EU AI Model Evaluation and Enforcement Rules

Overview

Commission Implementing Regulation (EU) 2026/1755 establishes binding procedural rules for Commission supervision under the Artificial Intelligence Act. Article 1 covers evaluations of general-purpose AI models under Article 92, including access conditions and appointment of independent experts, and proceedings potentially resulting in decisions under Article 101(1). The European Commission adopted the instrument in Brussels on 20 July 2026 under Articles 92(6) and 101(6) of the AI Act. Published in the Official Journal L series on 21 July 2026, it entered into force on 10 August 2026. Its document number is 2026/1755 and its CELEX identifier is 32026R1755.

The regulation is binding in its entirety and directly applicable in all Member States. It combines effective investigative access with procedural safeguards for providers and protections for confidential information. It regulates technically useful model access, independent evaluation, opening and closing proceedings, responses to preliminary findings, access to the investigative file, limitation periods and document transmission. Its scope operationalises designated Commission powers concerning general-purpose AI models within the AI Act’s wider compliance framework. Evaluations, investigative steps and urgent interim measures may precede formal opening of proceedings.

Definitions

The regulation uses the terminology and institutional architecture of the AI Act, particularly general-purpose AI models, providers, evaluations and independent experts. Article 7 identifies the provider receiving preliminary findings under Article 101(2) of the AI Act as the ‘addressee’. That designation determines who may submit written observations and request access to the file. Article 2 identifies application programming interfaces as ‘APIs’, one of several possible technical channels for evaluation access.

Operative provisions give practical content to procedural concepts. Access may encompass source code, model weights, hosting infrastructure, internal access, and inspection or modification of system state during interaction. Independent experts undergo relationship-based independence checks, declarations of interest, confidentiality commitments and information-security assessments. Business secrets and other confidential information must be identified and substantiated document by document when requested by the Commission. Terms of disclosure govern eligible advisers, technical means, duration, disclosure restrictions and permitted uses of protected file access. A Qualified Electronic Signature is the signature standard for digitally transmitted documents, assessed against Regulation (EU) No 910/2014.

Governance and Institutional Framework

The Commission directs evaluations, determines required access conditions, appoints experts and manages proceedings concerning possible Article 101(1) decisions. Article 4 generally requires a call for expressions of interest based on stated selection criteria. A standing list may support selection without another selection procedure. Scientific panel members established under Article 68 of the AI Act may be appointed directly. Experts may also be appointed following a procedure under Article 167 of Regulation (EU, Euratom) 2024/2509. The recitals record that the measures accord with the opinion of the Artificial Intelligence Committee.

Article 3 requires consideration of shared ownership, governance, management, personnel, resources, previous Commission evaluation appointments and contractual relationships with the relevant provider or other providers over at least the preceding 12 months. Independence must continue throughout appointment. Experts must make the declaration of interest specified by Article 10(3) of Implementing Regulation (EU) 2025/454 and maintain suitable security protocols. Providers may submit reasoned observations challenging satisfaction of the AI Act’s expert criteria. The Commission may terminate appointments for serious independence concerns, inadequate confidentiality measures or qualifying objections demonstrating that the criteria are absent. Experts are subject to Article 339 TFEU and applicable AI Act confidentiality requirements.

Key Focus Areas

Article 2 makes the Commission’s access decision the operational reference point for evaluation. It must specify technical means, tools, components, conditions and the compliance deadline, and may impose minimum performance, latency and throughput requirements. Access must suit the evaluation’s objectives and may extend beyond employee access levels. Providers must avoid technical or other constraints that materially impede appropriate evaluation and provide necessary access without undue delay and within the specified deadline. The Commission may require logging measures tracking or recording its access to be disabled to the extent necessary to preserve evaluation integrity and confidentiality.

Effective defence in potential fining proceedings is supported by Articles 7 and 8. Following notification of preliminary findings, the addressee has written-response rights and access to the file. Documents mentioned in the findings must be supplied subject to confidentiality redactions. Further access generally operates through specified external legal and economic counsel and technical experts under Commission-defined disclosure terms. Article 9 structures the identification and protection of confidential material while permitting justified disclosure. These arrangements combine useful technical access, opportunities to contest findings and controlled handling of commercially sensitive evidence.

Implementation Framework

Article 5 permits proceedings concerning conduct covered by Article 101(1) of the AI Act while preserving earlier use of supervisory powers under Section 5 of Chapter IX. Before opening proceedings, the Commission may order interim measures by decision where urgency arises from risks of serious damage to health, safety requirements or other AI Act public interests, based on a prima facie infringement finding. Measures may include preventing a model from being made available on the market. Article 6 requires closure by decision if there are no grounds for an Article 101(1) decision. A downstream-provider complainant under Article 89(2) must first have an opportunity to express its views.

Article 7 guarantees a Commission-set response period of at least 21 days. Written observations must be succinct, correct, complete, intelligible and not misleading, with supporting evidence and written proof of representative authority. Observations must use an official Union language. Supporting documents retain their original language, with a faithful official-language translation where needed. The Annex limits observations to 50 pages, excluding proportionate annexes with a purely evidential and instrumental function. It requires A4 formatting, consecutive page and paragraph numbering, readable fonts, at least 12-point body text and 10-point footnotes, single spacing, margins of at least 2.5 cm and no more than 4,700 characters per page.

Monitoring and Evaluation

Evaluations follow the objectives established in Article 92(1) of the AI Act and the technical conditions specified in the Commission’s access decision. Article 14 allows the Commission to define the methods and duration of real-time or near-real-time information sharing through APIs or equivalent means; it may first invite alternative provider proposals. Independent expert security arrangements are assessed before appointment and must remain appropriate throughout it. Changes undermining independence or confidentiality can affect an ongoing evaluation.

Article 6 permits reopening closed proceedings by decision, including where measures requested under Article 93(3) are ineffective, binding commitments are not respected, the closing decision relied on incomplete, incorrect or misleading information, or Union-level systemic risks change significantly. Confidentiality management also entails continuing procedural checks. The Commission may request substantiated claims, non-confidential versions and concise descriptions of redacted material within specified deadlines. Failure to comply may lead it to treat the information as non-confidential. Model evaluation, monitoring of requested measures or commitments, and management of procedural evidence therefore carry distinct procedural consequences.

Penalties, Liability, and Appeals

The regulation supplies procedures and limitation rules for Article 101(1) decisions. Article 10 generally permits a fining decision within five years of the conduct; for continuing or repeated conduct, the period starts when it ceases. Investigative or procedural actions interrupt limitation, including documentation requests, evaluation-access requests, structured-dialogue invitations and opening proceedings. Each interruption restarts time, subject to an outer period equal to twice the limitation period, extended by suspension. Limitation is suspended while the Commission decision is the subject of proceedings pending before the Court of Justice of the European Union.

Article 11 provides a separate five-year enforcement period beginning when an Article 101(1) decision becomes final. Notifications varying the original fine or periodic penalty payment, refusing variation, or actions aimed at enforcing payment interrupt and restart that period. Suspension applies while time to pay is allowed or a Union or national court suspends enforcement. Procedural safeguards include the right to respond, controlled access to evidence and reasoned confidentiality-disclosure decisions. Under Article 9(6), notice of proposed disclosure allows one week for objections. Following objections, a disclosure decision must allow at least one week from notification before disclosure.

Relationship to Other Instruments

The AI Act supplies the substantive evaluation and fining powers operationalised by the implementing regulation. The instrument connects specifically to Articles 68, 78, 89, 92, 93 and 101, and Section 5 of Chapter IX. Article 3 imports the declaration-of-interest requirement from Implementing Regulation (EU) 2025/454 on the scientific panel of independent AI experts. Article 4 permits expert appointment through the procedure referenced in Article 167 of Regulation (EU, Euratom) 2024/2509 on Union financial rules. These selection routes operate alongside continuing independence requirements.

Article 12 applies Regulation (EEC, Euratom) No 1182/71 to time calculations, with a derogation under which periods begin on the working day following the triggering event. Article 13 requires the Commission to balance relevant facts, law, interests, defence rights and procedural expediency when fixing deadlines. Reasoned extension requests must arrive before expiry. Article 14 requires digital transmission and at least one Qualified Electronic Signature compliant with Regulation (EU) No 910/2014, subject to exceptional alternatives. Transmission involves usability, security, signature-validity and acknowledgment checks. The recitals refer to Charter Article 41(2)(b), connecting file access with good administration while recognising confidentiality and professional and business secrecy.

International Alignment

The instrument is designated ‘Text with EEA relevance’. Article 15 provides direct applicability throughout EU Member States. Its cross-border significance lies in the procedural conditions attached to Commission supervision of general-purpose AI models. The AI Act governs which providers fall within those supervisory powers and supplies the relevant territorial and substantive scope.

Cross-border participation is accommodated through Union-language rules, digital communication and controlled external-adviser access. Supporting evidence in a non-Union language must be accompanied by a faithful translation into an official Union language. External advisers receiving protected file access must comply with disclosure and permitted-use restrictions. Under Article 8(3)(c), employment or comparable relationships with the addressee or businesses active on the same markets during the investigation or the three years following its end trigger notification and assurance requirements. External advisers seeking exceptional additional file access must make a reasoned request within one week of receiving controlled access.

Implementation Timeline

Sources and References