Article 55 — Obligations of providers of general-purpose AI models with systemic risk

Providers of general-purpose AI models with systemic risk carry extra duties: evaluate models under state-of-the-art protocols including documented adversarial testing, assess and mitigate systemic risks at Union level, report serious incidents and corrective measures without undue delay to the AI Office and, where relevant, national authorities, and ensure adequate cybersecurity. Codes of practice are the route to show compliance until a harmonised standard exists; otherwise providers must prove equivalent means.