Source: OJ L, 2024/1689, 12.7.2024

Current language: EN

Article 53 Obligations for providers of general-purpose AI models


Summary What does Article 53 of the AI act regulation say?

This article sets out the core obligations that apply to providers of general-purpose AI models.

It is one of the foundational articles of Chapter V, which deals specifically with general-purpose AI models, and it works in tandem with Article 55, which layers on additional obligations for those models that carry systemic risk.

The thrust of Article 53 is transparency and accountability: providers must maintain technical documentation, share relevant information with downstream AI system providers who wish to integrate their model, comply with copyright law, and publish a summary of the training data used.

A notable carve-out exists for open-source models — providers releasing models under a free and open-source licence with publicly available parameters are exempt from the documentation and information-sharing obligations, though this exemption does not extend to open-source models that carry systemic risks.

Compliance can be demonstrated through codes of practice under Article 56 or harmonised standards, with providers who use neither required to demonstrate alternative adequate means of compliance to the Commission.

Important points:

  • Maintain up-to-date technical documentation of the general-purpose AI model and make it available to the AI Office and national competent authorities upon request.
  • Make information and documentation available to downstream AI system providers to enable them to understand the model's capabilities and limitations and meet their own obligations under this Regulation.
  • Publish a publicly available summary of the content used to train the model, following a template provided by the AI Office.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. Providers of general-purpose AI models shall:

      1. draw up and keep up-to-date the technical documentation of the model, including its training and testing process and the results of its evaluation, which shall contain, at a minimum, the information set out in Annex XI for the purpose of providing it, upon request, to the AI Office and the national competent authorities;

      2. draw up, keep up-to-date and make available information and documentation to providers of AI systems who intend to integrate the general-purpose AI model into their AI systems. Without prejudice to the need to observe and protect intellectual property rights and confidential business information or trade secrets in accordance with Union and national law, the information and documentation shall:

        1. enable providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulation; and

        2. contain, at a minimum, the elements set out in Annex XII;

      3. put in place a policy to comply with Union law on copyright and related rights, and in particular to identify and comply with, including through state-of-the-art technologies, a reservation of rights expressed pursuant to Article 4(3) of Directive (EU) 2019/790;

      4. draw up and make publicly available a sufficiently detailed summary about the content used for training of the general-purpose AI model, according to a template provided by the AI Office.

    1. The obligations set out in paragraph 1, points (a) and (b), shall not apply to providers of AI models that are released under a free and open-source licence that allows for the access, usage, modification, and distribution of the model, and whose parameters, including the weights, the information on the model architecture, and the information on model usage, are made publicly available. This exception shall not apply to general-purpose AI models with systemic risks.

    1. Providers of general-purpose AI models shall cooperate as necessary with the Commission and the national competent authorities in the exercise of their competences and powers pursuant to this Regulation.

    1. Providers of general-purpose AI models may rely on codes of practice within the meaning of Article 56 to demonstrate compliance with the obligations set out in paragraph 1 of this Article, until a harmonised standard is published. Compliance with European harmonised standards grants providers the presumption of conformity to the extent that those standards cover those obligations. Providers of general-purpose AI models who do not adhere to an approved code of practice or do not comply with a European harmonised standard shall demonstrate alternative adequate means of compliance for assessment by the Commission.

    1. For the purpose of facilitating compliance with Annex XI, in particular points 2 (d) and (e) thereof, the Commission is empowered to adopt delegated acts in accordance with Article 97 to detail measurement and calculation methodologies with a view to allowing for comparable and verifiable documentation.

    1. The Commission is empowered to adopt delegated acts in accordance with Article 97(2) to amend Annexes XI and XII in light of evolving technological developments.

    1. Any information or documentation obtained pursuant to this Article, including trade secrets, shall be treated in accordance with the confidentiality obligations set out in Article 78.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod