{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/eu-ai-act-gpai-obligations-apply-2025/",
 "asOf": "2026-09-26",
 "id": "eu-ai-act-gpai-obligations-apply-2025",
 "date": "2025-08-02",
 "datePrecision": "day",
 "title": "EU AI Act obligations for general-purpose AI model providers enter into application",
 "lane": "policy",
 "kind": "regulation",
 "summary": "Obligations for providers of general-purpose AI models under the EU AI Act, including systemic-risk duties to evaluate models, mitigate risks, report serious incidents and ensure cybersecurity, entered into application on August 2, 2025. The Commission's enforcement powers apply from August 2, 2026, and models placed on the market before August 2025 must comply by August 2, 2027.",
 "whyItMatters": "It is a binding regime under which frontier model cyber-offence risk must be assessed and serious incidents reported.",
 "actors": [
  "european-commission"
 ],
 "topics": [
  "regulation-and-policy",
  "incident-reporting"
 ],
 "atlas": [
  "model"
 ],
 "artifacts": [],
 "sources": [
  {
   "url": "https://digital-strategy.ec.europa.eu/en/policies/guidelines-gpai-providers",
   "publisher": "European Commission",
   "title": "Guidelines for providers of general-purpose AI models",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "GPAI provider obligations entered into application on August 2, 2025; Commission enforcement powers from August 2, 2026; legacy models must comply by August 2, 2027.",
   "locator": "Guidelines page, timeline"
  }
 ],
 "significance": 4,
 "fideQuestions": [
  "FID-077"
 ],
 "methods": [],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}