Responsible AI Platform
Article 53 of 11347%

Article 53: Obligations for providers of general-purpose AI models

EU Official:
In force since 2 Aug 2025
Title V: General-Purpose AI Models

Official text

||

Source: EUR-Lex, Regulation (EU) 2024/1689 — text reproduced verbatim.

📥 Download AI Act (PDF)

📘 Official Guidance

Published 18 Jul 2025

Guidelines for GPAI models

The guidelines clarify the definition and scope of GPAI models, related lifecycle obligations, systemic risk criteria and notification duties for providers. They build on the preliminary guidelines from April 2025 and the GPAI Code of Practice.

Key points (6)
  • GPAI model = AI model with significant generality that can competently perform a wide range of tasks
  • Providers must prepare technical documentation per Annex XI
  • Summary of training data must be made publicly available
  • Copyright policy mandatory
  • GPAI models with systemic risk have additional obligations (Art. 55)
  • Threshold for systemic risk: 10^25 FLOPS of training compute

📖 Related Recitals

⚖️ Related Enforcement

  • Italy fines OpenAI €15 million for ChatGPT privacy violationsGarante per la protezione dei dati personali · Dec 2024
  • Italy investigates ChatGPT — temporary ban lifted after measuresGarante per la protezione dei dati personali · May 2023

Cross-references

Frequently asked questions

What obligations apply to providers of GPAI models?
Article 53 requires providers of General Purpose AI (GPAI) models to draw up technical documentation, provide information to downstream providers, implement a copyright policy, and publish a summary of training data.
Do SMEs also need to comply with Article 53 of the AI Act?
Article 53 of the AI Act does not provide a general exemption for SMEs. However, the AI Act includes supportive measures and potentially lighter obligations for small and medium-sized enterprises, depending on their role in the AI value chain.
How does Article 53 of the AI Act relate to the GDPR?
Article 53 of the AI Act complements the GDPR. While the GDPR protects personal data, the AI Act focuses on the safety and trustworthiness of AI systems. Organisations must comply with both regulations when their AI system processes personal data.
What are the deadlines for Article 53 of the AI Act?
The AI Act follows a phased implementation. Prohibited AI practices apply from February 2025, obligations for high-risk AI systems from August 2026, and other provisions take effect gradually. The specific deadline for Article 53 depends on the category of the obligation.
Does Article 53 of the AI Act also apply to AI systems I purchase?
Yes, Article 53 of the AI Act may also be relevant when you purchase AI systems. As a deployer, you have your own obligations under the AI Act, regardless of whether you developed the system yourself or purchased it from a provider.
What is the difference between provider and deployer under Article 53 of the AI Act?
Under Article 53 of the AI Act, the provider is the entity that develops or places the AI system on the market, while the deployer is the entity that uses the system under its own authority. Both roles carry different obligations.
What documentation does Article 53 of the AI Act require?
Article 53 of the AI Act requires that relevant documentation is maintained as part of the compliance process. This may include technical documentation, instructions for use, logs or declarations of conformity, depending on the classification of the AI system.
How do I document compliance with Article 53 of the AI Act?
You document compliance with Article 53 of the AI Act by establishing a risk management system, maintaining technical documentation, and conducting internal audits. Keep all relevant documents for the period prescribed by the AI Act.
Which four obligations apply to all GPAI model providers?
Article 53 requires: (a) preparing technical documentation (Annex XI), (b) sharing transparency information with downstream providers (Annex XII), (c) maintaining a policy to comply with EU copyright law, and (d) publishing a public summary of training data.
Since when do the GPAI obligations apply?
The obligations for GPAI models came into force on 2 August 2025. Providers of models already on the market before that date have until 2 August 2027 to bring their models and documentation into compliance.
Is there an exemption for open-source GPAI models?
Yes, open-source GPAI models are exempt from the documentation and transparency obligations (Article 53(1)(a) and (b)), unless the model is classified as having systemic risk. The copyright policy obligation and training data summary publication apply to all GPAI models.
What is the GPAI Code of Practice and do I need to follow it?
The GPAI Code of Practice is a voluntary code of conduct that GPAI model providers can follow to demonstrate compliance with Article 53. Until harmonised standards are published (not expected before 2027), the Code serves as the primary means to demonstrate conformity.

📬 AI Act Weekly

Get the most important AI Act developments in your inbox every week.

Subscribe