[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fr2UvAq3YpCFxUDwZrpft59zyAurcvhkVEx2iB6cL8ig":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":19,"created_at":20,"published_at":21,"article":22,"tags":26,"podcasts":45},"d444fef9-0afb-4861-8889-6f427dd37df2","italian-dpa-warns-rti-for-ai-deepfake-broadcast-without-adequate-disclaimers","4bfd4f8f-d951-4984-b589-d59bd593db68","Italian DPA Warns RTI for AI Deepfake Broadcast Without Adequate Disclaimers","RTI S.p.a. aired AI-generated satirical deepfake content featuring journalist Enrico Mentana without sufficiently clear disclaimers, causing viewers to potentially misattribute statements to him and damaging his reputation. The root failure was inadequate transparency governance around AI-generated media, a rapidly emerging compliance obligation under GDPR and emerging AI regulations. This case underscores that organizations producing or broadcasting synthetic media must treat disclosure not as an afterthought but as a legal and ethical requirement. Reputational harm to identifiable individuals from AI-generated content can constitute a personal data processing violation, making media companies directly accountable to data protection authorities.","**Immediate actions:**\n- Establish a mandatory, prominently displayed disclaimer policy for all AI-generated or AI-manipulated content before broadcast or publication.\n- Audit existing AI-generated content in your media library to identify any pieces lacking adequate viewer disclosure.\n\n**Policy & Governance improvements:**\n- Develop a formal AI Content Ethics Policy that defines disclosure standards, approval workflows, and accountability roles for synthetic media production.\n- Require a Data Protection Impact Assessment (DPIA) before publishing AI-generated content featuring identifiable individuals.\n- Designate a responsible editorial owner accountable for compliance review of all AI-assisted productions.\n\n**Training & Awareness measures:**\n- Train editorial, production, and legal staff on GDPR obligations related to AI-generated content and the reputational risks of insufficient disclosure.\n- Implement regular regulatory horizon-scanning sessions to stay current with evolving AI Act and DPA guidance on synthetic media.",[12,13,14,15,16,17,18],"GDPR Article 5(1)(a) – Lawfulness, fairness, and transparency","GDPR Article 9 – Processing of special categories of data","GDPR Article 35 – Data Protection Impact Assessment (DPIA)","EU AI Act – Transparency obligations for AI-generated content (Article 50)","NIST AI RMF – GOVERN 1.2, MAP 5.1 (AI risk transparency)","CIS Control 14 – Security Awareness and Skills Training","ITIL – Service Design: Policy and compliance management","published","2026-09-02T16:21:05.728531+00:00","2026-09-02T16:21:05.63+00:00",{"id":7,"url":23,"slug":24,"title":25},"https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=Garante_per_la_protezione_dei_dati_personali_(Italy)_-_577\u002F2026&diff=52884&oldid=0","garante-per-la-protezione-dei-dati-personali-italy-577-2026-7710b1","Garante per la protezione dei dati personali (Italy) - 577\u002F2026",[27,33,39],{"id":28,"name":29,"slug":30,"description":31,"color":32},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":34,"name":35,"slug":36,"description":37,"color":38},"c0dcc566-3654-4d70-8ede-262a198e732f","Regulatory Compliance","regulatory-compliance","GDPR, NIS2, DORA, sector-specific violations","#ec4899",{"id":40,"name":41,"slug":42,"description":43,"color":44},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[]]