← Global AI Policy Radar · Methodology
Jurisdiction Baseline · AI × Policy

AI Regulation in Germany.

At a glance
AI-Specific Law
EU AI Act applies; KI-DUG now in force
Rules In Force
Core bans, literacy, transparency, and GPAI rules apply
National Enforcement
Bundesnetzagentur coordinates supervision and enforcement
Other Obligations
GDPR, DSA, and consumer law still constrain deployments

Germany has an AI-specific legal framework, mainly the directly applicable EU AI Act rather than a standalone German AI law; as of August 6, 2026, its main rules are in force, with additional high-risk product rules starting August 2, 2027. Germany’s AI implementation law, the KI-DUG, entered into force on July 29, 2026 and establishes enforcement authorities, fines, and the Bundesnetzagentur’s coordinating role, while the GDPR, Digital Services Act, consumer law, and sector-specific rules may also apply.

In force today6 instruments
EU Artificial Intelligence Act partially in forceAI-specific
The main AI-specific rulebook for companies placing AI systems or general-purpose AI models on the German market or using them in Germany. Prohibited practices and AI-literacy duties have applied since February 2, 2025; general-purpose AI rules since August 2, 2025; transparency and many high-risk obligations apply from August 2, 2026, with some product-related high-risk rules phased in later.
Read the full text ↗ · 2024
AI / automated decisionsDisclosureSafety & security
General Data Protection Regulation in force
The GDPR applies whenever an AI system processes personal data, including training, profiling, personalization, monitoring, and automated decision-making. Companies must establish a lawful basis, provide required information, apply data minimization and security controls, manage processor relationships, assess high-risk processing, and respect individual rights.
Read the full text ↗ · 2016
Data processingDisclosureMinors
Unlock the full baseline

Get the remaining 4 instruments and the founder FAQ. Free: subscribe once and every briefing on this device unlocks.

Already subscribed? Unlock →

Digital Services Act in force
The DSA binds online intermediaries, hosting services, platforms, and search engines that use AI for recommendation, ranking, moderation, advertising, or content generation. Relevant duties include notice-and-action processes, transparency about recommender systems and advertising, safeguards for minors, and additional risk-management and audit duties for very large platforms and search engines.
Read the full text ↗ · 2022
Content moderationDisclosureMinors
Act against Unfair Competition, UWG in force
The UWG applies to AI-enabled marketing, sales claims, chatbots, personalization, and commercial practices aimed at consumers. It prohibits misleading claims and material omissions, including unsupported claims about an AI product's accuracy, autonomy, safety, or performance.
Read the full text ↗ · 2004
Consumer protectionDisclosure
Digital Services Act Implementation Act, DDG in force
The German DDG supplies national enforcement and institutional rules around the DSA and digital services. It matters to AI companies operating platforms or intermediary services because it identifies German supervisory mechanisms and supports measures against non-compliant services.
Read the full text ↗ · 2024
Content moderationSafety & security
German AI Act Implementation Act (Gesetz zur Durchführung der Verordnung über künstliche Intelligenz; Article 1: KI-Marktüberwachungs- und Innovationsförderungsgesetz (KI-MIG)) in forceAI-specific
Germany’s national implementing legislation for the EU AI Act entered into force on July 29, 2026. It establishes the national supervisory and coordination framework, including the Bundesnetzagentur’s central role, complaint handling, enforcement powers, fines, and innovation support.
Read the full text ↗ · 2026
AI Act implementationmarket surveillancecompetent authoritiesBNetzA oversightnotified bodiescomplaintsfinesregulatory sandboxes
Also worth noting
  • Further EU AI Act amendments and possible changes to the phased deadlines for product-related high-risk systems.
  • European Commission guidance, harmonized standards, and enforcement practice for transparency, AI literacy, general-purpose models, and high-risk systems.
  • Sector-specific supervision for AI in finance, healthcare, employment, critical infrastructure, and other regulated fields.
Pending and recent legislation8 measures
DE 331110 Act Implementing Regulation (EU) 2024/1689 on Artificial Intelligence (AI Regulation Implementation Act)
Passed · 2026-07-10
The enacted law establishes Germany’s framework for implementing the EU AI Act, including competent authorities, market surveillance and notification responsibilities for high-risk AI systems, a Federal Network Agency coordination and competence center, an AI regulatory sandbox,
DE 336643 Act to Accelerate Implementation of the Energy Efficiency Directive
Advancing · 2026-07-10
The bill implements the revised EU Energy Efficiency Directive and changes national energy-efficiency requirements. It specifically regulates data centers, including efficiency standards and cost-benefit analyses for using unavoidable waste heat.
DE 334557 Act Amending the Code of Criminal Procedure – Digital Investigative Measures
Advancing · 2026-07-08
The bill would authorize automated matching of biometric data from criminal proceedings against publicly accessible information on the internet, as well as cross-case data analysis using automated data-processing applications. It would add new sections 98d and 98e to the Code of
DE 336994 No to Biometric Mass Recognition Systems
Advancing · 2026-07-08
A parliamentary motion opposing the deployment of biometric mass-recognition systems, such as large-scale facial-recognition surveillance. It seeks policy or legislative action to prevent or restrict such systems.
DE 336850 Make Europe an AI Hub – Strengthen Our Economy, Enable Innovation, Secure Digital Sovereignty
Introduced · 2026-07-02
The parliamentary motion proposes policy measures to establish Europe as a leading location for artificial intelligence, promote economic strength and innovation, and reinforce digital sovereignty. Specific legislative measures are not detailed in the provided record.
DE 336849 Secure Germany’s Borders Effectively, Introduce AI Border Protection Now (336849)
Introduced · 2026-07-01
A parliamentary motion calling for the introduction of artificial intelligence systems for more effective protection of Germany’s borders. The available information does not specify the particular AI technologies or legal measures proposed.
DE 330263 Proposal for a Regulation of the European Parliament and of the Council amending Regulations (EU) 2024/1689 and (EU) 2018/1139 to simplify i
Introduced · 2026-06-22
This legislative proposal would amend the EU Artificial Intelligence Act and the aviation-safety framework to simplify and streamline the implementation of harmonized AI requirements. It is part of the EU’s Digital Omnibus package.
DE 336211 European Parliament resolution of 20 May 2026 on the opportunities and challenges of a comprehensive strategy for artificial intelligence in
Passed · 2026-06-12
This European Parliament resolution sets out policy recommendations on developing a comprehensive EU strategy for artificial intelligence in trade, addressing opportunities, challenges, competitiveness, and regulatory considerations. It is an own-initiative policy resolution rath

Live from the Global AI Policy Radar.

Founder FAQAI law, regulators, what applies, what is next, penalties
Is there an AI-specific law in force here?

Yes. Germany’s AI-specific framework is based mainly on the directly applicable EU AI Act, rather than a standalone German AI code. Germany’s KI-DUG entered into force on July 29, 2026 and establishes national authorities, enforcement powers, fines, and the Bundesnetzagentur’s coordinating role.

Who are the key regulators for AI?

The Bundesnetzagentur has a central coordinating role under Germany’s AI implementation framework. The KI-DUG also establishes national supervisory and enforcement authorities, including complaint-handling mechanisms. Additional German supervisory mechanisms apply under the GDPR, the Digital Services Act, and the DDG where relevant.

Which rules apply to AI systems today?

The EU AI Act applies, including bans and AI-literacy duties, general-purpose AI rules, transparency duties, and many high-risk obligations, depending on the system and use. The GDPR applies when AI processes personal data, while the Digital Services Act and DDG can apply to platforms and intermediary services. The UWG also applies to AI-enabled marketing, sales claims, chatbots, personalization, and other consumer-facing commercial practices.

What is coming next, and when?

As of August 6, 2026, transparency duties and many high-risk AI obligations apply under the EU AI Act. Further high-risk product rules are phased in for August 2, 2027. Supervisory guidance and risk-based investigations are expected to develop before there is a settled body of German case law and large-scale enforcement practice.

What are the enforcement and penalty risks?

The KI-DUG provides national authorities with complaint-handling powers, enforcement powers, and fines, with the Bundesnetzagentur coordinating nationally. Other applicable frameworks, including the GDPR, Digital Services Act, DDG, and UWG, may also create supervisory or enforcement exposure. Enforcement infrastructure now exists, but German case law and large-scale enforcement practice are still developing.

Not legal advice. For educational purposes only. AI-researched against official sources (2026-08-06), links verified.

Need a company-specific assessment? Explore Nomos →