European Union: European Commission and AI Board determined General-Purpose Artificial Intelligence Code of Practice including quality of service requirement as adequate voluntary tool to demonstrate compliance with AI Act

On 1 August 2025, the European Commission and AI Board determined the General-Purpose Artificial Intelligence Code of Practice (GPAI Code ) as an adequate voluntary tool to demonstrate compliance with the Regulation laying down harmonised rules on artificial intelligence (AI Act). The GPAI Code comprises three chapters: transparency, copyright, and safety and security. Providers must adopt and maintain a Safety and Security Framework under Article 55 of the Artificial Intelligence Act (AI Act), which documents the systemic risk management processes implemented throughout the model lifecycle. The Framework must be confirmed prior to market placement, updated periodically or upon material changes, and notified to the European AI Office (AI Office). In addition, providers are required to ensure that all model documentation, as defined in the Model Documentation Form under Article 53 AI Act, is complete, accurate, protected from alteration, and retained for ten years.