yes, but consider the following passage:
For
high-impact GPAI models with systemic risk, Parliament negotiators
managed to secure more stringent obligations. If these models meet
certain criteria they will have to conduct model evaluations, assess and
mitigate systemic risks, conduct adversarial testing, report to the
Commission on serious incidents, ensure cybersecurity and report on
their energy efficiency. MEPs also insisted that, until harmonised EU
standards are published, GPAIs with systemic risk may rely on codes of
practice to comply with the regulation.
What 'codes of practice' means, in practice?