---
title: "Recital 115 AI Act"
canonical: "https://dposchool.com/ai-act/recital/115"
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32024R1689#rct_115"
source_note: "Source: Regulation (EU) 2024/1689, OJ L, 2024/1689, 12.7.2024; articles and annexes from the consolidated text 02024R1689-20260727. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu"
text_as_of: "2026-10-30"
language: "en"
publisher: "DPO School"
---

Recitals

# Recital 115 AI Act

Official Journal text of 12 July 2024. Retrieved 30 October 2026.

## Official text

Providers of general-purpose AI models with systemic risks should assess and mitigate possible systemic risks. If, despite efforts to identify and prevent risks related to a general-purpose AI model that may present systemic risks, the development or use of the model causes a serious incident, the general-purpose AI model provider should without undue delay keep track of the incident and report any relevant information and possible corrective measures to the Commission and national competent authorities. Furthermore, providers should ensure an adequate level of cybersecurity protection for the model and its physical infrastructure, if appropriate, along the entire model lifecycle. Cybersecurity protection related to systemic risks associated with malicious use or attacks should duly consider accidental model leakage, unauthorised releases, circumvention of safety measures, and defence against cyberattacks, unauthorised access or model theft. That protection could be facilitated by securing model weights, algorithms, servers, and data sets, such as through operational security measures for information security, specific cybersecurity policies, adequate technical and established solutions, and cyber and physical access controls, appropriate to the relevant circumstances and the risks involved.

## Source

Source: Regulation (EU) 2024/1689, OJ L, 2024/1689, 12.7.2024; articles and annexes from the consolidated text 02024R1689-20260727. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu

[Recital 115 on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32024R1689#rct_115)

Official Journal text of 12 July 2024. Retrieved 30 October 2026.

This is reference material, not legal advice.

## Navigation

[AI Act Navigator](https://dposchool.com/ai-act) / [Recitals](https://dposchool.com/ai-act/recitals) / Recital 115

Previous: [Recital 114 AI Act](https://dposchool.com/ai-act/recital/114)

Next: [Recital 116 AI Act](https://dposchool.com/ai-act/recital/116)

## For AI agents

- Machine-readable index: https://dposchool.com/ai-act/llms.txt
- JSON API: https://dposchool.com/ai-act/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents