Article 55
Obligations of providers of general-purpose AI models with systemic risk

The text

What it requires, coded

SafeLegalAI's reading of each duty in this article: who, what, from when, under which fine tier, and whether it reaches a firm, chambers, court or legal-AI vendor. Descriptive, not advice; the quoted words are the Regulation's.

1. Art. 55(1) (a)Risk managementGPAI with systemic risk

   Providers of GPAI models with systemic risk must perform model evaluation using state-of-the-art standardised protocols and tools, including documented adversarial testing to identify and mitigate systemic risks.

   "perform model evaluation in accordance with standardised protocols and tools reflecting the state of the art, including conducting and documenting adversarial testing of the model with a view to identifying and mitigating systemic risks;"

   Who

   GPAI provider (systemic risk)

   From

   2025-08-02 (Art. 113(b))

   Fine tier

   Art. 101

   Legal practice

   Reaches legal-AI vendors or public bodies — Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.

2. Art. 55(1) (b)Risk managementGPAI with systemic risk

   Providers of GPAI models with systemic risk must assess and mitigate possible Union-level systemic risks and their sources from development, market placement or use of the model.

   "assess and mitigate possible systemic risks at Union level, including their sources, that may stem from the development, the placing on the market, or the use of general-purpose AI models with systemic risk;"

   Who

   GPAI provider (systemic risk)

   From

   2025-08-02 (Art. 113(b))

   Fine tier

   Art. 101

   Legal practice

   Reaches legal-AI vendors or public bodies — Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.

3. Art. 55(1) (c)Incident reportingGPAI with systemic risk

   Providers of GPAI models with systemic risk must track, document and report serious incidents and possible corrective measures without undue delay to the AI Office and, where appropriate, national competent authorities.

   "keep track of, document, and report, without undue delay, to the AI Office and, as appropriate, to national competent authorities, relevant information about serious incidents and possible corrective measures to address them;"

   Who

   GPAI provider (systemic risk)

   From

   2025-08-02 (Art. 113(b))

   Fine tier

   Art. 101

   Legal practice

   Reaches legal-AI vendors or public bodies — Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.

4. Art. 55(1) (d)RequirementGPAI with systemic risk

   Providers of GPAI models with systemic risk must ensure adequate cybersecurity protection for the model and its physical infrastructure.

   "ensure an adequate level of cybersecurity protection for the general-purpose AI model with systemic risk and the physical infrastructure of the model."

   Who

   GPAI provider (systemic risk)

   From

   2025-08-02 (Art. 113(b))

   Fine tier

   Art. 101

   Legal practice

   Reaches legal-AI vendors or public bodies — Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.

5. Art. 55(2)DocumentationGPAI with systemic risk

   Providers of systemic-risk GPAI models may rely on codes of practice or harmonised standards to demonstrate compliance, and must demonstrate alternative adequate means if not using them; information obtained is confidential.

   "Providers of general-purpose AI models with systemic risk may rely on codes of practice within the meaning of Article 56 to demonstrate compliance with the obligations set out in paragraph 1 of this Article, until a harmonised standard is published. Compliance with European harmonised standards grants providers the presumption of conformity to"

   Who

   GPAI provider (systemic risk)

   From

   2025-08-02 (Art. 113(b))

   Fine tier

   Art. 101

   Legal practice

   Reaches legal-AI vendors or public bodies — Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.

   See

   Art. 56 · Art. 78