EU AI Act Article 53 — General-Purpose AI Model Provider Obligations

What Article 53 actually requires

Article 53 of Regulation (EU) 2024/1689 sets obligations on providers of general-purpose AI (GPAI) models — models trained with large amounts of data using self-supervision at scale that display significant generality and are capable of competently performing a wide range of distinct tasks.

GPAI providers must:

• (a) Draw up and keep up-to-date the technical documentation of the model, including its training and testing process and the results of its evaluation, with at minimum the elements set out in Annex XI, to be provided on request to the AI Office and national competent authorities.
• (b) Draw up, keep up-to-date and make available information and documentation to providers of AI systems who intend to integrate the GPAI model into their AI systems, with at minimum the elements in Annex XII.
• (c) Put in place a policy to comply with Union law on copyright and related rights, including identifying and complying with reservations of rights expressed pursuant to Article 4(3) of Directive (EU) 2019/790.
• (d) Draw up and make publicly available a sufficiently detailed summary about the content used for training of the GPAI model, according to a template provided by the AI Office.

Open-source carve-out — Article 53(2)

Article 53(2) provides that obligations (a) and (b) do not apply to providers of AI models released under a free and open-source licence that allows access, use, modification and distribution of the model, and whose parameters, including weights, model architecture and information on model usage, are made publicly available — unless the model is a systemic-risk GPAI under Article 55.

Obligations (c) and (d) — copyright policy and training-data summary — apply regardless of open-source status.

Who is covered

Providers of GPAI models, defined in Article 3(63) — the entity that develops a GPAI model or has it developed and places it on the market under its own name or trademark. Downstream AI system providers integrating GPAI models keep their full Article 11 obligations.

What to do

• For closed GPAI models: produce the Annex XI documentation and the Annex XII downstream-provider documentation. The AI Office is publishing templates.
• For open-source GPAI models with publicly-available weights: Article 53(2) carve-out applies for (a)+(b); (c)+(d) still apply.
• Set a copyright-compliance policy that handles Article 4(3) Directive (EU) 2019/790 opt-outs at the data-acquisition stage.
• Publish the training-data summary using the AI Office template (when published).

Inline crosswalk

• ISO/IEC 42001:2023 Annex A.6.2 — Lifecycle documentation (mirrors Annex XI).
• NIST AI RMF MAP 4.1 — Documentation includes purpose, intended use, users, limitations.
• NIST AI RMF GOVERN 6.1 — Policies for third-party software and data.

Common mistakes

• Treating open-source as a blanket exemption. Article 53(2) carve-out is partial.
• Skipping the training-data summary because "we use a lot of public data." Article 53(1)(d) is mandatory.
• Article 4(3) Dir (EU) 2019/790 opt-outs unhandled — reservations of rights must be respected.

Penalties

Article 101 sets fines for GPAI providers up to €15 million or 3% of worldwide annual turnover, whichever is higher.

---

Disclaimer. Reference; not legal advice. Verify with counsel. Reg text from Regulation (EU) 2024/1689.