The EU AI Act's rules for general-purpose AI models have applied to new models since August 2025. From 2 August 2026 the European Commission gains the power to enforce them.
What changes on the date
After that point the Commission can request information from a model provider, ask for access to a model, and require changes or withdrawal where a model breaches its duties. Penalties for general-purpose model providers can reach the greater of 15 million euro or 3 percent of global annual turnover. The obligations centre on transparency, documentation and copyright, with added safety and security duties for the most capable models.
Who should be reading this
The duties sit with model providers, and the effect reaches everyone who builds on those models. An organisation that fine-tunes or redistributes a general-purpose model can take on provider obligations of its own. A firm that only uses one still depends on the provider meeting its duties, which is a fair question to put in a procurement review.
Part of our guide: EU AI Act compliance for UK organisations.
Know what your providers owe
HEX 165 assesses the models and providers you depend on against these obligations. Get in touch or read more about HEX 165.