Claude AI Gets Global Watermarks to Prove What’s AI-Generated

Why in the News

Content generated by Claude will carry a machine readable marking, after Anthropic signed the transparency Code of Practice under Article 50(2) of the European Union Artificial Intelligence Act. The change extends watermarking from images and video to text itself, where the mark travels with copied text and detection is not reliable. The obligation arises from one regional law but the rollout is global.

What is Anthropic’s new watermarking system?

1. Trigger: The policy was introduced after Anthropic signed the EU AI Act’s Article 50(2) Code of Practice on Transparency of AI Generated Content.
2. Two forms of marking: Watermarks are embedded in text content produced by Claude. Signed provenance metadata is attached to supported files in formats such as .svg, .png and .jpg.
3. Applied at the model level: The text watermark is invisible to users. Anthropic has confirmed that it will not affect Claude’s response.
4. Persistence: The watermark is part of the text, so it travels with the text when it is copied and pasted elsewhere, and may persist through some editing.
5. Coverage of surfaces: Output from the Claude Platform (API), Claude, Claude Code, Claude Cowork and Claude Tag is set to carry the embedded watermarks. The same applies when Claude models are accessed through AWS, Google Cloud and Microsoft Foundry.
6. Detection still incomplete: Anthropic is still working on letting external parties detect the markings, and the rollout announcement did not reveal full technical details.

What is Article 50(2) of the European Union Artificial Intelligence Act?

1. Substance: It requires providers of AI systems that generate synthetic text, audio, image or video to mark their outputs in a machine readable format and make them detectable as artificially generated.
2. Code of Practice route: Signing the associated Code of Practice is the voluntary compliance instrument through which providers demonstrate that they meet the transparency duty.

What is signed provenance metadata?

1. About: It is a cryptographically signed record attached to a file that states the file’s origin and the tool that produced it, so a later viewer can verify where it came from.
2. Weak point: The record is stripped when the file format is converted, which breaks the chain of verification.

Why does watermarking text change the stakes for ordinary users?

1. Everyday written work is now in scope: Professional emails, personal messages, school assignments and workplace deliverables that could once pass as human made may carry an AI watermark.
2. Marginal AI involvement still marks the file: The mark can attach even where Claude’s involvement was close to negligible.
3. Second hand exposure: A human made file that is proofread, translated, summarised or converted by someone else using Claude can still carry a mark in the final output.
4. Non users are exposed: A person who never uses the tool can end up holding marked text produced by a collaborator, which has put non users on edge alongside users.
5. Workflow effect: Millions of customers are reconsidering their use of AI tools and debating at what point human content becomes AI content.

Why does the mark not settle the question of authorship?

1. Both error types admitted: Detecting a Claude mark does not confirm that the work was created by AI. The absence of a mark does not confirm that the work was fully human made.
2. Short text: Short text lengths can throw off the result, since a watermark needs sufficient text to be carried.
3. Post processing edits: Content changes made after Claude processed the text can degrade the signal.
4. Format conversion: Metadata is stripped when a file format is converted, removing the provenance record for images and documents.
5. Unsupported surfaces: Use of a Claude offering that does not yet support AI marking leaves the output unmarked.

What new risks has the announcement itself created?

1. A removal market: Multiple dubious websites offering watermark “removal” or “clean up” services came online within days of the announcement.
2. A repeat of the detector cycle: The earlier rise of AI text detectors was followed by AI text humanisers built to deceive those same detectors.
3. Reputational damage already recorded: Detector outputs have been involved in cases leading to cancelled book deals and social media trolling for authors and bloggers.
4. Tool quality: AI text detection tools remain experimental, fallible and prone to errors, yet are treated as evidence.
5. Credential risk: Users now face the prospect that their own tool damages their professional credentials.

Why do watermarks work for images but not yet for text?

1. Images and video are the solved case: Watermarks give regulators, fact checkers and journalists a reliable way to verify the origin of an image or video and trace it to a specific provider.
2. Text is not: Accurately detecting AI generated text remains uncharted territory, so the same verification logic does not transfer.
3. Circulation outruns labelling: AI generated content is circulated thousands of times on social media unchecked, as content moderation rules have been loosened across the Meta family of apps and X.
4. Users do not look: The average internet user scrolling on a phone misses even visible AI watermarks, and an invisible mark is weaker still.
5. Regulator dependence: A tangible reduction in misinformation and deepfakes requires technology providers and regulators to act together, not a marking standard alone.

Challenges to AI content watermarking

1. Adversarial removal: Paraphrasing, translation and dedicated stripping tools defeat statistical text watermarks. e.g. the removal and clean up websites that appeared within days of the Anthropic announcement.
2. No interoperable standard across providers: A mark from one model tells nothing about content from another, so an unmarked file proves nothing. e.g. the Coalition for Content Provenance and Authenticity (C2PA) standard is adopted by some providers and open source models remain outside it.
3. False accusation of students and writers: Detector outputs are used as disciplinary evidence despite admitted error rates. e.g. OpenAI withdrew its own AI Text Classifier in July 2023 citing low accuracy.
4. Open weight models cannot be compelled: A provider level obligation does not reach models that run on a user’s own machine. e.g. freely downloadable open weight models can generate unmarked text offline.
5. Jurisdictional mismatch: A duty created by one region’s law governs the provider, not the harm suffered elsewhere. e.g. an Indian user injured by unmarked synthetic content depends on a European regulator’s enforcement.
6. Labelling does not stop the harm: A deepfake remains persuasive even when correctly labelled, because the first viewing shapes belief. e.g. the November 2023 deepfake video of an Indian film actor circulated widely before any advisory was issued.

Conclusion

A transparency duty designed for synthetic images and video has been extended to text, where detection is unreliable and the mark attaches to work that may be substantially human. The result is a signal that users cannot see, verify or contest, carrying real reputational consequences. Labelling will reduce misinformation only if detection tools become accurate and platforms act on the marks, neither of which is settled.

Artificial Intelligence Governance in India

1. About: AI governance covers the rules on how AI systems are built, trained, deployed and labelled, and who is liable when they cause harm.
2. No dedicated statute: India regulates AI through existing law and subordinate rules rather than a single AI Act, unlike the European Union’s risk tiered model.
3. Scale: India has one of the largest AI talent pools and developer bases globally and is among the largest markets for consumer AI applications.
4. Institutional anchor: The Ministry of Electronics and Information Technology (MeitY) is the nodal ministry, working through the IndiaAI Mission and advisories to intermediaries.
5. Global positioning: India hosted the AI Impact Summit in New Delhi in February 2026, the successor to the AI Safety Summit series, and is a founding member of the Global Partnership on Artificial Intelligence (GPAI).

Laws and Rules Governing AI Generated Content in India

1. Information Technology Act, 2000: The parent statute for electronic records, intermediary liability and cyber offences.
2. Section 79 grants intermediaries safe harbour subject to due diligence, which is the hook for content labelling duties.
3. Section 66D penalises cheating by personation using a computer resource, used against deepfake impersonation.
4. Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021: Impose due diligence, grievance redress and takedown timelines on intermediaries and significant social media intermediaries.
5. Amendment Rules on synthetically generated information, 2026: Require platforms to label synthetically generated information prominently and to obtain user declarations on whether uploaded content is synthetic.
6. Digital Personal Data Protection Act, 2023: Governs processing of personal data, including data used to train and prompt AI models, with consent and purpose limitation duties.
7. Bharatiya Nyaya Sanhita, 2023: Covers forgery, defamation and obscenity offences that synthetic media can constitute.
8. Copyright Act, 1957: Governs authorship and infringement questions raised by training data and machine generated output.

Back2Basics: European Union Artificial Intelligence Act

1. What it is: The world’s first comprehensive horizontal law on artificial intelligence, adopted by the European Union.
2. Entry into force: 1 August 2024, with obligations applying in phases.
3. Approach: A risk based classification into unacceptable risk, high risk, limited risk and minimal risk, with duties scaled to the tier.
4. Prohibited practices: Social scoring by public authorities, untargeted scraping of facial images and manipulative techniques exploiting vulnerabilities.
5. Article 50: Sets transparency obligations for AI systems that interact with people or generate synthetic content, including machine readable marking of outputs.
6. Extraterritorial reach: It binds providers placing systems on the EU market irrespective of where they are established, which is why compliance measures are rolled out globally.

Government Initiatives

1. IndiaAI Mission: Approved in March 2024 with an outlay of about Rs 10,371.92 crore, built on seven pillars covering compute capacity, innovation centre, datasets platform, application development, future skills, startup financing and safe and trusted AI.
2. Safe and Trusted AI pillar: Funds work on deepfake detection, algorithmic bias audits and AI governance frameworks, and underpins the proposed AI Safety Institute.
3. National Strategy for Artificial Intelligence, 2018: NITI Aayog’s framework identifying healthcare, agriculture, education, smart mobility and smart cities as focus sectors under the AI for All approach.
4. Bhashini: The National Language Translation Mission building open speech and translation datasets across Indian languages.
5. Responsible AI for Youth: A skilling programme for government school students to build AI literacy at scale.
6. Digital India Act consultations: Proposed successor to the Information Technology Act, 2000, intended to address emerging technologies including AI and deepfakes.

Key Facts about AI Content Provenance

1. C2PA: The Coalition for Content Provenance and Authenticity is the main cross industry technical standard for attaching tamper evident provenance to media files.
2. SynthID: Google’s watermarking system for AI generated images, audio, video and text.
3. Deepfake: Synthetic media in which a person’s likeness or voice is replaced or generated, typically using generative adversarial networks or diffusion models.
4. Turing Test: The 1950 benchmark for machine indistinguishability from a human, now inverted by the problem of detecting machine authorship.
5. GPAI: The Global Partnership on Artificial Intelligence was launched in June 2020 with India as a founding member, and India held its chair in 2024.

Challenges in AI Governance in India

1. No binding statutory framework: India governs AI through advisories and subordinate rules that carry weaker enforceability than a statute. e.g. the March 2024 MeitY advisory on under tested AI models was revised within weeks after industry objections.
2. Compute dependence: Frontier model training depends on imported accelerators and foreign cloud capacity. e.g. the IndiaAI Mission empanelled over 18,000 graphics processing units in its first round in January 2025 to close this gap.
3. Data protection enforcement capacity: The Data Protection Board must supervise a very large volume of processors with limited staff. e.g. the Digital Personal Data Protection Act, 2023 rules were notified only in November 2025, years after enactment.
4. Copyright and training data disputes: Ownership of material used to train models is unresolved in Indian law. e.g. the news agency ANI’s suit against OpenAI in the Delhi High Court filed in November 2024.
5. Election integrity: Synthetic audio and video can be deployed at scale during compressed campaign periods. e.g. AI generated voice clips of political leaders circulated during the 2024 Lok Sabha campaign.
6. Algorithmic bias in public service delivery: Models trained on unrepresentative data misclassify beneficiaries. e.g. facial authentication failures for manual workers under Aadhaar based attendance systems.
7. Skill and audit gap: India lacks a trained cadre of independent AI auditors to test high risk deployments. e.g. no statutory conformity assessment body exists comparable to the notified bodies under the EU AI Act.

Way Forward

1. Enact a risk tiered statute: Replace advisory based governance with a law that classifies AI uses by risk and fixes provider and deployer liability.
2. Mandate interoperable provenance: Require adherence to a common content credential standard so a mark from one provider is readable by all platforms.
3. Build public detection capacity: Fund an independent testing facility to benchmark deepfake and text detectors and publish accuracy rates.
4. Protect against false accusation: Bar educational institutions and employers from acting on detector output alone, and require corroborating evidence.
5. Expand sovereign compute: Scale domestic graphics processing unit capacity and public datasets so Indian models are not fully dependent on foreign infrastructure.
6. Strengthen platform duties: Require prominent labelling at the point of display, not only in file metadata, and fix takedown timelines for unlabelled synthetic media.
7. Invest in digital literacy: Run sustained public campaigns so users check provenance labels rather than react to content at first sight.

“[2023, GS3, 10 marks] Introduce the concept of Artificial Intelligence (AI). How does AI help clinical diagnosis? Do you perceive any threat to privacy of the individual in the use of AI in healthcare?”