Finalizing the GPAI Code: A Crucial Test for Europe’s AI Future

How to Finalise the GPAI Code: A Test of Europe’s Commitment to AI Innovation

The finalisation of the General-Purpose AI (GPAI) Code of Practice represents a significant milestone in Europe’s journey towards establishing a robust framework for AI regulation. As the European Commission’s AI Office prepares to adopt the third draft of this code, stakeholders are increasingly concerned about the implications of regulatory overreach and the clarity of the text. This article examines the key challenges and recommendations surrounding the GPAI Code.

1. The Risk of Regulatory Overreach

The latest draft of the GPAI Code introduces several measures that extend beyond the legal framework established by the AI Act. These measures include:

  • New definitions for open source AI models.
  • Rights-reservation protocols allowing rightsholders to impose opt-outs from data mining.
  • Ambiguous EU standardisation processes that could lead to regional fragmentation.
  • Mandatory external assessments that had previously been rejected during negotiations.

This extensive list of new requirements raises concerns about the viability of the code as a voluntary compliance tool. If the measures do not align with the AI Act, signatories may find themselves at a disadvantage compared to non-signatories, ultimately undermining the purpose of the GPAI Code.

2. Clarity and Practicality Challenges

Another significant issue with the current draft is its persistent lack of clarity. Key deliverables from the AI Office, such as guidelines on GPAI rules and templates for public disclosure of training data, are still pending. The absence of these elements leaves the Code incomplete and difficult to interpret.

For instance, the introduction of concepts like ‘safe-originator model’ and ‘safely derived model’ requires alignment with forthcoming guidelines but currently lacks clear definitions. Furthermore, there are concerns about how trade secret protections will be maintained amidst new transparency requirements.

3. Ensuring a Strong Finish: Final Recommendations

The success of the GPAI Code hinges on three critical questions:

  • Is it aligned with the AI Act?
  • Is it clear and proportionate?
  • Is it practical?

As the drafting process nears completion, these questions should guide the experts and EU Member States. It is crucial that the final Code supports companies in complying with the AI Act while also fostering an environment conducive to AI innovation and competitiveness within Europe.

Conclusion

The finalisation of the GPAI Code is not just a regulatory exercise but a test of Europe’s ambition to lead in AI innovation. A balanced, clear, and practical Code of Practice will empower companies to navigate compliance challenges while enhancing their capacity to innovate. As the EU moves forward, aligning its regulatory framework with the realities of the AI landscape will be essential for maintaining global competitiveness.

More Insights

Revolutionizing Drone Regulations: The EU AI Act Explained

The EU AI Act represents a significant regulatory framework that aims to address the challenges posed by artificial intelligence technologies in various sectors, including the burgeoning field of...

Revolutionizing Drone Regulations: The EU AI Act Explained

The EU AI Act represents a significant regulatory framework that aims to address the challenges posed by artificial intelligence technologies in various sectors, including the burgeoning field of...

Embracing Responsible AI to Mitigate Legal Risks

Businesses must prioritize responsible AI as a frontline defense against legal, financial, and reputational risks, particularly in understanding data lineage. Ignoring these responsibilities could...

AI Governance: Addressing the Shadow IT Challenge

AI tools are rapidly transforming workplace operations, but much of their adoption is happening without proper oversight, leading to the rise of shadow AI as a security concern. Organizations need to...

EU Delays AI Act Implementation to 2027 Amid Industry Pressure

The EU plans to delay the enforcement of high-risk duties in the AI Act until late 2027, allowing companies more time to comply with the regulations. However, this move has drawn criticism from rights...

White House Challenges GAIN AI Act Amid Nvidia Export Controversy

The White House is pushing back against the bipartisan GAIN AI Act, which aims to prioritize U.S. companies in acquiring advanced AI chips. This resistance reflects a strategic decision to maintain...

Experts Warn of EU AI Act’s Impact on Medtech Innovation

Experts at the 2025 European Digital Technology and Software conference expressed concerns that the EU AI Act could hinder the launch of new medtech products in the European market. They emphasized...

Ethical AI: Transforming Compliance into Innovation

Enterprises are racing to innovate with artificial intelligence, often without the proper compliance measures in place. By embedding privacy and ethics into the development lifecycle, organizations...

AI Hiring Compliance Risks Uncovered

Artificial intelligence is reshaping recruitment, with the percentage of HR leaders using generative AI increasing from 19% to 61% between 2023 and 2025. However, this efficiency comes with legal...