Germany KI-MIG
Gesetz zur Durchführung der Verordnung (EU) 2024/1689 (KI-Marktüberwachungs- und Innovationsförderungsgesetz — KI-MIG)
German national law implementing the EU AI Act, designating the Bundesnetzagentur (BNetzA) as the lead market surveillance authority under a centralized hybrid model.
Jurisdiction
Germany
Enacted
Jul 22, 2026
Effective
Jul 29, 2026
Enforcement
Bundesnetzagentur (BNetzA) as lead market surveillance authority; BfDI for data protection aspects; sector regulators retain competence in their domains.
Passed Bundestag June 11, 2026; passed Bundesrat June 19, 2026; enacted July 22, 2026; published in Bundesgesetzblatt I, Nr. 223 on July 28, 2026; entered into force July 29, 2026.
Bundesministerium für Digitales und Staatsmodernisierung (BMDS)Why It Matters
Germany's centralized hybrid approach — concentrating AI market surveillance in a single federal agency (BNetzA) — contrasts with distributed models in other EU states and will shape enforcement posture across the bloc's largest economy.
Recent Developments
Entered into force July 29, 2026, days ahead of the EU AI Act's August 2, 2026 deadline for Member States to designate market surveillance authorities. Bundesnetzagentur formally confirmed as lead authority (bundesnetzagentur.de press release July 29, 2026).
At a Glance
Harms addressed
Who Must Comply
- Providers, deployers, importers, and distributors of AI systems placing products on or using AI systems in the German market
Safety Provisions
- Designates BNetzA as central market surveillance authority for AI
- Establishes national competent authorities and AI innovation support
- Procedural framework for risk-based oversight aligned with EU AI Act
- Support for regulatory sandboxes and SME innovation
Compliance & Enforcement
Penalties
€50K
View on map
Germany
Focus Areas
Cite This
APA
Germany. (2026). Gesetz zur Durchführung der Verordnung (EU) 2024/1689 (KI-Marktüberwachungs- und Innovationsförderungsgesetz — KI-MIG).
Related Regulations
Finland AI Act
Finland's EU AI Act implementation using decentralized supervision model. Traficom serves as single point of contact and coordination authority. Ten market surveillance authorities share enforcement across sectors. New Sanctions Board handles fines over EUR 100,000.
Hungary AI Act
Hungary's comprehensive AI law implementing the EU AI Act. Designates the National Media and Infocommunications Authority (NMHH) as the primary supervisory authority, with sectoral regulators for specific domains.
Italy AI Act
First EU member state comprehensive national AI law complementing the EU AI Act. 28 articles covering AI governance principles, sector-specific rules for healthcare, employment, justice, and public administration, criminal provisions, copyright protections, and a EUR 1 billion AI investment fund.
DE JuSchG §24a (KidD)
Requires providers of certain telemedia services to implement provider-side precautionary measures ("Vorsorgemaßnahmen") with regulator-facing evaluability via published BzKJ criteria.
EU DSA Minors Guidelines
Commission guidelines under DSA Article 28(1) establishing measures for online platforms to protect minors, including age assurance, default privacy settings, anti-addictive design restrictions, recommender system safeguards, and protections against grooming and exploitation.
IL HB 5511
Requires covered operators of online platforms to apply protective default settings to users they know to be minors, including limits on algorithmic feeds, a 10 p.m. to 7 a.m. notification curfew and no autoplay by default on addictive social media platforms, and establishes a device-level age-bracket signal that Internet-enabled device manufacturers must provide and operators must request. Announced by the Governor as the Children's Social Media Safety Act, the title of the bill as introduced. Enforced by the Attorney General.
Last updated August 2, 2026. Verify against primary sources before relying on this information.