EU research guidance draws a line: AI can assist review, not make the judgement
The fourth edition adds agentic AI, stronger disclosure expectations and tighter peer-review safeguards. It is a non-binding translation of existing integrity principles, not a new law.
The short version
- What happened
- Researchers remain accountable when agents perform sequences of tasks and should validate critical methodological decisions at explicit checkpoints.
- Who it affects
- Researchers gain a clearer disclosure threshold, while reviewers and applicants receive a stronger confidentiality safeguard for unpublished work.
- What remains unproven
- The guidance supplies principles rather than one implementation standard and presents no outcome data showing that the recommendations reduce misconduct or bias.
Keep in mind
The guidance supplies principles rather than one implementation standard and presents no outcome data showing that the recommendations reduce misconduct or bias.
Source analysis · 2 linked sources. Primary analysed source date: 16 October 2026.
Read the full report · 4 min The evidence, methods, implications and limitations
Autonomy does not transfer responsibility
Researchers cannot treat an AI agent as the party responsible for a method, analysis or conclusion, according to the European Commission's updated living guidance. The fourth edition adds explicit instructions for agentic systems: researchers should define checkpoints, validate critical methodological decisions and remain accountable for every phase in which an agent is allowed to plan or act.
The update also sharpens meaningful disclosure. If AI substantially shapes a literature review, research gap, hypothesis, data analysis or interpretation, users should identify the system and explain its contribution and human verification. Routine spelling, formatting or minor language polishing will not usually need the same disclosure. Researchers are asked to consider retaining prompts, logs, model versions and parameters when they materially affect reproducibility.[1][2]
Peer review gets the clearest boundary
The document says scientific-quality and merit judgements must not be delegated to AI. Reviewers, editors and funding evaluators may use permitted support functions, but they remain responsible for assessments and recommendations. Unpublished manuscripts, proposals, review reports and ideas should not be pasted into unsecured public AI systems; where AI is allowed, the guidance prefers secure tools with clear governance and data management.
Funding organisations are told to watch for biased or erroneous screening, ranking, prioritisation and exclusion. Institutions are encouraged to provide training, track AI use, monitor environmental impact and, where feasible, offer locally hosted or governed systems for sensitive data. Researchers are reminded that uploading personal data requires a lawful basis and that an agent acting on their behalf does not remove legal obligations.
This does not mean every cloud tool is prohibited. The guidance asks users to examine who owns and operates the system, where it runs, what happens to prompts and uploaded material, and whether data can be reused for training. That makes procurement and information governance part of research integrity, rather than leaving each researcher to infer privacy from a consumer settings page.[1][2]
The distinction that matters
Where the updated guidance places responsibility
Requirements become stricter as AI moves from minor assistance to judgement or autonomous action.
Minor support
Spellcheck, format or polish language
Usually no substantive-use disclosure
Research method
Review literature, analyse data or run an agent
Disclose material use and document verification
Evaluation
Judge a paper or funding proposal
Scientific merit remains a human decision
It is a common reference, not an enforcement regime
For a doctoral researcher, supervisor or reviewer, the practical test is clearer: could another person understand where AI materially influenced the work, and did a human retain control over confidential information and consequential judgement? Institutions can turn that into disclosure fields, approved-tool lists and review checkpoints without banning every low-risk use in practice.
The authority check matters. This European Research Area stakeholders' document is explicitly non-binding. It translates existing integrity and trustworthy-AI principles; it creates no new penalty and does not override the AI Act, data-protection law, funder terms, journal policies or national rules. Disciplines may adapt the recommendations proportionately. What would change the assessment is implementation evidence: comparable disclosure, fewer confidentiality breaches, reproducible AI-assisted methods and audits showing that automated screening does not skew funding. Until then, the update supplies a stronger governance baseline, not proof that European research has solved the problem.[1][2]