The EU General-Purpose AI Code of Practice

Article 56 of the EU AI Act encourages the AI Office to facilitate codes of practice that support proper application of the Regulation. The General-Purpose AI Code of Practice was published on July 10, 2025, after independent experts and stakeholders developed its text. It has three chapters: Transparency and Copyright for GPAI providers generally, and Safety and Security for providers of models with systemic risk. The Commission’s current page lists signatories and states that the code is an adequate voluntary tool. The code translates duties into practical documentation and processes. Its Transparency chapter supports information providers must keep or give downstream developers, while the Copyright chapter supports the required policy for complying with EU copyright law and rights reservations. The Safety and Security chapter offers practices for systemic-risk evaluation, assessment, mitigation, incident handling, and cybersecurity. It is not a general AI-system code and does not replace Article 53 or Article 55. Signing is voluntary. Under Articles 53(4) and 55(2), providers may rely on an approved code to demonstrate compliance until harmonised standards are published. A provider that does not adhere to an approved code or applicable standard must demonstrate alternative adequate means for Commission assessment. Following the code is therefore a route to show compliance, not a product certificate, blanket authorization, or immunity from enforcement. Regulation (EU) 2026/1744 amended Article 56 to require the Commission and the AI Board to monitor codes and assess whether they adequately cover the GPAI obligations, with public assessment. The current Commission page reports its status through July 31, 2026. Providers should verify the latest approved version, signature status, and standards when planning compliance. This is an informational overview, not legal advice.