Story
The European Commission published a draft implementing regulation on March 12, 2026 (Reference: Ares(2026)2709234) detailing how it will investigate and penalize GPAI model providers under the EU AI Act. The regulation describes three core enforcement areas: (1) technical evaluations granting the Commission direct access to model code, weights, APIs, and infrastructure - including the ability to disable provider monitoring systems during audits; (2) strict independence rules for external experts with a 12-month lookback period on contractual relationships; and (3) interim measures allowing provisional suspension of models before formal proceedings. GPAI obligations for model providers took effect in August 2025, with full enforcement powers active from August 2, 2026. The public consultation runs until April 9, 2026, with formal adoption planned for Q2 2026. Companies using GPAI models face potential liability as the Commission can require information about data used, integration methods, and risk assessments. ADVISORI reported the core details. Compliquest noted additional context. Hyperion Consulting added corroborating details.