The EU AI Act is Here. Ensure your compliance, effortlessly.

As part of its digital strategy, the EU has adopted the AI Act (Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence) to establish a common legal framework for the development and use of AI across the EU. This Regulation aims to ensure that AI systems and general-purpose AI models are safe, transparent, and respect fundamental rights, while supporting innovation and fostering trust in the technology.

The AI Act applies to a broad range of entities involved in the lifecycle of AI systems and general-purpose AI models. Specifically, it applies to:

• Providers of AI systems or general-purpose AI models that are placed on the market or put into service in the EU, regardless of whether they are established in the EU or in a third country.
• Deployers of AI systems that have their place of establishment or are located in the EU.
• Providers and deployers of AI systems that have their place of establishment or are located in third countries, if the AI system’s output is used in the EU.
• Importers and distributors of AI systems making them available in the EU.
• Product manufacturers placing on the EU market or putting into service an AI system together with their product and under their own name or trademark.
• Authorized representatives of providers that are not established in the EU.
• Affected persons

The AI Act does not apply to:

• AI systems used exclusively for military, defense, or national security purposes.
• AI systems used by public authorities in third countries under international cooperation agreements on law enforcement and judicial cooperation with the EU.
• AI systems specifically developed and put into service in the EU for the sole purpose of scientific research and development.
• Deployers who are natural persons using AI systems in the course of a purely personal non-professional activity.
• AI systems released under free and open-source licenses, unless they are classified as high-risk or fall under prohibited AI practices in the AI Act.

An Authorised Representative acts as a liaison between the provider of an AI system or a general-purpose AI model and the competent EU authorities, including the AI Office. The Representative performs the tasks specified in the mandate received from the provider.

The Authorised Representative of a provider of a GPAI model must:

• Provide a copy of the mandate to the AI Office upon request.
• Verify that the technical documentation is prepared and that compliance with obligations is fulfilled.
• Keep a copy of the technical documentation for a period of 10 years after the GPAI model has been placed on the market, and the contact details of the provider.
• Provide the AI Office, upon a reasoned request, with all necessary information to demonstrate compliance.
• Cooperate with the AI Office and competent authorities, upon a reasoned request, in any action they take concerning the GPAI model.
• Be addressed, in addition to or instead of the provider, by the AI Office or competent authorities on all issues related to ensuring compliance.
• Terminate the mandate if it considers, or has reason to consider, that the provider is acting contrary to its obligations under the AI Act, and immediately inform the AI Office of the termination and the reasons for termination.

The Authorised Representative of a provider of a high-risk AI system must:

• Verify that the EU declaration of conformity and the technical documentation have been drawn up.
• Keep for a period of 10 years the provider’s contact details, the EU declaration of conformity, technical documentation and certificates.
• Provide the competent authority, upon request, with all necessary information to demonstrate conformity.
• Cooperate with competent authorities to reduce or mitigate risks.
• Ensure that the AI system is correctly registered in the relevant EU database, or verify that the submitted information is correct.
• Be addressed, in addition to or instead of the provider, by the competent authorities.
• Terminate the mandate if the provider acts contrary to obligations and inform the market surveillance authority.

• Failure to appoint an Authorised Representative → Up to €15 million or 3% of global turnover.
• Prohibited AI Practices → Up to €35 million or 7%.
• Failure to comply with key obligations → Up to €15 million or 3%.
• Providing misleading information → Up to €7.5 million or 1%.

The AI Act sets out a phased timeline:

• 2 August 2025 → GPAI models placed on the market from this date.
• 2 August 2026 → High-risk AI systems.
• 2 August 2027 → GPAI models placed on the market before 2 August 2025.

Open-source AI models may be exempt if they publicly disclose the required information, unless they are classified as posing systemic risks.

Systemic risks include risks to fundamental rights and safety and risks related to loss of control over the model.

If these conditions are met, the model is subject to additional obligations, including the appointment of an Authorised Representative.