Contact usGet started

Frameworks

AI governance frameworks in Germany

Germany applies the EU AI Act through the KI-MIG, with the Bundesnetzagentur as central authority and BaFin for financial firms, and adds national rules on credit and behaviour scoring.

Law

LawKI-MIGKI-MIG, Germany's AI Act implementation lawThe KI-MIG names Germany's EU AI Act authorities, from the Bundesnetzagentur to BaFin, and sets their powers, the AI sandbox and national fines.In force since 29 July 2026LawBDSG section 37aBDSG section 37a and scoring in GermanyFrom 20 November 2026, BDSG section 37a governs credit and behaviour scores in Germany. Banned data, explanations and the right to a human decision.Adopted May 2026, applies from 20 November 2026

Regulator guidance

Regulator guidanceBaFin AI ICT guidanceBaFin guidance on ICT risks in the use of AI at financial entitiesBaFin's guidance on ICT risks of AI explains how DORA applies to AI at German banks and insurers, from governance and testing to cloud and incidents.Published December 2025, non-binding
All jurisdictions

Other jurisdictions

Guides

Questions

Which AI governance frameworks are listed for Germany?

This page lists 3 instruments for Germany: KI-MIG, BDSG section 37a and BaFin AI ICT guidance. Which ones apply to you depends on where you operate, your sector and how you use AI. Each framework page explains what it asks of you.

Does Aicura support the frameworks listed for Germany?

The frameworks listed for Germany are not built into Aicura. They are explained here to support your governance work, and every plan starts with the AI register, the record any framework needs first.

Start with the AI you run.

Every framework begins with knowing which AI systems and agents you have. The AI register is free to start.

Sign upContact us