Privacy Insights That Matter

GPAI Compliance Under the EU AI Act: Obligations, Documentation, and Governance

Most organizations treating the EU AI Act as a compliance problem focused on high-risk AI systems — the hiring tools, credit scoring models, and healthcare AI that Annex III covers — have been working on the right framework. But a parallel compliance regime has been operative since August 2, 2025, and it covers a different set of actors entirely: the providers of general-purpose AI models.