GPAI Systemic Risk Management

Identify, assess, monitor and mitigate systemic risks arising from development, market placement and use of systemic-risk GPAI models.

For a GPAI provider, track whether systemic-risk classification or notification duties are triggered and assign an accountable lead. For models within the systemic-risk regime, maintain a risk assessment covering development, market availability and use. Use evaluations and external information to select mitigations, track actions and reassess remaining exposure. Record the basis for any code, standard or alternative compliance approach. Use the specific notification route and deadline where Article 52 applies; do not defer it to a later management review.

Throughout relevant development and use; on classification or notification triggers; at lifecycle and material-risk reviews.

Classification and notification assessment Systemic-risk register and supporting evaluations Mitigation plan, owners and review decisions Notification evidence where required Documented compliance approach and change history

Choose a significant risk and trace it to evaluation evidence, a mitigation and a review outcome. Separately test whether the team can identify and act on a classification-notification trigger.