On 14 November 2024, the EU introduced a draft Code of Practice for providers of general-purpose AI models with systemic risks. Developed through collaboration across four Working Groups, the draft focuses on transparency, risk identification, technical mitigation, and governance.

It is based on six key principles, including alignment with Union values, proportionality to risks, and future-proofing for AI advancements. Providers are required to continuously assess and mitigate risks throughout the AI lifecycle, with a focus on proportional risk management. Copyright compliance is emphasized, with providers needing to adhere to EU laws and conduct due diligence on training data. Additionally, the draft introduces an Acceptable Use Policy (AUP) outlining conditions for AI model use, including security, privacy, and compliance enforcement.