Codes of Practice for GPAI Under the EU AI Act

Overview

Codes of practice provide practical guidance for GPAI model providers on compliance with Articles 51-56. The AI Office coordinates their development with input from providers, downstream deployers, civil society, and academia. Adherence to approved codes creates a presumption of compliance.

Key Provisions

Compliance Steps

1. Identify whether your AI system falls within scope of the relevant article
2. Map your system against the specific requirements and obligations
3. Document compliance measures and maintain records
4. Implement technical and organizational measures as required
5. Establish monitoring and incident reporting procedures

Practical Considerations

Organizations deploying AI systems in the EU should begin compliance preparations well ahead of enforcement dates. The phased implementation timeline provides an opportunity to build compliance infrastructure incrementally. Start with a comprehensive AI inventory and risk classification exercise to determine which obligations apply to your specific systems.

Cross-border operations may need to coordinate with multiple national competent authorities. The European AI Office provides centralized guidance for general-purpose AI models, while national authorities oversee high-risk system compliance within their jurisdictions.

This article is for informational purposes only and does not constitute legal advice. Regulatory requirements change frequently — verify current rules with official sources. Built by Sawai Gyoseishoshi Office, Hiroshima, Japan.