Current position
Overview
AI legislation has been enacted.
Key legislation & sources
EU AI Act (Regulation 2024/1689)
Bundesnetzagentur (BNetzA) — proposed lead MSA
EU AI Act National Implementation Tracker
BaFin — co-MSA for financial sector
Council of Europe Framework Convention on AI (CETS 225)
EU AI ACT
The EU AI Act (Regulation 2024/1689) applies directly across all member states. Prohibitions on unacceptable-risk AI systems have been in force since 2 February 2025; GPAI model rules since 2 August 2025. High-risk AI obligations are due from 2 August 2026, subject to the Digital Omnibus proposal which may defer enforcement. For the full implementation timeline, governance structure, and current status, see the European Union overview.
The Federal Network Agency (BNetzA) has been proposed as lead market surveillance authority; the Federal Data Protection Commissioner (BfDI) is active on AI and data governance. The national AI Strategy was updated in 2023. AI liability and domestic implementation legislation is in preparation.
Regulatory developments
Latest updates
Latest event import:
Updates sourced from Digital Policy Alert ↗. The latest available entries for this jurisdiction.
consultation closed
Federal Office for Information Security closes consultation on AI Audit and Assurance Assessment Architecture (A5)
Source: Digital Policy Alert · View update ↗
implementation
Act for the implementation of the Artificial Intelligence Regulation entered into force
Source: Digital Policy Alert · View update ↗
passage
Digital Committee approved Act for the implementation of the Artificial Intelligence Regulation
Source: Digital Policy Alert · View update ↗
introduction
Act implementing EU Regulation on Artificial Intelligence (Draft Act 21/4594) was introduced to Parliament
Source: Digital Policy Alert · View update ↗
On 9 March 2026, the German Federal Government submitted the draft Act to implement the Artificial Intelligence Regulation (No. 21/4594) to the Parliament (German Bundestag). The Act would apply to providers, deployers, importers and distributors of artificial intelligence systems as defined in Regulation (EU) 2024/1689, as well as authorised representatives of non-EU providers and product manufacturers who place artificial intelligence systems on the market under their own name or trademark. The Act would designate the Federal Network Agency as the primary market surveillance and notification authority for AI systems not covered by other designated bodies. The Federal Financial Supervisory Authority would be designated as the competent market surveillance authority for AI systems used in connection with regulated financial activities, while the competent authorities of the federal states would remain responsible for systems deployed by public bodies and media service providers. The Act would further establish an independent Artificial Intelligence Market Surveillance Chamber within the Federal Network Agency for certain high-risk AI systems used in law enforcement, border management and the justice system. It would also establish a coordination and competence centre within the Federal Network Agency to support cooperation between the relevant bodies and act as the central contact point under Regulation (EU) 2024/1689. The Act would require the Federal Network Agency to operate at least one artificial intelligence regulatory sandbox, as well as acting as a central complaints office for violations of Regulation (EU) 2024/1689. It allow for administrative fines of up to EUR 50'000 for infringements not covered by Regulation (EU) 2024/1689.
introduction
Act implementing EU Regulation on Artificial Intelligence (Draft Act 97/26) was submitted to Federal Council
Source: Digital Policy Alert · View update ↗
On 13 February 2026, the German federal government submitted the draft Act to implement the Artificial Intelligence Regulation (No. 97/26) to the Federal Council (Bundesrat). This Act would establish a national supervisory framework for artificial intelligence. The Act would apply to providers and deployers of AI systems, including entities operating in regulated financial sectors. It would designate the Federal Network Agency as the primary market surveillance authority under the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), as well as the single point of contact under Article 70 of the Act. It would also establish an independent AI Market Surveillance Chamber within the Federal Network Agency for high-risk AI systems used in law enforcement, border management, the justice system, and democratic processes. It would also designate the Federal Financial Supervisory Authority as the competent authority for AI systems connected to regulated financial activities. Additionally, the Act would establish a central Coordination and Competence Centre and require the Federal Network Agency to operate at least one AI regulatory sandbox. It would also grant the Agency powers to conduct on-site inspections and issue administrative fines of up to EUR 50'000 for specific procedural violations. The Act would also amend the Whistleblower Protection Act to include violations relating to the regulation of artificial intelligence and update the relevant provisions in the Social Code relating to data processing. The Federal Council is expected to respond by 27 March 2026. The Act would enter into force the day after its promulgation.
Showing 5 of 26 available API entries. Dates and summaries are supplied by Digital Policy Alert.