--- title: "Article 55 — Obligations of providers of general-purpose AI models with systemic risk" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1689-20260727" source_retrieved: 2026-09-28 shortTitle: "Article 55 — Obligations of providers of general-purpose AI models with systemic risk" instrument_type: level1_regulation authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Regulation (EU) 2024/1689" instrument: aiact celex: "32024R1689" regulation: AI Act regulation-full: "Regulation (EU) 2024/1689" article: 55 status: in_force object_id: eu.aiact.legal_text.article.55 text_version: "Consolidated version of 27 July 2026" source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1689-20260727" check_status: matched verified: true last_checked: 2026-10-26 --- *In force · Consolidated version of 27 July 2026 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1689-20260727)* 1. In addition to the obligations listed in [Articles 53](53.md) and [54](54.md), providers of general-purpose AI models with [systemic risk](https://www.headlesslaw.com/definitions/ai-act/systemic-risk) shall: **(a)** perform model evaluation in accordance with standardised protocols and tools reflecting the state of the art, including conducting and documenting adversarial testing of the model with a view to identifying and mitigating systemic risks; **(b)** assess and mitigate possible systemic risks at Union level, including their sources, that may stem from the development, the [placing on the market](https://www.headlesslaw.com/definitions/ai-act/placing-on-the-market), or the use of general-purpose AI models with systemic risk; **(c)** keep track of, document, and report, without undue delay, to the [AI Office](https://www.headlesslaw.com/definitions/ai-act/ai-office) and, as appropriate, to national competent authorities, relevant information about serious incidents and possible corrective measures to address them; **(d)** ensure an adequate level of cybersecurity protection for the [general-purpose AI model](https://www.headlesslaw.com/definitions/ai-act/general-purpose-ai-model) with systemic risk and the physical infrastructure of the model. 2. Providers of general-purpose AI models with systemic risk may rely on codes of practice within the meaning of [Article 56](56.md) to demonstrate compliance with the obligations set out in paragraph 1 of this Article, until a [harmonised standard](https://www.headlesslaw.com/definitions/ai-act/harmonised-standard) is published. Compliance with European harmonised standards grants providers the presumption of conformity to the extent that those standards cover those obligations. Providers of general-purpose AI models with systemic risks who do not adhere to an approved code of practice or do not comply with a European harmonised standard shall demonstrate alternative adequate means of compliance for assessment by the Commission. 3. Any information or documentation obtained pursuant to this Article, including trade secrets, shall be treated in accordance with the confidentiality obligations set out in [Article 78](78.md). *** [Chapter V — General-purpose AI models](../chapters/v.md) · [← Article 54](54.md) · [Article 56 →](56.md)