{"slug":"eu-ai-act-art-55-systemic-risk-incident-reporting","id":"AIPT-OBL-0045","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0045","title":"Providers of systemic-risk GPAI models must track and report serious incidents to the AI Office","short_title":"Systemic-risk incident reporting","category":"incident_handling","summary":"Providers of general-purpose AI models with systemic risk must keep track of, document and report without undue delay to the AI Office and, where relevant, to national competent authorities the relevant information about serious incidents and the possible corrective measures to address them. The General-Purpose AI Code of Practice sets out timelines and content that providers may follow to demonstrate compliance.\n","practical_action":"Define serious-incident criteria for the model, a tracking log and an AI Office notification template with owner and clock.\n","is_binding":true,"applies_from":"2025-08-02","section":"Articles 51–56","source_reference":"Article 55(1)(c)","official_source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","review_status":"verified","confidence_level":"high","last_verified_at":"2026-09-26","reviewed_by":null,"actors":["gpai_provider"],"sectors":["cross_sector"],"use_cases":["generative_ai"],"applicability":[{"description":"Providers of general-purpose AI models classified as having systemic risk under Article 51.","actors":["gpai_provider"],"conditions":null}],"evidence_examples":[{"title":"Serious incident tracking log for the model","description":null,"artifact_type":"register"},{"title":"AI Office incident notification","description":null,"artifact_type":"document"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clause 10.2; Annex A.8.4","note":"Corrective action and incident communication.","confidence_level":"high","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"MANAGE 4.3, MEASURE 3.1","note":"Incident response and tracking of emergent risks.","confidence_level":"high","is_original":true}],"controls":[{"slug":"ai-incident-management-and-reporting","title":"AI incident management and regulatory reporting","kind":"process","relationship":"satisfies","note":"Model-level incident criteria, log and AI Office reporting.","confidence_level":"high","url":"https://aipolicytracker.org/controls/ai-incident-management-and-reporting"},{"slug":"frontier-model-safety-framework","title":"Frontier model safety and security framework","kind":"policy","relationship":"supports","note":"Framework defines the incident types and escalation.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/frontier-model-safety-framework"}],"url":"https://aipolicytracker.org/obligations/eu-ai-act-art-55-systemic-risk-incident-reporting","policy":{"slug":"eu-ai-act","title":"Regulation (EU) 2024/1689 — Artificial Intelligence Act","status":"partially_applicable","jurisdiction":"eu","url":"https://aipolicytracker.org/policies/eu-ai-act"}}