EU AI Disclosure Rules Echo a 30-Year-Old Internet Problem That Never Got Solved

The EU AI Act's Article 50, taking effect August 2026, will require AI systems to label synthetic content and disclose when users are interacting with AI. A developer tested the core assumption behind such self-declaration rules by analyzing 30 days of server logs tracking AI web crawlers via their User-Agent headers. Of 1,290 attributable requests, 916 — roughly 71 percent — came from IP addresses unrelated to the AI company the crawler claimed to represent. In two striking cases, a single residential broadband address impersonated four different AI crawlers, while one Google-owned IP cycled through seven distinct crawler identities in the same period. The analysis argues that self-reported identity declarations are unreliable without independent verification, raising questions about how enforceable AI disclosure mandates will be in practice.