Art.93

Article 93 – Power to Request Measures

GPAI Models SME Relevant ~2 min read · 474 words

Article 93 gives the AI Office the power to require GPAI model providers to take specific corrective measures where investigations or evaluations reveal non-compliance or systemic risks. It is the enforcement endpoint of the GPAI investigation process — the point at which the AI Office’s findings translate into binding obligations on the provider.

✓ Low compliance impact for SMEs

WHAT THE ARTICLE IS ABOUT

The AI Office’s power to impose corrective obligations on GPAI providers

Article 93 establishes what the AI Office can do after conducting investigations and evaluations: it can request providers to take specific measures. These may range from modifying the model to withdrawing it from the market, and they are binding — non-compliance with a measure request is itself a violation subject to penalties.

WHAT IT SAYS

Binding corrective measures with time limits and escalation options

Where the AI Office finds that a GPAI model provider has violated Chapter V obligations, it may request the provider to take specific measures to bring the model into compliance within a specified time limit
Measures may include: modifying the model, restricting its availability, requiring additional documentation, mandating additional safeguards, or withdrawing the model from the Union market
Where the risk is serious and urgent, the AI Office may request interim measures pending the outcome of a full investigation
Providers have the right to be heard before measures are imposed — the procedural rights of Article 94 apply
If a provider fails to implement the requested measures within the specified time limit, the AI Office may request penalties under Article 101
The AI Office must communicate measures to the AI Board and relevant national market surveillance authorities
Measures must be proportionate to the nature and severity of the violation — the AI Office cannot impose disproportionate restrictions

WHO IS AFFECTED

GPAI model providers found in violation of Chapter V obligations

GPAI model providers whose models are found non-compliant or presenting systemic risks
Downstream providers and deployers whose products rely on models subject to measures
The AI Office which imposes and monitors measure compliance
National market surveillance authorities informed of measures taken

WHAT IT MEANS FOR SMES

Measures against your GPAI vendor are vendor risk events

If a GPAI model you rely on is subject to measures under Article 93, this is a significant vendor risk event — the measures may restrict how the model can be used or may require the provider to modify it in ways that affect your product
Model withdrawal measures are the most severe scenario — if your GPAI vendor is required to withdraw their model from the EU market, you may lose access to a core component of your product with limited notice
Build GPAI vendor diversification or contingency planning into your AI strategy — reliance on a single foundation model that is subject to enforcement action creates business continuity risk
Monitor AI Office communications for any measures imposed against GPAI providers you use — these will be communicated to national authorities and should become publicly visible

Article 92 — Power to conduct evaluations (the investigative step preceding measures)
Article 94 — Procedural rights (the hearing rights GPAI providers have before measures are imposed)
Article 101 — Fines for GPAI providers (the penalty for non-compliance with measures)
Article 88 — GPAI enforcement (the overall enforcement framework)

← Back to the Guide