AI Office
The Commission body established under Article 64, holding Union-level expertise and enforcement competence for GPAI obligations under Chapter V. It serves as secretariat to the AI Board and does not conduct market surveillance for high-risk or transparency obligations in the typical case. One important edge case: where a GPAI model and the downstream high-risk AI system built on it are provided by the same entity, the AI Office may act as the competent market surveillance authority for the integrated system. This preserves the AI Office's oversight of the GPAI layer while addressing the practical difficulty of separating GPAI enforcement from high-risk enforcement when a single provider controls both. Practitioners deploying integrated GPAI-plus-high-risk systems from a single provider should not assume the national NCA is the only enforcement authority; the AI Office may also have a claim.
Defined in 5 GAGE programs, which carry 14 distinct definitions of it. The wording above is taught in EU AI Act Implementation Expert.
How each discipline defines it
The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.
The Commission body established under Article 64, holding Union-level expertise and enforcement competence for GPAI obligations under Chapter V. It serves as secretariat to the AI Board and does not conduct market surveillance for high-risk or transparency obligations in the typical case. One important edge case: where a GPAI model and the downstream high-risk AI system built on it are provided by the same entity, the AI Office may act as the competent market surveillance authority for the integrated system. This preserves the AI Office's oversight of the GPAI layer while addressing the practical difficulty of separating GPAI enforcement from high-risk enforcement when a single provider controls both. Practitioners deploying integrated GPAI-plus-high-risk systems from a single provider should not assume the national NCA is the only enforcement authority; the AI Office may also have a claim.
The European Commission body established under the AI Act, responsible for, among other things, developing the FRIA notification template (Article 27(5)) that Article 27 deployers must use. As of this writing the template is not yet finalized, and the Digital Omnibus on AI has deferred the stand-alone Annex III obligations, including Article 27, to 2 December 2027; the obligation is established law, only its application date and the template's publication are still pending.
The European Commission body responsible for supervising and enforcing GPAI obligations under the EU AI Act, holding powers since August 2, 2026 to request documentation, evaluate models, order corrective measures, and impose fines. Its stated first move in a new matter is typically a technical compliance dialogue rather than an immediate formal proceeding.
The European Commission body responsible for supervising general purpose AI models and coordinating AI Act enforcement across member states; holds document-demand and correction-order powers, with fines up to EUR 15 million or 3 percent of global turnover under Article 101 for GPAI-related violations.
The European Commission's dedicated body holding direct enforcement authority over GPAI model providers under the EU AI Act, starting 2 August 2026, while national market surveillance authorities enforce the remainder of the Act within each member state's territory.
Where it is taught
The exact lessons this term appears in. The first module of every program is free with a free account.
- Why the data person just became the most consequential role in the building · Taking the Data Chair, Certified AI Data Governance Professional (CADGP)
- Article 10 executed: the EU AI Act's data governance duty for the system your organization ships · Lineage Under Audit, Certified AI Data Governance Professional (CADGP)
- The training data summary: disclosing what taught the model without giving away the estate · Lineage Under Audit, Certified AI Data Governance Professional (CADGP)
- GPAI upstream: what your foundation-model vendor owes you and what you must verify yourself · The EU AI Act: The Executive Map, Certified AI Governance Professional (CAIGP)
- The DPIA and FRIA, run jointly: one assessment, two regimes, no duplicate work · Evidence Engineering, Certified AI Governance Professional (CAIGP)
- The Big Four Frameworks: EU AI Act, NIST AI RMF, ISO/IEC 42001, OECD Principles · Foundations of AI for Lobbyists, The AI Lobbyist: Certified AI Policy Strategist
- The EU Machine: Parliament, Commission, and the AI Office · Government and Policy Navigation, The AI Lobbyist: Certified AI Policy Strategist
- The One-Page Hill Briefer: What the EU AI Act Means for U.S. Companies · AI Law in Practice: The Compliance-to-Persuasion Toolkit, The AI Lobbyist: Certified AI Policy Strategist
- Working the Commission: Consultations, Expert Groups, and Comitology · The Brussels File: Influence Inside the EU Institutions, The AI Lobbyist: Certified AI Policy Strategist
- China vs the EU AI Act: Mapping the GenAI Measures Against Europe's GPAI Regime · China, EU, US: The Comparative Playbook, Certified China AI Regulatory Professional (CCARP)
Where it shows up at work
A definition is where AI Office starts. The lessons above teach it inside the competencies below, which are what job descriptions ask for and what the GAGE credential records. Every link here is drawn from the same careers map that builds a role's readiness check.
Compares the EU AI Act, NIST AI RMF, ISO/IEC 42001 and sector rules by intent and control objective, and says where they do not overlap.
2 lessons on this page teach it as a primary outcome.
Traces where data came from, what transformed it, who owns each hop and where it flows downstream, so a number can be defended.
2 lessons on this page teach it as a primary outcome.
Classifies a system by role and risk tier, knows which obligations bind on which date after the Digital Omnibus, and what evidence conformity needs.
One lesson on this page teach it as a primary outcome.
Roles that hire for it
Each role page shows the full competency set, what the seat decides, and a readiness check against your own evidence.
- Senior AI Compliance Analystneeds it at depth
- AI Compliance Managerneeds it at depth · 2 open postings this week
- AI Compliance Specialistneeds working knowledge · 1 open posting this week
- Security Compliance Managerneeds it at depth · 4 open postings this week
- Compliance Analystneeds working knowledge · 2 open postings this week
- Chief Data Officer, data leadership editionneeds it at depth
How job descriptions say it
Postings rarely use the textbook word. These are the phrases the careers map reads as asking for the competencies above.
Where the frameworks place it: EU AI Act; NIST AI RMF; ISO/IEC 42001; EU AI Act Article 10.
One interview question about it
Map one control to the EU AI Act, NIST AI RMF and ISO/IEC 42001 at once, and tell me where the mapping breaks.
Asked of candidates for framework crosswalking without false equivalence. Answering it in your own words is exactly how a GAGE topic is passed, and the credential records the pass where an employer can check it.
If you come from another field
Some backgrounds already carry this competency, and the readiness check gives credit for it.
- Privacy and data protection carries it as work you can show: Data maps and records of processing are lineage by another name.
- Data analysis, stewardship and business intelligence carries it as work you can show: Source-to-report lineage is what you trace.
- A data science, statistics or analytics degree carries it as a claim to back up: Lineage and provenance are known ideas, rarely yet documented for an auditor.
Terms it appears with
Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.