and the corresponding obligations are not sufficiently specified to tackle the challenges posed by deep fakes. By analyzing the life cycle of a digital photo from the camera sensor to the digital editing features, we find that: (1.) Deep fakes are ill-defined in the EU AI Act. The definition leaves too much scope for what a deep fake is. (2.) It is unclear how editing functions like Google's ``best take'' feature can be considered as an exception to transparency obligations. (3.) The exception for substantially edited images raises questions about what constitutes substantial editing of content and whether or not this editing must be perceptible by a natural person. Our results demonstrate that complying with the current AI Act transparency obligations is difficult for providers and deployers. As a consequence of the unclear provisions, there is a risk that exceptions may be either too broad or too limited. We intend our analysis to foster the discussion on what constitutes a deep fake and to raise awareness about the pitfalls in the current AI Act transparency obligations.