Perform Required GPAI Authorised Representative Duties

Sub-obligations

These are independently assessable parts of the parent requirement.

1. Article 54(3)(a)

   Current

   Verify GPAI Technical Documentation and Provider Compliance

   Tracker Networks Guidance

   Verify that Annex XI technical documentation has been drawn up and that the provider has fulfilled Article 53 and, where applicable, Article 55 obligations.

   Official text

   (a) verify that the technical documentation specified in Annex XI has been drawn up and all obligations referred to in Article 53 and, where applicable, Article 55 have been fulfilled by the provider;

   Suggested controls

   • Authorised Representative Governance

     Appoint, mandate, monitor and support authorised representatives where required.

   Related risks

   • AI Value Chain Compliance Failure

     Suppliers, importers, distributors or authorised representatives may not provide the information, controls or cooperation needed for high-risk AI compliance.

2. Article 54(3)(b)

   Current

   Retain GPAI Technical Documentation and Provider Contact Details for Ten Years

   Tracker Networks Guidance

   Keep a copy of the Annex XI technical documentation and the appointing provider's contact details available to the AI Office and national competent authorities for ten years after the model is placed on the market.

   Official text

   (b) keep a copy of the technical documentation specified in Annex XI at the disposal of the AI Office and national competent authorities, for a period of 10 years after the general-purpose AI model has been placed on the market, and the contact details of the provider that appointed the authorised representative;

   Suggested controls

   • Regulatory Documentation Retention

     Retain required AI compliance documentation for mandated periods and ensure it remains retrievable.

   • Authorised Representative Governance

     Appoint, mandate, monitor and support authorised representatives where required.

   Related risks

   • Failure to Retain Required AI Records

     Required documentation or logs may not remain complete, available and retrievable for mandated periods.

   • AI Value Chain Compliance Failure

     Suppliers, importers, distributors or authorised representatives may not provide the information, controls or cooperation needed for high-risk AI compliance.

3. Article 54(3)(c)

   Current

   Provide GPAI Compliance Information and Documentation to the AI Office on Request

   Tracker Networks Guidance

   Provide the AI Office, upon reasoned request, with information and documentation necessary to demonstrate compliance with Chapter V obligations.

   Official text

   (c) provide the AI Office, upon a reasoned request, with all the information and documentation, including that referred to in point (b), necessary to demonstrate compliance with the obligations in this Chapter;

   Suggested controls

   • Regulatory Information and Cooperation Process

     Respond to reasoned regulator requests with controlled, complete and retrievable compliance information and logs.

   • Authorised Representative Governance

     Appoint, mandate, monitor and support authorised representatives where required.

   Related risks

   • AI Value Chain Compliance Failure

     Suppliers, importers, distributors or authorised representatives may not provide the information, controls or cooperation needed for high-risk AI compliance.

   • Regulatory Cooperation Failure

     The organisation may be unable to provide complete, timely and understandable information, records or cooperation to competent authorities.

4. Article 54(3)(d), 54(4)

   Current

   Cooperate With the AI Office and Competent Authorities on GPAI Matters

   Tracker Networks Guidance

   Cooperate with the AI Office and competent authorities on actions concerning the GPAI model and remain available to be addressed on compliance matters in addition to or instead of the provider.

   Official text

   (d) cooperate with the AI Office and competent authorities, upon a reasoned request, in any action they take in relation to the general-purpose AI model, including when the model is integrated into AI systems placed on the market or put into service in the Union.

   4. The mandate shall empower the authorised representative to be addressed, in addition to or instead of the provider, by the AI Office or the competent authorities, on all issues related to ensuring compliance with this Regulation.

   Suggested controls

   • Regulatory Information and Cooperation Process

     Respond to reasoned regulator requests with controlled, complete and retrievable compliance information and logs.

   • Authorised Representative Governance

     Appoint, mandate, monitor and support authorised representatives where required.

   Related risks

   • AI Value Chain Compliance Failure

     Suppliers, importers, distributors or authorised representatives may not provide the information, controls or cooperation needed for high-risk AI compliance.

   • Regulatory Cooperation Failure

     The organisation may be unable to provide complete, timely and understandable information, records or cooperation to competent authorities.

5. Article 54(5)

   Current

   Terminate the GPAI Mandate and Notify the AI Office When the Provider Is Non-Compliant

   Tracker Networks Guidance

   Terminate the mandate if there is reason to consider the provider is acting contrary to its AI Act obligations and immediately inform the AI Office of the termination and reasons.

   Official text

   5. The authorised representative shall terminate the mandate if it considers or has reason to consider the provider to be acting contrary to its obligations pursuant to this Regulation. In such a case, it shall also immediately inform the AI Office about the termination of the mandate and the reasons therefor.

   Suggested controls

   • Regulatory Information and Cooperation Process

     Respond to reasoned regulator requests with controlled, complete and retrievable compliance information and logs.

   • Authorised Representative Governance

     Appoint, mandate, monitor and support authorised representatives where required.

   Related risks

   • AI Value Chain Compliance Failure

     Suppliers, importers, distributors or authorised representatives may not provide the information, controls or cooperation needed for high-risk AI compliance.

   • Regulatory Cooperation Failure

     The organisation may be unable to provide complete, timely and understandable information, records or cooperation to competent authorities.