AI Act
Table of Contents
Chapter I – GENERAL PROVISIONS
Chapter II – PROHIBITED AI PRACTICES
Chapter III – HIGH-RISK AI SYSTEMS
Chapter IV – TRANSPARENCY OBLIGATIONS FOR PROVIDERS AND DEPLOYERS OF CERTAIN AI SYSTEMS
Chapter V – GENERAL-PURPOSE AI MODELS
Chapter VI – MEASURES IN SUPPORT OF INNOVATION
Chapter VII – GOVERNANCE
Chapter VIII – EU DATABASE FOR HIGH-RISK AI SYSTEMS
Chapter IX – POST-MARKET MONITORING, INFORMATION SHARING AND MARKET SURVEILLANCE
Chapter X – CODES OF CONDUCT AND GUIDELINES
Chapter XI – DELEGATION OF POWER AND COMMITTEE PROCEDURE
Chapter XII – PENALTIES
Chapter XIII – FINAL PROVISIONS
Recitals (180)
Annexes
Recital 114
(114) The providers of general-purpose AI models presenting systemic risks should be subject, in addition to the obligations provided for providers of general-purpose AI models, to obligations aimed at identifying and mitigating those risks and ensuring an adequate level of cybersecurity protection, regardless of whether it is provided as a standalone model or embedded in an AI system or a product. To achieve those objectives, this Regulation should require providers to perform the necessary model evaluations, in particular prior to its first placing on the market, including conducting and documenting adversarial testing of models, also, as appropriate, through internal or independent external testing. In addition, providers of general-purpose AI models with systemic risks should continuously assess and mitigate systemic risks, including for example by putting in place risk-management policies, such as accountability and governance processes, implementing post-market monitoring, taking appropriate measures along the entire model’s lifecycle and cooperating with relevant actors along the AI value chain.