--- title: "EU AI Act Timeline Germany: 2 August 2026, 2027 and 2028" description: "EU AI Act 2 August 2026 is not the only date. German businesses need the split timeline for transparency, stand-alone high-risk AI, and product AI." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/ai-act/august-2026-deadline/" language: "en" --- ![EU AI Act timeline Germany for 2 August 2026 2 December 2027 and 2 August 2028](https://compound.law/assets/images/ai-act/ai_act_1.webp) ai-act # EU AI Act Timeline Germany: 2 August 2026, 2027 and 2028 21 May 2026 Short answer The EU AI Act timeline for German businesses is now split across three key dates. 2 August 2026 still matters for Article 50 transparency and the broader framework, but stand-alone Annex III high-risk AI systems move to 2 December 2027 and product-embedded high-risk AI systems move to 2 August 2028. - 2 August 2026 still matters for transparency and framework obligations. - 2 December 2027 matters for stand-alone Annex III high-risk AI. - 2 August 2028 matters for high-risk AI embedded in regulated products. The **EU AI Act timeline Germany** should now be read as **three dates**, not one. For German businesses, **2 August 2026** still matters for the broad framework and **Article 50 transparency obligations**, but **stand-alone Annex III high-risk AI systems** move to **2 December 2027** and **product-embedded high-risk AI systems** move to **2 August 2028**. That is the more accurate answer for procurement, compliance, and founder teams asking what the “August 2026 deadline” really means. ## Timeline Table: 2025, 2026, 2027, 2028 | Date | What applies | Typical German-business relevance | | ------------------- | ------------------------------------------------------------- | ------------------------------------------------------ | | **2 February 2025** | Prohibited AI practices and AI literacy duties | Ban review, internal governance, training | | **2 August 2025** | Governance rules and GPAI obligations | Model-layer and provider-side analysis | | **2 August 2026** | Broad application date, including **Article 50 transparency** | Customer-facing AI, disclosure, procurement readiness | | **2 December 2027** | **Stand-alone Annex III high-risk AI systems** | HR, biometrics, education, scoring, essential services | | **2 August 2028** | **Product-embedded high-risk AI systems** | Product-linked and CE-framework scenarios | The European Commission’s AI Act overview now uses this split timeline, and the Council of the EU’s **March 13, 2026** press release uses the same delayed high-risk dates. ## What Still Applies on 2 August 2026? The **2 August 2026** date remains important because it is still the right answer for some obligations. Most visibly, it is the date for **Article 50 transparency and disclosure obligations** that matter when users interact with AI systems or when AI-generated content triggers labelling requirements. It is also the date many German companies should use for internal readiness on: - governance documentation, - workflow mapping, - customer-facing AI disclosures, - vendor evidence collection, - and role allocation between provider and deployer. If your organisation uses chatbots, AI assistants, or other user-facing automation, this date is not optional. ## Which High-Risk AI Systems Move to 2 December 2027? The **2 December 2027** date matters for the **stand-alone high-risk AI systems** that dominate many commercial legal queries. In practice, this covers the Annex III categories most often seen in enterprise procurement: - employment and worker management, - biometrics, - education, - critical infrastructure, - access to essential services such as credit scoring, - and other classic stand-alone high-risk areas. This is why a German company buying an AI recruitment tool or biometric verification system should no longer be told simply that “high-risk AI is due in August 2026.” The more useful answer is that the stand-alone high-risk date now points to **2 December 2027**, while procurement work should start earlier. ## Which Systems Move to 2 August 2028? The **2 August 2028** date applies to **high-risk AI embedded in regulated products**. That is different from a stand-alone software tool used by HR, sales, legal, or procurement. The product branch is mainly relevant for companies operating inside product-safety and CE-marking frameworks. For general software procurement in Germany, the **2028** date is usually less important than **2026** and **2027**. For regulated-product businesses, it can be the central date. ## What Procurement Teams Should Do Now Even with the split timeline, legal and procurement teams should act now: 1. **Sort systems by date.** Divide your AI estate into 2026, 2027, and 2028 buckets. 2. **Fix transparency first.** Customer-facing AI often creates the clearest 2026 workstream. 3. **Negotiate the evidence trail early.** Ask for technical documentation, logging support, oversight instructions, incident clauses, and update notifications before signature. 4. **Run AI Act and GDPR review together.** Most German procurement projects need both. For the buyer-side workflow, see our [AI Act procurement requirements for German enterprises](https://compound.law/en-DE/compliance/eu-ai-act-procurement-requirements-german-enterprises/), [GDPR AI procurement guide](https://compound.law/en-DE/compliance/gdpr-ai-procurement/), and [AI vendor due diligence in Germany](https://compound.law/en-DE/compliance/ai-vendor-due-diligence-germany/). ## FAQ ### What does 2 August 2026 mean under the EU AI Act? It remains the broad framework date and the key date for **Article 50 transparency obligations**. It should not be used as a blanket answer for every high-risk AI obligation. ### Which high-risk AI systems move to 2 December 2027? Stand-alone Annex III high-risk AI systems move to **2 December 2027** under the current official timeline framing. For German businesses, that is especially relevant in HR, biometrics, education, and scoring use cases. ### Which AI systems move to 2 August 2028? High-risk AI systems embedded in regulated products move to **2 August 2028**. This is the product-linked branch of the timeline. *** *This page is general information only and not legal advice. Specific AI Act timing depends on the concrete AI system, its role in the value chain, the sector involved, and the official guidance available at the time of deployment.* ## Related Industry Guides [![EU AI Act compliance requirements for financial services firms in Germany](https://compound.law/assets/images/ai-act/ai_act_4.webp)](https://compound.law/en-DE/ai-act/financial-services/) [ai-act](https://compound.law/en-DE/ai-act/financial-services/) ### [EU AI Act Financial Services Compliance Guide for Germany (updated 2026)](https://compound.law/en-DE/ai-act/financial-services/) [Which AI systems are high-risk in financial services, what August 2026 deadlines mean for German banks, and a practical compliance checklist.](https://compound.law/en-DE/ai-act/financial-services/) [![AI telecoms regulation Germany: EU AI Act, GDPR and TKG 2021 compliance guide](https://compound.law/assets/images/ai-act/ai_act_2.webp)](https://compound.law/en-DE/ai-act/telecommunications/) [ai-act](https://compound.law/en-DE/ai-act/telecommunications/) ### [AI Regulation for Telecoms in Germany: EU AI Act, GDPR & TKG 2021](https://compound.law/en-DE/ai-act/telecommunications/) [German telecom operators face AI obligations under the EU AI Act, GDPR, and TKG 2021. What applies, what's high-risk, and when you must comply.](https://compound.law/en-DE/ai-act/telecommunications/) [![EU AI Act high-risk insurance compliance Germany underwriting claims](https://compound.law/assets/images/ai-act/ai_act_4.webp)](https://compound.law/en-DE/ai-act/insurance/) [ai-act](https://compound.law/en-DE/ai-act/insurance/) ### [EU AI Act for German Insurers: High-Risk AI Compliance Guide](https://compound.law/en-DE/ai-act/insurance/) [EU AI Act classifies insurance AI as high-risk. Underwriting, pricing, and claims obligations for German insurers — with a practical compliance checklist.](https://compound.law/en-DE/ai-act/insurance/) ## Frequently asked questions For German businesses, 2 August 2026 remains the broad application date for the AI Act framework and the key date for Article 50 transparency obligations. It should no longer be described as the single start date for every high-risk AI obligation. The current official timeline points to 2 December 2027 for stand-alone high-risk AI systems in the main Annex III areas, including employment, biometrics, education, critical infrastructure, and access to essential services. The 2 August 2028 date applies to high-risk AI systems embedded in regulated products. This is the product-safety branch of the timeline, not the usual stand-alone SaaS procurement scenario. ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "EU AI Act Timeline Germany: 2 August 2026, 2027 and 2028", "description": "EU AI Act 2 August 2026 is not the only date. German businesses need the split timeline for transparency, stand-alone high-risk AI, and product AI.", "image": "https://compound.law/assets/images/ai-act/ai_act_1.webp", "datePublished": "2026-05-21T00:00:00.000Z", "dateModified": "2026-05-21T00:00:00.000Z", "author": { "@type": "Person", "name": "Julian Jantze", "image": "https://compound.law/assets/images/team/julianjantze.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/ai-act/august-2026-deadline/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "AI Act by Industry", "item": "https://compound.law/en-DE/ai-act/" }, { "@type": "ListItem", "position": 3, "name": "EU AI Act Timeline Germany: 2 August 2026, 2027 and 2028", "item": "https://compound.law/en-DE/ai-act/august-2026-deadline/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What does 2 August 2026 mean under the EU AI Act?", "acceptedAnswer": { "@type": "Answer", "text": "For German businesses, 2 August 2026 remains the broad application date for the AI Act framework and the key date for Article 50 transparency obligations. It should no longer be described as the single start date for every high-risk AI obligation." } }, { "@type": "Question", "name": "Which high-risk AI systems move to 2 December 2027?", "acceptedAnswer": { "@type": "Answer", "text": "The current official timeline points to 2 December 2027 for stand-alone high-risk AI systems in the main Annex III areas, including employment, biometrics, education, critical infrastructure, and access to essential services." } }, { "@type": "Question", "name": "Which AI systems move to 2 August 2028?", "acceptedAnswer": { "@type": "Answer", "text": "The 2 August 2028 date applies to high-risk AI systems embedded in regulated products. This is the product-safety branch of the timeline, not the usual stand-alone SaaS procurement scenario." } } ] } ] ```