EU bans AI nudifier apps: up to 35 million euros in fines for AI-generated intimate images without consent
What it really says
On May 7, 2026, negotiators from the European Parliament, the Council of the EU, and the European Commission reached a provisional agreement at 4:30 AM on amendments to the EU AI Act - the so-called 'Digital Omnibus on AI.' The most significant change: from December 2, 2026, nudifier applications will be banned across the entire EU. The ban covers AI systems that generate or manipulate sexually explicit or intimate images, videos, or audio of real persons without their explicit consent. It explicitly includes AI-generated child sexual abuse material (CSAM). Crucially, the ban applies not only to apps specifically designed as nudifiers, but also to AI systems whose functionality makes such misuse reasonably foreseeable. The standard is foreseeability, not intent or labeled purpose. Violations can be punished with fines of up to 35 million euros or 7 percent of global annual turnover, whichever is higher. Providers and deployers of generative image and video systems must demonstrate that they have implemented safeguards at both the design and deployment stages: content filters, prompt-level safeguards, model fine-tuning constraints, and incident response procedures. Additionally, deadlines for high-risk AI systems were postponed: obligations for biometric systems and AI in critical infrastructure, education, employment, and law enforcement now apply from December 2, 2027, instead of August 2026 - a 16-month delay. For AI as safety components in EU-regulated products, the deadline is now August 2, 2028.
Our assessment
For anyone concerned about AI-generated deepfakes and the misuse of AI to create non-consensual intimate images, this agreement represents a significant step forward. The EU is now the first jurisdiction in the world to explicitly ban nudifier apps at the legislative level. The foreseeability approach is particularly notable: not just dedicated nudifier tools are covered, but also general-purpose AI image generators where such misuse is foreseeable. This forces all providers of generative AI to implement technical safeguards. The severe penalties of up to 35 million euros or 7 percent of revenue underscore that the EU is serious. However, legitimate questions remain: whether a ban alone is sufficient when open-source models remain available and the actual distribution of such images often occurs via non-European platforms remains to be seen. The 16-month delay for high-risk AI is also criticized as a concession to industry. On balance, however, the positive message predominates: the EU is setting clear boundaries for protection against AI abuse.
Relevance for Germany
For Germany, the nudifier ban has immediate practical significance. In recent months, cases of AI-generated nude images at German schools made headlines, with minors becoming victims of such manipulations by classmates. With the new EU ban, law enforcement agencies will have a significantly sharper instrument from December 2026 onward. The political momentum was partly triggered by AI-generated intimate images of Italian Prime Minister Giorgia Meloni circulating on social media in early May 2026. Germany's Federal Office for Information Security (BSI), which will function as the market surveillance authority for the AI Act from September 2026, will monitor compliance in Germany. For the 95 new BSI positions already created, this represents a clear priority. The postponed deadlines for high-risk AI give German companies more time to prepare but also increase uncertainty about the exact implementation timeline.
Fact check
The May 7, 2026 agreement is documented by official press releases from the European Parliament and the EU Council. The nudifier ban effective December 2, 2026, and the penalties of up to 35 million euros or 7 percent of annual revenue are consistently confirmed across all sources. The foreseeability standard that extends beyond dedicated nudifier tools is documented in legal analyses by William Fry and ComplianceHub. The postponement of high-risk AI deadlines - from August 2026 to December 2027 for Annex III systems and from August 2027 to August 2028 for Annex I systems - is unanimously reported. Formal adoption by Parliament and Council is still pending but is expected before August 2, 2026. The reference to AI-generated images of Giorgia Meloni as a political trigger is mentioned in multiple media reports.
Source
- • European Parliament 07.05.2026: AI Act: deal on simplification measures, ban on nudifier apps (europarl.europa.eu/news/en/press-room/20260427IPR42011/ai-act-deal-on-simplification-measures-ban-on-nudifier-apps)
- • Euronews 20.05.2026: The EU simplifies the AI Act and bans nudifier apps (euronews.com/my-europe/2026/05/20/the-eu-simplifies-the-ai-act-and-bans-nudifier-apps)
- • TechTimes 18.05.2026: EU Rewrites AI Act Compliance Calendar (techtimes.com/articles/316805/20260518/eu-rewrites-ai-act-compliance-calendar-hiring-healthcare-ai-gets-16-more-months-nudifier-apps.htm)
- • ComplianceHub.Wiki 05.2026: EU AI Act Omnibus May 2026 - The NCII Prohibition (compliancehub.wiki/eu-ai-act-omnibus-ncii-nudifier-ban-enterprise-compliance-2026/)
- • William Fry 05.2026: EU AI Act Omnibus Deal Reached (williamfry.com/knowledge/eu-ai-act-omnibus-deal-reached-postponed-deadlines-watermarking-compromise-and-the-nudificiation-prohibition/)
- • EU Council 07.05.2026: Artificial Intelligence - Council and Parliament agree to simplify and streamline rules (consilium.europa.eu/en/press/press-releases/2026/05/07/artificial-intelligence-council-and-parliament-agree-to-simplify-and-streamline-rules/)