Scope and obligations

Operational bridge between EU AIA Arts. 53-55 (general-purpose AI obligations) and provider compliance. Art. 56(8) AIA gives adherent providers a presumption of compliance with the substantive obligations — distinct from industry self-pledges (Anthropic RSP, OpenAI Preparedness, DeepMind FSF) and from intergovernmental voluntary codes (Seoul, G7 Hiroshima). Chapter 1 (Transparency) operationalises Art. 53(1)(a)-(c) model documentation + training-data summary obligations; Chapter 2 (Copyright) operationalises Art. 53(1)(c) opt-out compliance + Art. 53(1)(d) text-and-data-mining respect; Chapter 3 (Safety & Security) operationalises Art. 55 systemic-risk-tier obligations including capability evaluations + serious-incident reporting + cybersecurity protections + model-weight access controls. AI Office monitors implementation; Article 65 binding-decision procedure routes cross-DPA disputes. Not a binding regulation in itself — providers may choose alternative means to demonstrate compliance — but the Code is the AI Office's canonical reference and the operational rulebook national-competent-authorities consult during inspections.

EU General-Purpose AI Code of Practice addresses 4 contested AI-governance topics explicitly, 1 via general principles,.

Topics governed

• governs
  Foundation Models / GPAI— Chapter 3 (Safety & Security) operationalises Art. 55 systemic-risk-tier obligations for GPAI providers
• governs
  Transparency Obligations— Chapter 1 (Transparency) — 13 commitments + ~40 measures operationalising Art. 53(1)(a)-(c) model documentation + training-data summary
• governs
  Training-Data Rights— Chapter 2 (Copyright) — Art. 53(1)(c) training-data summary obligations + Art. 53(1)(d) text-and-data-mining opt-out compliance
• governs
  Catastrophic & Existential Risk— Chapter 3 systemic-risk-tier capability evaluations + serious-incident reporting + model-weight access controls (Art. 55 substrate)
• implicit
  Synthetic Content Provenance— Chapter 1 transparency commitments brush against Art. 50(2) deployer marking + Art. 53(1)(a) provider documentation

Cross-jurisdiction comparison

How peer instruments treat the topics EU General-Purpose AI Code of Practice governs.

°= industry self-imposed voluntary framework. Comparing a voluntary code's "governs" tint with a binding regulation's "governs" tint flattens the legal-force distinction; use the instrument-page banner for the operative status of each.

How to cite this article

Policy Window. (2025). EU General-Purpose AI Code of Practice [Wiki article — Instrument]. https://policywindow.org/wiki/gpai-code-of-practice

Policy Window. 2025. "EU General-Purpose AI Code of Practice." Wiki article (Instrument). https://policywindow.org/wiki/gpai-code-of-practice.

@misc{policywindow-gpai-code-of-practice,
  title  = {EU General-Purpose AI Code of Practice},
  author = {Policy Window},
  year   = {2025},
  howpublished = {General-Purpose AI Code of Practice, drafted by the European AI Office under Article 56 of Regulation (EU) 2024/1689 (EU AI Act); co-drafted by ~1000 stakeholders across providers, civil society, academia, and regulators; three chapters (Transparency, Copyright, Safety & Security) covering 13 commitments + ~40 measures.},
  url    = {https://policywindow.org/wiki/gpai-code-of-practice},
  note   = {Primary source: https://digital-strategy.ec.europa.eu/en/policies/ai-code-practice}
}

Related instruments

• EU AI Act · EU
• Executive Order 14110 on Safe, Secure, Trustworthy AI · US
• Interim Measures for Generative AI Service Management · CN
• G7 Hiroshima AI Process Code of Conduct · G7
• NIST AI Risk Management Framework · US
• Bletchley Declaration on AI Safety · global
• Seoul Declaration on Safe, Innovative and Inclusive AI · global
• NIST AI RMF Generative AI Profile · US
• California SB-1047: Safe and Secure Innovation for Frontier AI Models Act · US
• Brazil AI Bill (PL 2338/2023) · BR
• Anthropic Responsible Scaling Policy (RSP) v2 · US
• OpenAI Preparedness Framework · US
• Google DeepMind Frontier Safety Framework · US
• Meta Frontier AI Framework · US
• White House Voluntary AI Commitments · US
• Singapore Model AI Governance Framework for Generative AI · SG
• Japan METI AI Guidelines for Business · JP
• General Data Protection Regulation (GDPR) · EU

References

1. General-Purpose AI Code of Practice, drafted by the European AI Office under Article 56 of Regulation (EU) 2024/1689 (EU AI Act); co-drafted by ~1000 stakeholders across providers, civil society, academia, and regulators; three chapters (Transparency, Copyright, Safety & Security) covering 13 commitments + ~40 measures.
2. Chapter 3 (Safety & Security) operationalises Art. 55 systemic-risk-tier obligations for GPAI providers
3. Chapter 1 (Transparency) — 13 commitments + ~40 measures operationalising Art. 53(1)(a)-(c) model documentation + training-data summary
4. Chapter 2 (Copyright) — Art. 53(1)(c) training-data summary obligations + Art. 53(1)(d) text-and-data-mining opt-out compliance
5. Chapter 3 systemic-risk-tier capability evaluations + serious-incident reporting + model-weight access controls (Art. 55 substrate)
6. Chapter 1 transparency commitments brush against Art. 50(2) deployer marking + Art. 53(1)(a) provider documentation