05.10.2026
The General-Purpose AI Code of Practice is a framework published by the European Commission and the AI Board. It serves as a voluntary mechanism for general-purpose AI (GPAI) model providers to demonstrate compliance with the EU AI Act.
General-Purpose AI Models are defined by Article 3(63) of the EU AI Act as:
“An AI model, including where such an AI model is trained with a large amount of data using self-supervision at scale, that displays significant generality and is capable of competently performing a wide range of distinct tasks regardless of the way the model is placed on the market and that can be integrated into a variety of downstream systems or applications”
The Code aims to:
- Improve the internal market across the EU;
- Promote human-centric and trustworthy AI while protecting health, safety, and fundamental rights; and
- Simplify compliance with Articles 53 and 55 of the EU AI Act; and
- Ensure provider compliance with statutory obligations under the Act.
The Code is divided into three chapters:
- Transparency;
- Copyright; and
- Safety and Security.
Transparency:
When placing a GPAI model on the market, signatories must document all relevant technical details using the Code's official Model Documentation Form, keeping this information updated as models evolve. Providers must also publish point-of-contact details, fulfil AI Office information requests promptly, and supply up-to-date documentation to downstream developers and integration partners.
Copyright:
Providers must establish, maintain, and execute a comprehensive copyright policy covering every GPAI model introduced to the EU market. Signatories are also expected to implement technical and operational safeguards to prevent models from generating outputs that infringe upon protected intellectual property.
Safety and Security:
Providers opting into the Safety and Security Framework commit to a three-step cycle:
1. Creation - Establish the framework by defining and justifying operational trigger points.
2. Implementation - Identify systemic risks and deploy appropriate risk-mitigation measures.
3. Updating - Continually update the framework as new safety data and risks emerge.
While voluntary, the General-Purpose AI Code of Practice will serve as an essential roadmap for AI developers looking to build trust, streamline regulatory review, and establish a competitive edge in the European market. Adopting these standards early will bridge the gap between abstract legislative obligations and concrete compliance.
This article is intended solely for general informational purposes and does not constitute legal advice. The application of relevant EU and Maltese law depends on the particular facts and circumstances of each case and specific legal advice should be obtained where required.
Should you require advice or assistance in relation to the EU AI Act, AI compliance, or AI governance you may contact the author, Dr. Beckham Brooklyn Penza, at beckham@dingli.com.mt, or the firm’s Corporate Team at corporate@dingli.com.mt.