{"id":15050,"date":"2025-11-18T20:29:41","date_gmt":"2025-11-18T20:29:41","guid":{"rendered":"https:\/\/www.americanconference.com\/fcpa-dc\/?page_id=15050"},"modified":"2025-11-18T20:30:14","modified_gmt":"2025-11-18T20:30:14","slug":"meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models","status":"publish","type":"page","link":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/","title":{"rendered":"Meeting the EU AI Act&#8217;s Obligations for Providers of General-Purpose AI Models"},"content":{"rendered":"<div class=\"article-meta\">\r\n  <p class=\"author\">By Jaclyn Jaeger<\/p>\r\n  <p class=\"date\">Tuesday, November 18, 2025<\/p>\r\n<\/div>\r\n\t<p>The compliance obligations of providers of general-purpose AI (GPAI) models under the European Union\u2019s Artificial Intelligence (AI) Act entered into application Aug. 2, 2025.<\/p>\r\n\t<p>The overall aim of the AI Act\u2019s obligations for providers of GPAI models is to ensure that such models are \u201ctransparent, in line with EU and national copyright law, and that providers of the most advanced or most impactful GPAI models assess and mitigate the systemic risks presented,\u201d the European Commission stated.<\/p>\r\n\t<p>This article provides a recap of providers\u2019 compliance obligations, explores a suite of recently released resources out of the Commission to help providers meet their obligations, including new guidance on how to report \u201cserious incidents\u201d to national authorities, and explains the upcoming enforcement timeline.<\/p>\r\n<h5>Compliance obligations<\/h5>\r\n\t<p>Applicable as of Aug. 2, 2025, providers of GPAI models must satisfy the following specific obligations under the AI Act: <\/p>\r\n\t<ul>\r\n\t\t<li>Draw up and maintain technical documentation about the model, including details on the development process, to provide the AI Office upon request.<\/li>\r\n\t\t<li>Provide information to downstream AI system providers to help them understand the model\u2019s capabilities and limitations and comply with their own obligations.<\/li>\r\n\t\t<li>Implement a policy to comply with EU copyright law and related rights; and<\/li>\r\n\t\t<li>Publish a \u201csufficiently detailed summary\u201d of content used for training GPAI models.<\/li>\r\n\t<\/ul>\r\n\t<p>Providers of GPAI models released under a free and open-source license may be exempt from certain obligations under certain conditions. Providers of GPAI models with systemic risk, including open-source models, must meet additional obligations, however.<\/p>\r\n\t<p>Such obligations include performing a model evaluation; identifying and mitigating systemic risk; ensuring an adequate level of cybersecurity protections for the model and its physical infrastructure; and documenting and reporting relevant information about serious incidents and possible corrective measures to the AI Office and, as appropriate, national authorities without undue delay.<\/p>\r\n\t<h5>A suite of resources<\/h5>\r\n\t<p>The Commission in July released a suite of resources giving additional clarity to providers on their obligations under the AI Act. Collectively, this resources \u201cprovide a clear and actionable framework for providers of GPAI models to comply with the AI Act, reducing administrative burden, and fostering innovation while safeguarding fundamental rights and public trust,\u201d the Commission stated.<\/p>\r\n\t<p>One such resource is the \u201cGuidelines on the Scope of the Obligations for Providers of GPAI Models,\u201d which clarify key concepts in the AI Act. The guidelines serve as an interpretive framework to help determine whether the model qualifies as a GPAI model, who must comply, and whether any exemptions apply.<\/p>\r\n\t<p>The guidelines complement a second resource, the GPAI Code of Practice (CoP). Developed by independent experts in a multi-stakeholder process, the CoP has been formally endorsed by the Commission and AI Board as \u201can adequate voluntary tool for providers of GPAI models to demonstrate compliance with the AI Act.\u201d AI model providers who voluntarily adhere to the CoP \u201cwill reduce their administrative burden\u201d and be provided \u201cmore legal certainty than if they proved compliance through other methods,\u201d the Commission explained.<\/p>\r\n\t<p>The CoP consists of three chapters addressing the following compliance obligations:<\/p>\r\n\t<ul>\r\n\t\t<li>Transparency chapter: Includes a user-friendly Model Documentation Form, enabling providers to easily document the information necessary to comply with the AI Act obligation on model providers to ensure sufficient transparency.<\/li>\r\n\t\t<li>Copyright chapter: Offers providers practical solutions to meet the AI Act\u2019s obligation to put in place a policy to comply with EU copyright law.<\/li>\r\n\t\t<li>Safety and Security chapter: Offers concrete state-of-the-art practices for managing systemic risks (i.e. risks from the most advanced models). Providers should rely on this chapter to comply with the AI Act obligations for providers of GPAI models with systemic risk.<\/li>\r\n\t<\/ul>\r\n\t<p>As a third resource, the Commission has made available a \u201ctemplate for the public summary of training content of GPAI models.\u201d The template provides only a \u201cminimal baseline\u201d for the information that should be made publicly available, the Commission noted. <\/p>\r\n\t<p>The template lists six types of datasets: publicly available datasets; private non-publicly available datasets obtained from third parties; data crawled and scraped from online sources; user data; synthetic data; and other sources of data that do not fall under these categories.<\/p>\r\n\t<p>Providers must further describe what measures they implement before model training to respect rightsholders\u2019 reservation of rights, \u201cincluding the opt-out protocols and solutions honored by the provider or, as applicable, by third parties from which datasets have been obtained,\u201d the Commission stated in an Explanatory Notice. Providers must also describe any measures taken to avoid or remove illegal content under EU law from the training data.<\/p>\r\n\t<h5>Serious incident reports<\/h5>\r\n\t<p>Article 73 of the AI Act requires providers of high-risk AI systems to report \u201cserious incidents\u201d to national authorities, but guidance was lacking on how to do so. To fill this gap and help providers meet these reporting obligations, the Commission on Sept. 26 released draft guidance and an incident report template.<\/p>\r\n\t<p>Article 3 of the AI Act defines a serious incident to mean \u201can incident or malfunctioning of an AI system that directly or indirectly leads to serious harm or death of a person; \u201cserious and irreversible disruption\u201d of a critical infrastructure\u2019s management or operation; the infringement of obligations under EU law intended to protect fundamental rights; and serious harm to property or the environment;<\/p>\r\n\t<p>Before this reporting requirement takes effect in August 2026, providers should refer to the draft guidance as a framework, as it suggests definitions on key terms, including what qualifies as a serious incident (indirectly or directly), and offers practical examples. Participation in the public consultation process ends Nov. 7. The Commission is seeking input, in particular, on alignment with overlapping reporting requirements.<\/p>\r\n\t<h5>Enforcement timeline<\/h5>\r\n\t<p>In the first year beginning Aug. 2, 2025, the AI Office \u201cwill offer to collaborate closely, in particular with providers who adhere to the Code of Practice, to ensure that models can be placed on the EU market without delay,\u201d the Commission explained in an FAQ.<\/p>\r\n\t<p>\u201cIf providers adhering to the Code do not fully implement all commitments immediately, the AI Office will not consider them to have broken their commitments under the Code,\u201d the Commission continued. \u201cInstead, the AI Office will consider them to act in good faith and will be ready to collaborate to ensure full compliance.\u201d<\/p>\r\n\t<p>From Aug. 2, 2026, the Commission will begin fully enforcing the obligations, including through the imposition of fines. Providers of GPAI models could potentially face significant fines, ranging from the greater of \u20ac7.5 million or 1.5% of global group annual revenues to \u20ac35 million or 7% of global group annual revenue, depending on the nature of the violation, and company size.<\/p>\r\n\t<p>Providers of GPAI models that were placed on the market before Aug. 2, 2025, have until Aug. 2, 2027 to come into compliance with the AI Act\u2019s obligations.<\/p>\r\n\t<p>Kai Zenner, Head of Office for MEP Axel Voss, has compiled a collection of all official AI Act documents, accessible here. Zenner will be speaking on a panel at ACI\u2019s \u201cAI &#038; RegTech for Financial Services and Insurance Summit,\u201d which will be held on Jan. 22-23, 2026, in New York.<\/p>\r\n\t<p><strong>For more information, and to register, please visit<\/strong>: <a href=\"https:\/\/www.americanconference.com\/ai-regtech\/\">https:\/\/www.americanconference.com\/ai-regtech\/<\/a><\/p>\r\n     \r\n  \r\n\r\n","protected":false},"excerpt":{"rendered":"By Jaclyn Jaeger Tuesday, November 18, 2025 The compliance obligations of providers of general-purpose AI (GPAI) models under the European Union\u2019s Artificial Intelligence (AI) Act entered into application Aug. 2, 2025. The overall aim of the AI Act\u2019s obligations for providers of GPAI models is to ensure that such models are \u201ctransparent, in line with&hellip;","protected":false},"author":20267,"featured_media":0,"parent":6569,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-15050","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Meeting the EU AI Act&#039;s Obligations for Providers of General-Purpose AI Models | FCPA and Global Anti-Corruption<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Meeting the EU AI Act&#039;s Obligations for Providers of General-Purpose AI Models | FCPA and Global Anti-Corruption\" \/>\n<meta property=\"og:description\" content=\"By Jaclyn Jaeger Tuesday, November 18, 2025 The compliance obligations of providers of general-purpose AI (GPAI) models under the European Union\u2019s Artificial Intelligence (AI) Act entered into application Aug. 2, 2025. The overall aim of the AI Act\u2019s obligations for providers of GPAI models is to ensure that such models are \u201ctransparent, in line with&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/\" \/>\n<meta property=\"og:site_name\" content=\"FCPA and Global Anti-Corruption\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-18T20:30:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2026\/06\/700L_linkedin_general_1200x1200.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/\",\"url\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/\",\"name\":\"Meeting the EU AI Act's Obligations for Providers of General-Purpose AI Models | FCPA and Global Anti-Corruption\",\"isPartOf\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/#website\"},\"datePublished\":\"2025-11-18T20:29:41+00:00\",\"dateModified\":\"2025-11-18T20:30:14+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.americanconference.com\/fcpa-dc\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ACI Insights\",\"item\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Meeting the EU AI Act&#8217;s Obligations for Providers of General-Purpose AI Models\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/#website\",\"url\":\"https:\/\/www.americanconference.com\/fcpa-dc\/\",\"name\":\"Foreign Corrupt Practices Act\",\"description\":\"Template used to create new conference sites\",\"alternateName\":\"FCPA\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.americanconference.com\/fcpa-dc\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Meeting the EU AI Act's Obligations for Providers of General-Purpose AI Models | FCPA and Global Anti-Corruption","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/","og_locale":"en_US","og_type":"article","og_title":"Meeting the EU AI Act's Obligations for Providers of General-Purpose AI Models | FCPA and Global Anti-Corruption","og_description":"By Jaclyn Jaeger Tuesday, November 18, 2025 The compliance obligations of providers of general-purpose AI (GPAI) models under the European Union\u2019s Artificial Intelligence (AI) Act entered into application Aug. 2, 2025. The overall aim of the AI Act\u2019s obligations for providers of GPAI models is to ensure that such models are \u201ctransparent, in line with&hellip;","og_url":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/","og_site_name":"FCPA and Global Anti-Corruption","article_modified_time":"2025-11-18T20:30:14+00:00","og_image":[{"width":1200,"height":1200,"url":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2026\/06\/700L_linkedin_general_1200x1200.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/","url":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/","name":"Meeting the EU AI Act's Obligations for Providers of General-Purpose AI Models | FCPA and Global Anti-Corruption","isPartOf":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/#website"},"datePublished":"2025-11-18T20:29:41+00:00","dateModified":"2025-11-18T20:30:14+00:00","breadcrumb":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/meeting-the-eu-ai-acts-obligations-for-providers-of-general-purpose-ai-models\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.americanconference.com\/fcpa-dc\/"},{"@type":"ListItem","position":2,"name":"ACI Insights","item":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/"},{"@type":"ListItem","position":3,"name":"Meeting the EU AI Act&#8217;s Obligations for Providers of General-Purpose AI Models"}]},{"@type":"WebSite","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/#website","url":"https:\/\/www.americanconference.com\/fcpa-dc\/","name":"Foreign Corrupt Practices Act","description":"Template used to create new conference sites","alternateName":"FCPA","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.americanconference.com\/fcpa-dc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/15050","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/users\/20267"}],"replies":[{"embeddable":true,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/comments?post=15050"}],"version-history":[{"count":4,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/15050\/revisions"}],"predecessor-version":[{"id":15054,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/15050\/revisions\/15054"}],"up":[{"embeddable":true,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/6569"}],"wp:attachment":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/media?parent=15050"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}