---
title: "Art. 55 AI Act: Obligations of providers of general-purpose AI models with systemic risk"
canonical: "https://dposchool.com/ai-act/article/55"
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:02024R1689-20260727#art_55"
source_note: "Source: Regulation (EU) 2024/1689, OJ L, 2024/1689, 12.7.2024; articles and annexes from the consolidated text 02024R1689-20260727. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu"
text_as_of: "2026-07-27"
language: "en"
publisher: "DPO School"
---

Art. 55 AI Act · Chapter V: GENERAL-PURPOSE AI MODELS · Section 3: Obligations of providers of general-purpose AI models with systemic risk

# Article 55 AI Act: Obligations of providers of general-purpose AI models with systemic risk

Consolidated text of 27 July 2026. Retrieved 30 October 2026.

## Official text

### Article 55(1)

**1.** In addition to the obligations listed in Articles 53 and 54, providers of general-purpose AI models with systemic risk shall:

#### Article 55(1)(a)

**(a)** perform model evaluation in accordance with standardised protocols and tools reflecting the state of the art, including conducting and documenting adversarial testing of the model with a view to identifying and mitigating systemic risks;

#### Article 55(1)(b)

**(b)** assess and mitigate possible systemic risks at Union level, including their sources, that may stem from the development, the placing on the market, or the use of general-purpose AI models with systemic risk;

#### Article 55(1)(c)

**(c)** keep track of, document, and report, without undue delay, to the AI Office and, as appropriate, to national competent authorities, relevant information about serious incidents and possible corrective measures to address them;

#### Article 55(1)(d)

**(d)** ensure an adequate level of cybersecurity protection for the general-purpose AI model with systemic risk and the physical infrastructure of the model.

### Article 55(2)

**2.** Providers of general-purpose AI models with systemic risk may rely on codes of practice within the meaning of Article 56 to demonstrate compliance with the obligations set out in paragraph 1 of this Article, until a harmonised standard is published. Compliance with European harmonised standards grants providers the presumption of conformity to the extent that those standards cover those obligations. Providers of general-purpose AI models with systemic risks who do not adhere to an approved code of practice or do not comply with a European harmonised standard shall demonstrate alternative adequate means of compliance for assessment by the Commission.

### Article 55(3)

**3.** Any information or documentation obtained pursuant to this Article, including trade secrets, shall be treated in accordance with the confidentiality obligations set out in Article 78.

## Source

Source: Regulation (EU) 2024/1689, OJ L, 2024/1689, 12.7.2024; articles and annexes from the consolidated text 02024R1689-20260727. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu

[Article 55 on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:02024R1689-20260727#art_55)

Consolidated text of 27 July 2026. Retrieved 30 October 2026.

This is reference material, not legal advice.

## Navigation

[AI Act Navigator](https://dposchool.com/ai-act) / [Chapter V](https://dposchool.com/ai-act/chapter/5) / Article 55

Previous: [Art. 54 AI Act: Authorised representatives of providers of general-purpose AI models](https://dposchool.com/ai-act/article/54)

Next: [Art. 56 AI Act: Codes of practice](https://dposchool.com/ai-act/article/56)

## For AI agents

- Machine-readable index: https://dposchool.com/ai-act/llms.txt
- JSON API: https://dposchool.com/ai-act/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents