The EU AI Act defines the \u201cprovider\u201d of a GPAI model under Article 3(2) as a natural or legal person, public authority, agency, or other body that develops a GPAI model or has it developed and places it on the market or puts it into service under its own name or trademark, whether for payment or free of charge. This definition extends to both original developers and entities that significantly modify existing models, with recent guidelines from the European Commission (issued July 2025) providing clarifications on scope, particularly regarding fine-tuning and modifications. These guidelines emphasize a lifecycle approach and compute-based thresholds to determine provider status, ensuring obligations are proportionate and focused on entities with control over market placement.<\/p>\n
Grok<\/p>\n
Original Providers (e.g., OpenAI for GPT Models, Meta for Llama, Google for\u00a0Gemini)<\/strong><\/p>\n Original providers are those who initially develop and place the base GPAI model on the EU market, bearing primary responsibility for compliance. For instance, OpenAI qualifies as the provider for models like GPT-4, as it develops and markets them under its trademark. Similarly, Meta is the provider for Llama series models, and Google for Gemini, when made available via APIs or downloads in the EU. Obligations include maintaining technical documentation, ensuring copyright compliance, publishing training data summaries, and notifying the Commission if systemic risk thresholds (e.g., training compute exceeding 10\u00b2\u2075 FLOPs) are met. The guidelines confirm that any fine-tuning or modifications performed by the original provider (or on their behalf) are considered part of the model\u2019s lifecycle, not creating a new model. For example, if OpenAI fine-tunes GPT-4 post-market and releases it as an updated version under its brand, it remains the same provider without triggering new classifications. This applies uniformly to other GPAI providers like Anthropic (Claude) or Stability AI (Stable Diffusion), where lifecycle modifications do not shift provider\u00a0status.<\/p>\n Entities Fine-Tuning and Marketing Under Their Own Trademark (Downstream Providers)<\/strong><\/p>\n If a public or private entity fine-tunes an existing GPAI model (e.g., GPT via OpenAI\u2019s tools, Llama from Meta, or Gemini from Google) and places the modified version on the EU market under its own name or trademark, it may become a downstream provider, assuming obligations proportional to the modification. The guidelines introduce an \u201cindicative criterion\u201d for this: if the training compute used for the modification exceeds one-third of the original model\u2019s training compute, the entity is presumed to be a new provider. If the original compute is unknown, fixed thresholds apply\u200a\u2014\u200a10\u00b2\u00b3 FLOPs for general GPAI status or 10\u00b2\u2075 FLOPs for systemic risk assessment.<\/p>\n For example, a company fine-tuning GPT-4 for sector-specific use (e.g., healthcare chatbots) and marketing it as \u201cHealthAI Bot\u201d under its trademark would likely qualify as a provider if the fine-tuning compute meets the threshold, leading to significant changes in capabilities or generality. The same holds for fine-tuning other models like Claude or PaLM\u200a\u2014\u200aif marketed anew, the entity must evaluate whether modifications alter systemic risks or create a \u201cnew model.\u201d However, minor fine-tuning (below the compute threshold) or internal use does not trigger provider status; the entity remains a deployer, with obligations staying on the original provider. The guidelines note that this threshold applies only to downstream actors, not originals, to avoid over-burdening innovators while ensuring accountability for substantial alterations.<\/p>\n Key Differences and Obligation Shifts<\/strong><\/p>\n Scope of Control: Original providers handle the full lifecycle, including pre- and post-market updates, with comprehensive obligations (e.g., entire training data summaries). Downstream providers focus on incremental changes, supplementing (not replacing) original documentation\u200a\u2014\u200ae.g., detailing only new data or risks from fine-tuning.Risk Assessment: Originals like OpenAI often meet systemic risk due to scale, requiring evaluations and incident reporting. Downstream fine-tuners are assessed independently; they may not inherit systemic status unless their modifications push total compute over thresholds, but must notify the Commission if risks\u00a0emerge.Market Placement and Trademarks: Placing a fine-tuned model under a new trademark is a strong indicator of provider status, especially if combined with commercial intent or significant compute. Obligations shift accordingly\u200a\u2014\u200ae.g., the downstream entity must implement copyright policies and provide downstream info, while originals may need contractual clauses in licenses to address modifications.Exceptions and Proportionality: Open-source models (e.g., fine-tuned versions of Llama) may have reduced documentation requirements unless systemic. Upstream providers can avoid EU obligations by explicitly excluding EU distribution in licenses, shifting provider status to downstream integrators.<\/p>\n References<\/strong><\/p>\n EU AI\u00a0Act<\/a>Guidelines for providers of general-purpose AI\u00a0models<\/a>Commission seeks input to clarify rules for general-purpose AI\u00a0models<\/a>Taking the EU AI Act to Practice: How the Final GPAI Guidelines Shape the AI Regulatory Landscape<\/a>EU Commission\u200a\u2014\u200aGuidelines on the Scope of the Obligation for GPAI Models under the AI\u00a0Act<\/a>European Commission Issues Guidelines for Providers of General-Purpose AI\u00a0Models<\/a><\/p>\n Analysis: Who is the \u201cProvider\u201d for GPAI Models?<\/a> was originally published in Coinmonks<\/a> on Medium, where people are continuing the conversation by highlighting and responding to this story.<\/p>","protected":false},"excerpt":{"rendered":" The EU AI Act defines the \u201cprovider\u201d of a GPAI model under Article 3(2) as a natural or legal person, public authority, agency, or other body that develops a GPAI model or has it developed and places it on the market or puts it into service under its own name or trademark, whether for payment […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-86339","post","type-post","status-publish","format-standard","hentry","category-interesting"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/86339"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86339"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/86339\/revisions"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86339"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86339"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}