The German legislation implementing the AI Act

2026-05-26 · Source: activeMind.legal - Www.activemind.legal · Field: Legal & Regulatory — Compliance & Risk Management, Regulatory Affairs & Government Relations · Depth: Intermediate, short

Summary

Germany's draft Act Implementing the Regulation on Artificial Intelligence (KI-MIG), Bundestag printed paper 21/4594, outlines the national implementation of EU Regulation (EU) 2024/1689, known as the AI Act. This legislation, which has a deadline of 2 August 2025 for national transposition and becomes directly applicable in large parts from 2 August 2026, establishes clear responsibilities and new supervisory structures. The Federal Network Agency (BNetzA) is designated as the central market surveillance authority for AI systems, with an independent AI market surveillance chamber specifically for high-risk AI in areas like law enforcement and justice. While sector-specific authorities like BaFin retain roles, a central complaints office for citizens is also created. The draft also promotes innovation through AI real-world laboratories and advisory services, alongside a sanctions system with fines up to €50,000 for cooperation breaches.

Key takeaway

For legal professionals and compliance officers managing AI systems in Germany, your organization must proactively adapt to the upcoming supervisory practices. Expect increased institutional enforcement and a higher frequency of audits, similar to GDPR. You should establish robust AI governance structures, ensure clear internal information channels, and prepare for documentation requirements and risk assessments to mitigate potential fines up to €50,000 for non-cooperation.

Key insights

Germany's KI-MIG draft operationalizes the EU AI Act, establishing national supervisory bodies and enforcement mechanisms.

Principles

• AI regulation requires hybrid supervision.
• Innovation promotion balances compliance.
• Clear complaint channels enhance enforcement.

Method

The KI-MIG establishes the Federal Network Agency as the central AI supervisory authority, creates an AI market surveillance chamber for high-risk systems, and sets up a central complaints office.

In practice

• Establish correct information channels.
• Implement early AI governance structures.
• Prepare for increased audits/inspections.

Topics

• EU AI Act
• German AI Legislation
• Federal Network Agency
• AI Market Surveillance
• High-Risk AI Systems
• AI Compliance

Best for: CTO, VP of Engineering/Data, Director of AI/ML, Legal Professional, Policy Maker, Consultant

Related on AIssential

• Germany’s AI Implementation Act (KI-MIG): Who are the responsible supervisory authorities? — Germany's AI Act implementation features a hybrid supervisory model with strong central and sector-specific authorities.
• AI Act - EU Digital Strategy — The EU AI Act establishes a global precedent for AI regulation through a comprehensive, risk-based legal framework.
• EU AI Act GPAI Enforcement Goes Live August 2, 2026: A Readiness Guide for AI Governance Teams — EU AI Act GPAI enforcement activates August 2, 2026, making existing obligations sanctionable with significant fines.
• AI Data Transfers: GDPR, SCCs & EU AI Act Rules — GDPR and the EU AI Act create distinct, non-interchangeable compliance obligations for AI data, demanding an integrated approach.
• The EU simplified its toughest AI law: what changed and why it matters - Euronews.com — The EU AI Act has been simplified to reduce red tape and extend deadlines, balancing regulation with innovation pace.
• Spain: Government approves the draft Organic Law on the proper use and governance of artificial intelligence — Spain's new AI law integrates EU AI Act principles, establishing a comprehensive governance and sanctions framework while fostering innovation.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by activeMind.legal - Www.activemind.legal.