Skip to main content
European Commission logo
AI Act Service Desk

AI Act Explorer

Recitals
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180
Chapter I: General Provisions
Chapter II: Prohibited AI Practices
Chapter III: High-Risk AI Systems

Section 1: Classification of AI Systems as High-Risk

Section 2: Requirements for High-Risk AI Systems

Section 3: Obligations of Providers and Deployers of High-Risk AI Systems and Other Parties

Section 4: Notifying Authorities and Notified Bodies

Section 5: Standards, Conformity Assessment, Certificates, Registration

Chapter IV: Transparency Obligations for Providers and Deployers of Certain AI Systems
Chapter V: General-Purpose AI Models

Section 1: Classification Rules

Section 2: Obligations for Providers of General-Purpose AI Models

Section 3: Obligations of Providers of General-Purpose AI Models with Systemic Risk

Section 4: Codes of Practice

Chapter VI: Measures in Support of Innovation
Chapter VII: Governance

Section 1: Governance at Union Level

Section 2: National competent authorities

Chapter VIII: EU Database for High-Risk AI Systems
Chapter IX: Post-Market Monitoring, Information Sharing and Market Surveillance

Section 1: Post-Market Monitoring

Section 2: Sharing of Information on Serious Incidents

Section 3: Enforcement

Section 4: Remedies

Section 5: Supervision, Investigation, Enforcement and Monitoring in Respect of Providers of General-Purpose AI Models

Chapter X: Codes of Conduct and Guidelines
Chapter XI: Delegation of Power and Committee Procedure
Chapter XII: Penalties
Chapter XIII: Final Provisions
Annexes
Annex I
Annex II
Annex III
Annex IV
Annex V
Annex VI
Annex VII
Annex VIII
Annex IX
Annex X
Annex XI
Annex XII
Annex XIII
  • Chapter V: General-Purpose AI Models
  • Section 3: Obligations of Providers of General-Purpose AI Models with Systemic Risk

Article 55: Obligations of providers of general-purpose AI models with systemic risk

Summary

The article specifies additional obligations for providers of general-purpose AI models with systemic risk. These providers must evaluate models using standardised protocols, assess and mitigate systemic risks, report serious incidents, and ensure cybersecurity. They can adhere to codes of practice (until a harmonised standard is published) or harmonised standards to demonstrate compliance, or demonstrate alternative means of compliance.

The summaries are meant to provide helpful explanation but are not legal binding.

1.   In addition to the obligations listed in Articles 53 and 54, providers of general-purpose AI models with systemic risk shall:

(a)perform model evaluation in accordance with standardised protocols and tools reflecting the state of the art, including conducting and documenting adversarial testing of the model with a view to identifying and mitigating systemic risks;
(b)assess and mitigate possible systemic risks at Union level, including their sources, that may stem from the development, the placing on the market, or the use of general-purpose AI models with systemic risk;
(c)keep track of, document, and report, without undue delay, to the AI Office and, as appropriate, to national competent authorities, relevant information about serious incidents and possible corrective measures to address them;
(d)ensure an adequate level of cybersecurity protection for the general-purpose AI model with systemic risk and the physical infrastructure of the model.

2.   Providers of general-purpose AI models with systemic risk may rely on codes of practice within the meaning of Article 56 to demonstrate compliance with the obligations set out in paragraph 1 of this Article, until a harmonised standard is published. Compliance with European harmonised standards grants providers the presumption of conformity to the extent that those standards cover those obligations. Providers of general-purpose AI models with systemic risks who do not adhere to an approved code of practice or do not comply with a European harmonised standard shall demonstrate alternative adequate means of compliance for assessment by the Commission.

3.   Any information or documentation obtained pursuant to this Article, including trade secrets, shall be treated in accordance with the confidentiality obligations set out in Article 78.

Relevant recitals

Other resources

Guidelines on the scope of the obligations for general-purpose AI models