Article 89 of Regulation (EU) 2024/1689 — Monitoring actions of the AI Office. Official text, practical interpretation, key obligations and compliance implications.
Article 89 gives the AI Office its watchtower: continuous monitoring of whether GPAI providers actually do what Chapter V requires — including whether they live by the codes of practice they signed. It also opens the door for downstream providers to complain upward.
Official Text Summary
The AI Office may take the actions necessary to monitor the effective implementation of and compliance with Chapter V by providers of general-purpose AI models, including their adherence to approved codes of practice. Downstream providers — companies building AI systems on top of a GPAI model — may lodge a complaint alleging an infringement of the Regulation by the upstream provider; a duly reasoned complaint gives the AI Office concrete, market-sourced signals to act on. What monitoring surfaces feeds the Section 5 escalation ladder: a request for documentation and information under Article 91, an evaluation under Article 92, and ultimately a request for measures under Article 93.
Key Obligations
- The AI Office may take the necessary actions to monitor effective implementation and compliance with Chapter V by GPAI providers, including their adherence to approved codes of practice
- Downstream providers may lodge a complaint alleging an infringement by an upstream GPAI provider — the supply chain becomes an enforcement sensor
- Monitoring findings feed the escalation ladder: documentation requests (Art. 91), evaluations (Art. 92), measures (Art. 93)
Compliance Timeline
Applies from 2 August 2026; the 2026 Digital Omnibus deferred the substantive high-risk obligations (Annex III to 2 December 2027, Annex I to 2 August 2028) but did not move this provision.
Official AI Act Compliance Deadline Calendar
Updated · Sources: Regulation (EU) 2024/1689 and the 2026 Digital Omnibus on AI.
| Obligation | Applies to | Original date | New date | Status | Countdown | Legal basis |
|---|---|---|---|---|---|---|
| Prohibited Practices (Art. 5) | All providers and deployers | active | — | AI Act Art. 5 | ||
| GPAI Rules (Chapter 5) | GPAI model providers | active | — | AI Act Art. 51-56 | ||
| Commission Enforcement Powers over GPAI | GPAI model providers | active | — | AI Act Art. 88-94, 101 | ||
| Transparency Obligations (Art. 50) | Providers and deployers of chatbots, generative, emotion recognition systems | active | — | AI Act Art. 50 | ||
| New Art. 5 Prohibition (CSAM / non-consensual intimate imagery) | Providers and deployers of generative AI systems | active | — | AI Omnibus 2026 Art. 5 | ||
| AI-Generated Content Marking (pre-existing systems) | Providers of generative AI systems on the market before 2 Aug 2026 | active | — | AI Act Art. 50(2) — transitional | ||
| Regulatory Sandboxes | National competent authorities | deferred | — | AI Omnibus 2026 Art. 57 | ||
| High-risk AI — Annex III (standalone) | Providers of standalone Annex III systems | deferred | — | AI Omnibus 2026 Art. 6(2) | ||
| High-risk AI — Annex I (embedded) | AI embedded in Annex I regulated products | deferred | — | AI Omnibus 2026 Art. 6(1) |
⬇ Download JSON · CC BY 4.0
AI Act meets DORA and NIS2
Is your organisation subject to both the AI Act and DORA? The two regulations intersect on the operational resilience of financial AI systems. Our sister site regulation-dora.eu covers DORA in depth — including what the AI Act adds on top of an existing DORA programme.
The AI Act for financial institutions ↗ Explore regulation-dora.eu ↗Frequently Asked Questions
Any alleged infringement of Chapter V by the model provider it builds on — missing or inadequate technical documentation under Article 53, absent downstream information, or unaddressed systemic-risk duties under Article 55. The complaint must be duly reasoned; contractual disputes are not the AI Office's business.
It structures it. Adherence gives the AI Office a concrete benchmark to monitor against — living by the code is the cheapest steady-state; visibly departing from it is precisely what triggers the next rung of the ladder.
Stay ahead of AI Act changes
Get compliance alerts when deadlines or obligations change.
No spam. One-click unsubscribe.
Take compliance further with the AI Act Academy
Templates, training modules, and live Q&A — everything needed to implement AI Act compliance.