GPAI Regulatory Cooperation
GPAI Regulatory Information, Evaluation and Remediation Response
What this control does
Provide GPAI documentation/model access and implement regulator-requested compliance, mitigation or market measures.
How to implement
For a GPAI provider receiving a Commission or AI Office request, identify whether it concerns information, model evaluation access or remedial measures. Assign legal and technical owners, validate the information and respond through the applicable route within the specified period. For a formal evaluation-access decision, follow its technical and logging conditions and avoid constraints that materially impede evaluation. Track requested measures and any commitments made binding through to verified completion. Preserve an appropriate record of submissions and actions, while respecting any lawful restriction on recording evaluation access.
Suggested timing and triggers
On an information, evaluation or remedial-measure request; within the applicable decision deadline; follow-up as required.
Evidence examples
Request or decision and scope/deadline assessment Validated documentation and approved response Evaluation-access configuration and conditions Remedial measures or binding commitments with owners Transmission, completion and follow-up evidence
How to check this control
Select a response or exercise and check that the team chose the correct procedure. Validate information against source records, test the authorized access where relevant, and trace a required measure to evidence of completion.
Related EU AI Act obligations
Article 91(1), 91(3)-(5)
Provide GPAI Documentation and Information Requested by the Commission or AI Office
Article 92(3)-(5)
Provide Requested Technical Access to a GPAI Model for Regulatory Evaluation
Article 93
Implement Commission-Requested GPAI Compliance, Systemic-Risk Mitigation or Market Restriction Measures