General-purpose AI (GPAI) models and systems are subject to a tailored and tiered regulatory framework under the AI Act.
GPAI models are defined functionally (e.g. generality in the performance of tasks) and are typically integrated into GPAI systems.
The European Commission, through its AI Office, has sweeping powers to enforce the provisions applicable to GPAI models and systems. These provisions will apply from 2 August 2025 (see also AI Act Timeline).
The AI Office is facilitating the drawing-up of a code of practice on GPAI models by independent experts. The code is expected to set out "commitments to which providers [of GPAI models] may adhere to ensure compliance with their obligations under the AI Act.”
In parallel, the EU executive body opened a consultation until 22 May 2025 in preparation for its upcoming non-binding guidelines, which will aim to clarify the obligations of providers GPAI models.
This cheat sheet by Cullen International provides a summary of the core provisions on GPAI models under the AI Act:
Clients of our European Digital Economy service, can access it directly on our client portal via the following link:
more news
04 November 26
In nine European countries, national symmetric obligations on access to ducts go beyond the scope set by the Gigabit Infrastructure Act
Cullen International's latest benchmark analyses asymmetric and symmetric duct access obligations in Europe.
04 November 26
More than 60 cases and counting: a snapshot of European antitrust enforcement against big tech
Cullen International’s latest report on past and pending antitrust cases against big tech companies in Europe tracks enforcement activity under ex post antitrust rules at EU and national level.
30 October 26
Many governments around the globe rely on legal mechanisms to compel communications apps to cooperate in law enforcement investigations
Cullen International's latest Global Trends benchmark for number-independent communications apps regulation found that nearly all of the 13 surveyed jurisdictions around the world provide some legal mechanism to make these apps assist law enforcement in criminal investigations. There are requirements to verify user identities, compel disclosure of stored content, make encrypted content accessible, and duties to detect illegal content within private communications.