ARTICLE · 08 AUGUST 2025

European Commission Issues Comprehensive Code Of Practice For General-Purpose AI: A New Era Of AI Governance

Goodwin Procter LLP

Explore more from Goodwin Procter LLP

The European Commission published its final code of practice (the Code) for general-purpose artificial intelligence (GPAI) models on 10 July 2025...

United KingdomTechnology

Kaitlin Betancourt

Executive Summary

The European Commission published its final code of practice (the Code) for general-purpose artificial intelligence (GPAI) models on 10 July 2025, delivering on its promise to provide practical guidance for AI governance. This comprehensive framework represents the culmination of an extensive stakeholder process involving almost 1,000 participants and marks a pivotal moment in the evolution of AI regulation.

While technically voluntary, the Code offers something increasingly valuable in today's uncertain regulatory landscape: a clear pathway to demonstrate compliance with the EU AI Act's obligations for GPAI model providers. The Code takes effect on 2 August 2025, coinciding with key provisions of the AI Act itself, creating immediate practical implications for businesses across the AI value chain.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Related Articles

The Next Data Breach May Start With A Conversation

United KingdomTechnology

Picture This: ClickFix Hides Malware In An Image

United KingdomTechnology

Mishcon de Reya LLP

Patrolling The Perimeter: Final FCA Perimeter Guidance And Amendments To The UK Cryptoasset Regulations

United KingdomTechnology

Freshfields Bruckhaus Deringer

Cyber Monthly Wrap-up (UK, EMEA And The US) – October 2026

United KingdomTechnology

Herbert Smith Freehills Kramer LLP

AI In EDiscovery: Knowing When And How To Use It

United KingdomTechnology

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Technology
- New Technology

Related Comparative Guides

Comparative Guide

Blockchain & Crypto Assets

Comparative Guide

Artificial Intelligence

Comparative Guide

Fintech

See more popular content from

Technology

Be Nice To Claude: Anthropic's Acceptable Use Policy Updates

Anthropic's updated Acceptable Use Policy introduces significant changes for organisations building on Claude, extending far beyond the headline-grabbing prohibition on abusive behaviour towards the AI model. The policy now addresses deceptive campaigns, election interference, weapons development, surveillance systems, and requires human oversight for high-impact decisions affecting individuals' rights and wellbeing.

United KingdomTechnology

The Latest Scottish Tech Industry Survey Results At A Glance

Some key takeaways from the Scottish Tech Industry Survey 2025.

United KingdomTechnology

EU Digital Omnibus On AI Enters Into Force

The EU has introduced its first major amendment to the AI Act through the AI Omnibus regulation, which delays certain compliance deadlines while maintaining others. Organizations must understand which obligations remain on schedule, including transparency requirements and general-purpose AI provisions, and which have been deferred, such as high-risk AI system requirements.

European UnionTechnology

AI In Advertising: Do I Need To Label My AI-generated Ad?

Advertisers using AI-generated content face complex transparency requirements that vary significantly between the UK and EU. While UK law focuses on preventing consumer deception without explicit AI labelling mandates, the EU AI Act introduces strict disclosure obligations for 'deep fakes' that could catch even UK-based campaigns if they reach EU audiences.

European UnionTechnology

Browne Jacobson LLP

Celsius vs Tether: Court Ruling Marks Key Moment In Cross-Border Crypto Litigation

A recent ruling from the U.S. Bankruptcy Court has paved the way for Celsius Network to continue its $4 billion lawsuit against stablecoin issuer Tether.

United KingdomTechnology

Spencer West LLP

The UK Cyber Security And Resilience Bill: What You Need To Know

The UK Government has introduced the Cyber Security and Resilience Bill to address critical gaps in existing cyber security regulations, expanding coverage to data centres, managed service providers, and critical suppliers while granting regulators enhanced enforcement powers. With tightened incident reporting deadlines, turnover-based penalties up to £17 million, and mandatory supply chain resilience measures, organisations across essential services sectors must assess their readiness for compliance

United KingdomTechnology

Browne Jacobson LLP

The EU’s New AI Transparency Rules: What You Need To Know

The European Commission has published its Code of Practice on marking and labelling AI-generated content, helping businesses to meet new transparency duties under the EU AI Act.

European UnionTechnology

DMH Stallard LLP

The EU AI Act’s Transparency Rules Are Now Live: What Organisations Need To Do

As of 2 August 2026, the EU AI Act’s transparency obligations under Article 50 are now in effect, with one limited exception for providers of AI systems generating synthetic audio, image, video or text content that...

United KingdomTechnology

Kingsley Napley LLP

‘One Engine, Configured A Thousand Different Ways’ – Is Claude For Legal The Next Big Shift In Legal Tech?

On 12 May, Anthropic launched Claude for Legal, marking a shift in the AI company’s positioning, from primarily powering legal AI products such as Harvey and Legora, towards potentially becoming a legal platform in its own right.

United KingdomTechnology

Cyber Security And Resilience Bill: What's The Latest And What Should Businesses Do Now?

The National Cyber Security Centre emphasizes five critical areas requiring director-level attention: risk management, strategy, people, incident planning and response, and assurance oversight. Organizations must establish robust governance frameworks to address evolving cyber threats and ensure comprehensive resilience across their operations.

United KingdomTechnology