The EU Digital Creativity Integrity Act, provenance, and disclosure

The European Union takes a different approach, characteristic of EU regulatory style. Rather than prohibiting unauthorised AI voice work outright, the EU Digital Creativity Integrity Act, expected to come into force across the member states in late 2026 and early 2027, requires disclosure and provenance documentation. The legislative process has been moving since 2024, drawing on the AI Act's framework but specifically scoped to creative work.

What the DCIA does

The DCIA requires that any AI-generated creative work, including voice work, be accompanied by a provenance manifest. The manifest must include the source training data, the model used, the consent documentation, and the chain of authorisation. Distribution platforms must surface the manifest to end users in machine-readable form.

The approach is structurally different from the US state laws. The DCIA does not say you cannot do AI voice work without consent; it says you cannot distribute AI voice work without disclosure. The market enforcement is then via consumers, journalists, regulators, and competition authorities, who can audit the manifest and act when it is missing, incomplete, or misrepresented.

Why disclosure-first is the right framework for posthumous voice

Prohibition-style laws like the ELVIS Act and AB 1836 are well-suited to protecting the rights holder. Disclosure-style laws like the DCIA are well-suited to protecting the listener and the broader culture.

For posthumous voice work, both are needed. The rights holder needs the prohibition-style protection so that unauthorised use is illegal. The listener needs the disclosure-style transparency so that they know what they are hearing. The DCIA fills the second need at scale.

Estates and institutions in the EU benefit from the manifest requirement, because it gives them documented evidence of compliant practice. Vendors who operate to the manifest standard become preferred suppliers; vendors who cannot produce a manifest are effectively excluded from the EU market.

What the DCIA does not do

The DCIA does not directly prohibit anything. A bad-faith actor can produce a manifest containing falsified data and proceed. The Act is enforcement-dependent on audit and challenge. The cost of doing things properly is higher than the cost of cutting corners.

But, and this is important, the manifest gives a paper trail. If something goes wrong, the manifest is evidence in court. The DCIA does not stop bad actors; it makes them traceable. Combined with the prohibition-style protections in jurisdictions like Tennessee and California, the global landscape for AI voice work is now: you must have consent (US states), and you must disclose what you did (EU).

Practical implications

For UK and European clients, particularly cultural institutions and any organisation with EU presence, DCIA compliance is becoming a procurement requirement. Foundation grants increasingly reference DCIA-compatible practice. Major museum acquisitions and exhibition commissions now ask for the provenance manifest as standard. The BBC, V&A, Serpentine, ZKM, and similar institutions all operate to procurement standards that anticipate the Act's coming-into-force.

The DCIA also affects how vendors structure their work. A vendor distributing voice AI output without a manifest is exposed to enforcement once the Act is in force. A vendor whose manifest contains the full chain of consent, source data, model details, and use scope is positioned to be the preferred supplier across the EU market.

What a compliant manifest contains

Drawing on draft text of the DCIA and the studio's own provenance methodology, a compliant manifest includes at minimum:

Source training data inventory, with hash, provider, and consent reference for every file.

Model architecture and version, with hyperparameters and software environment.

Consent documentation, with signatures and chain of authority.

Scope of authorised use, enumerated.

Retirement protocol and trigger conditions.

Audit log of every inference or deployment.

Cryptographic signing of the manifest at each amendment.

Machine-readable format (JSON-LD or equivalent) for distribution-platform consumption.

Where this fits

Voice Estate, the methodology Alabo.Studio uses, produces a manifest of this kind for every commission. The manifest schema is published as an open standard so that other practitioners can adopt it and so that distribution platforms have a stable target to read.

The DCIA represents the EU's bet that transparency, rather than prohibition, is the right governance approach for AI-generated creative work. The bet may be right or wrong; either way, it produces an artefact-level paper trail that benefits rights holders, listeners, and practitioners who do the work properly. Practitioners who treat the manifest as the deliverable, not as an afterthought, become the trusted suppliers in the EU market.