Regulation · Industry Updates
The EU AI Act's Second Wave: What Changes for Foundation Model Providers This Quarter
A new set of obligations comes into force, and Brussels is signaling it will not extend grace periods a third time.
The European AI Office has spent eighteen months staffing up. It is now staffed up. Providers of general-purpose AI models that previously treated the Act as a paper tiger should reread the relevant provisions.
The new obligations
- Mandatory technical documentation for any model trained above the compute threshold
- Public summaries of training data sources
- Incident reporting within 15 days of a serious malfunction
- Adversarial evaluation results published in a standardized format
Who is in scope
Any provider placing a general-purpose AI model on the EU market — regardless of where the company is headquartered. The extraterritorial reach is the same mechanism that made GDPR a global standard.
Open-source carve-outs
Genuinely open-weight, non-commercial releases retain a lighter regime. The carve-out narrows considerably the moment a paid API or hosted product touches the model.
Penalties have teeth
Fines scale to a percentage of global turnover, not just EU revenue. Two early enforcement cases are reportedly already on the Office's desk.
Frequently asked questions
- Does the AI Act apply to non-EU companies?
- Yes. Any provider placing a model on the EU market is in scope, regardless of where the company is based.
- Are open-source models exempt?
- Genuinely open and non-commercial releases benefit from a lighter regime, but the exemption narrows once the model is monetized.
- What are the fines?
- Penalties scale as a percentage of global annual turnover, with the highest tier reserved for prohibited practices.
About the author
Henrik Lindqvist
Henrik Lindqvist writes for Ravir Press on technology, AI and the policy frontier. Tips welcome at editor@ravirpress.com.
More from Industry Updates
Anthropic Crosses $5B Run-Rate as Enterprise Claude Adoption Accelerates
New customer disclosures and partner data point to a sharp acceleration in enterprise spend on Claude.