Fourth GPAI Signatory Taskforce meeting
EU GPAI Code of Practice obligations are maturing rapidly, and Australian agencies deploying or procuring GPAI-model-based tools from EU-regulated providers may encounter these requirements indirectly.
Key points
- The fourth GPAI Signatory Taskforce meeting addressed Safety and Security and Copyright chapters of the GPAI Code of Practice.
- Post-market monitoring via model usage analysis was highlighted as key to systemic risk assessment under EU AI Act obligations.
- Discussion of 'marginal-risk' clauses - where providers may match unsafe competitor deployments - raised significant AI safety governance concerns.
Implications for Australian agencies
- Monitor Agencies tracking AI regulation may want to monitor GPAI Code of Practice developments, as obligations on major AI providers could affect the capabilities or terms of AI tools procured by APS entities.
- Consider Policy teams working on AI governance frameworks could consider how the EU's post-market monitoring approach to systemic risk assessment compares with emerging Australian expectations under the APS AI Policy.
Implications are AI-generated. Starting points, not advice — see methodology for how they're framed.
View original source
Copied.
Appeared in:
Weekly digest, 3 August 2026
"Fourth GPAI Signatory Taskforce meeting"
Source: EU Digital Strategy – News
Published: 3 August 2026
URL: https://digital-strategy.ec.europa.eu/en/news/fourth-gpai-signatory-taskforce-meeting
The fourth meeting of the GPAI Signatory Taskforce, held on 17 July 2026, focused on two chapters of the EU's General-Purpose AI Code of Practice. On safety and security, the AI Office outlined how post-market monitoring through model usage analysis can complement pre-deployment evaluations and inform systemic risk assessment. The taskforce also discussed 'marginal-risk' clauses in provider safety frameworks - provisions that could allow providers to relax safeguards if competitors deploy unsafe models - with the AI Office emphasising these can only be invoked under strict evidentiary and procedural conditions. On copyright, the meeting covered obligations for GPAI providers to publicly disclose web crawler practices and automatically notify rightsholders of updates, under Measure 1.3(4) of the Code.
Implications for Australian agencies:
- [Monitor] Agencies tracking AI regulation may want to monitor GPAI Code of Practice developments, as obligations on major AI providers could affect the capabilities or terms of AI tools procured by APS entities.
- [Consider] Policy teams working on AI governance frameworks could consider how the EU's post-market monitoring approach to systemic risk assessment compares with emerging Australian expectations under the APS AI Policy.
Retrieved from SIMS, 16 September 2026.