CLAIM-2026-08-09-06

AI Act Article 55(1)(d) requires providers of general-purpose AI models with systemic risk to 'ensure an adequate level of cybersecurity protection for the general-purpose AI model with systemic risk and the physical infrastructure of the model'.

Why it matters

It is the clause OpenAI's stated response actually tracks, and it is enforceable by the Commission from 2 August 2026 — unlike the transparency clauses that dominated the coverage.

Sources

• euaiactexpl2026obligatio