Question · Territorial scope

Does Article 50 Apply Outside the EU?

Often, yes — but not automatically. Like the GDPR, the EU AI Act reaches some businesses outside the EU. Whether it reaches yours depends on your role and on whether your AI system's output is used in the EU — and for ordinary websites, part of that question is still unsettled.

Scan for free

Three ways a non-EU business can be in scope

Article 2 of the AI Act sets its scope. For the kinds of AI systems Article 50 covers, three routes matter:

Placing AI on the EU market — Art. 2(1)(a)

Providers placing AI systems on the market or putting them into service in the EU are covered irrespective of whether they are established in the EU or in a third country.

Output used in the EU — Art. 2(1)(c)

Providers and deployers established or located in a third country are covered where the output produced by the AI system is used in the EU.

An EU establishment — Art. 2(1)(b)

Deployers established or located in the EU are covered — so a non-EU group's EU subsidiary running the same chatbot is in scope in its own right.

What the “output used in the EU” test means

Article 2(1)(c) is the route that reaches furthest. Recital 22 explains the reasoning: to prevent circumvention and to protect people located in the EU, the Act should apply to providers and deployers established in a third country to the extent the output of their AI systems is intended to be used in the EU.

For a website, the output is what your visitors experience: the chatbot's replies, the AI-generated images, the AI-written text. If that output is aimed at and used by people in the EU — you sell to EU customers, publish in EU languages, or run your chatbot for EU users — there's a strong argument that it is used in the EU and Article 50 applies.

Article 50 itself doesn't change based on location: the same 50(1), 50(2) and 50(4) obligations apply to an in-scope non-EU business as to an EU one.

What's clear — and what isn't

Clear from the text of the Act

✔Being established outside the EU does not, by itself, take you out of scope
✔Both providers and deployers outside the EU can be covered when their AI system's output is used in the EU
✔Non-EU providers placing AI systems on the EU market are covered regardless of where they're established
✔Purely personal, non-professional use by individuals is excluded (Art. 2(10))

Not yet settled

The Act doesn't say whether output counts as "used in the EU" merely because a website is accessible from the EU, or only when it's directed at EU users. Article 2(1)(c) says "used"; Recital 22 says "intended to be used". No court has ruled on how this applies to general-purpose websites, and Article 50 has only applied since August 2, 2026.

A non-EU site with incidental EU traffic and no EU-facing activity is in a genuine grey zone. A non-EU site actively serving EU customers is much less likely to be. We'd rather tell you that honestly than give you a confident yes or no we can't back up.

The practical view

If EU users are a meaningful part of your audience, treat Article 50 as applying. The fixes are usually a line of disclosure text or a metadata attribute, and the exposure for getting it wrong is up to €15 million or 3% of worldwide annual turnover (see penalties explained). If you're in the grey zone and the stakes are high, this is a question for a qualified lawyer.

Either way, a free scan shows which Article 50 gaps are visible on your public pages today. For which obligations sit with you as a provider or deployer, see transparency obligations under Article 50.

Frequently Asked Questions

Does Article 50 apply to companies outside the EU?

It can. Article 2(1)(c) of the AI Act extends the Act to providers and deployers established outside the EU where the output produced by their AI system is used in the EU, and Article 2(1)(a) covers non-EU providers that place AI systems on the EU market. Being based outside the EU does not, on its own, take you out of scope.

Does having EU visitors automatically bring my website into scope?

That's the open question. Article 2(1)(c) asks whether the AI system's output is used in the EU; Recital 22 describes output intended to be used in the EU. How authorities will apply that to a website that anyone can visit hasn't been settled yet, so a confident yes or no for every site isn't possible today.

Are personal, non-commercial users covered?

No. Under Article 2(10), the AI Act does not apply to the obligations of deployers who are natural persons using AI systems in the course of a purely personal non-professional activity.

Is this legal advice?

No. Article50.io provides an automated technical assessment of your website's public-facing content against Article 50's transparency requirements, not legal advice. For a determination of your specific legal obligations or compliance strategy, consult a qualified lawyer.

Check your site automatically

Article50.io is an automated Article 50 transparency assessment platform that scans websites for potential EU AI Act transparency obligations and provides remediation guidance, implementation instructions, and compliance-ready disclosure language.

The free scan shows your single most severe finding in about 30 seconds — no signup, public pages only.