Artificial Intelligence · Germany
AI regulation in Germany (2026)
Germany shaded by its artificial intelligence status
As an EU member state, Germany is governed by the directly-applicable EU AI Act, a comprehensive, risk-based horizontal law whose prohibitions and GPAI rules already apply and whose high-risk obligations apply from 2 August 2026. Germany is enacting a national implementation law (KI-MIG), approved by the Federal Cabinet on 11 February 2026, that designates the Bundesnetzagentur as the central national competent and market surveillance authority while preserving sectoral supervisors. The framework is complemented by Germany's national AI strategy under the Hightech Agenda Deutschland.
Key points
The EU AI Act (Regulation 2024/1689) is directly applicable in Germany. It is a comprehensive, risk-tiered law: prohibited practices and AI-literacy duties have applied since 2 February 2025, GPAI-model obligations since 2 August 2025, and most high-risk and transparency obligations apply from 2 August 2026.
On 11 February 2026 the Federal Cabinet approved the draft 'KI-Marktüberwachungs- und Innovationsförderungsgesetz' (KI-MIG) / Gesetz zur Durchführung der KI-Verordnung, which sets national competent authorities, innovation-promotion measures (e.g. regulatory sandboxes) and the penalty regime; it is proceeding through the Bundestag.
The Federal Network Agency (Bundesnetzagentur) is designated as Germany's central market surveillance authority, notifying authority and single point of contact, hosting a Coordination and Competence Centre (KoKIVO) and an independent AI Market Surveillance Chamber (UKIM).
Germany adopts a hybrid model: rather than a single new AI authority, existing sectoral regulators retain competence in their fields — notably BaFin as market surveillance authority for high-risk AI tied to regulated financial activities — coordinated centrally through Bundesnetzagentur.
AI systems processing personal data remain subject to the GDPR and the German Federal Data Protection Act (BDSG), enforced by federal and Länder data-protection authorities, which operate alongside the AI Act framework.
Beyond binding law, Germany pursues an AI policy agenda within the Hightech Agenda Deutschland, targeting roughly 10% of value creation via AI and over 50% AI uptake among manufacturing SMEs, with implementation roadmaps launched in 2026.
Timeline - major decisions & events
Germany's Cabinet adopted the 'Gesetz zur Durchführung der Verordnung über künstliche Intelligenz', designating the Bundesnetzagentur as the central market surveillance authority, notifying authority and single point of contact for the EU AI Act. It moves to the Bundesrat and Bundestag for enactment.
Gleiss Lutz ↗The Federal Ministry for Digital and Public Administration circulated a ministerial draft of the AI Market Surveillance and Innovation Promotion Act for consultation with federal states and associations, setting the national authority structure (BNetzA plus an independent AI Market Surveillance Chamber). It drew 57 responses.
Heuking ↗The Federal Network Agency set up an AI Service Desk and earlier (June 2025) published AI-literacy guidance to help businesses comply with the EU AI Act, signalling its operational role ahead of formal designation as the national supervisor.
Bundesnetzagentur ↗The Datenschutzkonferenz (DSK), the conference of German federal and state data protection authorities, published 'Orientierungshilfe KI und Datenschutz', the first national guidance on using AI — especially large language models — in compliance with the GDPR.
DSK (via Hogan Lovells) ↗The Federal Ministry of Education and Research issued an action plan updating the national AI Strategy, treating the rise of generative AI as a catalyst for accelerated investment in research, infrastructure, skills and applications.
BMBF (via Regulations.AI) ↗The Federal Government revised its AI Strategy, raising planned federal investment to EUR 5 billion by 2025 and re-centring 'trustworthy, human-centred AI made in Europe', aligning national policy with emerging EU-level AI regulation.
Federal Government (KI-Strategie) ↗The government-appointed Datenethikkommission published a 240-page opinion with 75 recommendations, proposing a risk-adapted, tiered regulatory approach to algorithmic systems that strongly influenced both German and EU thinking on AI regulation.
European Commission (Futurium) ↗The Federal Government adopted the AI Strategy promoting 'AI made in Germany' as a brand for trustworthy, human-centric AI, pledging around EUR 3 billion through 2025. This established the foundational policy direction for German AI governance.
Bundesregierung ↗Germany - other topics
Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →