risk
GPAI transparency, systemic-risk and synthetic-content obligations
GPAI providers failing transparency/copyright/training-data obligations; systemic-risk models (>10^25 FLOPs) lacking red-teaming, incident reporting, and cybersecurity; unlabeled deepfake/synthetic content; and concentration of GPAI capability creating ecosystem single points of failure.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- category
- ai_governance
- domain
- AI Governance
- Third-Party / Supply-Chain Risk
- Compliance, Audit & Assurance
- taxonomy
- eu-ai-act-risk
- nist-ai-rmf-risk
- inherent_rating
- high
Details
- risk_id
- ai-gpai-systemic-transparency
- category
- ai_governance
- likelihood
- medium
- impact
- high
- inherent_rating
- high
- treatment
- mitigate
- taxonomies
- eu-ai-act-risk
- nist-ai-rmf-risk
Source
No record-specific source URL is provided.
Connections
- UC-AI-10 — Meet transparency obligations for AI systems mitigates GPAI transparency, systemic-risk and synthetic-content obligations
- strength
- primary
- rationale
- Machine-readable marking of AI-generated/deepfake content is the synthetic-content labeling obligation the risk says is unmet.
- UC-AI-15 — Fulfill general-purpose AI model provider obligations mitigates GPAI transparency, systemic-risk and synthetic-content obligations
- strength
- primary
- rationale
- Directly discharges GPAI transparency/copyright/training-summary duties and, for systemic models, the red-teaming, incident reporting and cybersecurity the risk says are missing.
- UC-AI-11 — Operate AI concern, incident, and external reporting channels mitigates GPAI transparency, systemic-risk and synthetic-content obligations
- strength
- related
- rationale
- General incident-reporting infrastructure supports the serious-incident reporting duties for systemic models.
- UC-TPRM-01 — Operate a third-party security risk management program mitigates GPAI transparency, systemic-risk and synthetic-content obligations
- strength
- related
- rationale
- Assessing concentration risk and maintaining exit strategies for critical providers reduces the ecosystem single-point-of-failure impact from GPAI-capability concentration.