"Right now, compliance will depend on how standards, guidelines, secondary legislation or derivative instruments that follow the AI Act, that will actually stipulate what compliance looks like," Stampelos added.
In December, the EU AI Office, a newly created body regulating the use of models in accordance with the AI Act, published a second-draft code of practice for general-purpose AI (GPAI) models, which refers to systems like OpenAI's GPT family of large language models, or LLMs.
The second draft contained exemptions for providers of certain open-source AI models while including the requirement for developers of "systemic" GPAI models to undergo rigorous risk assessments.