--- title: "EU AI Act Compliance Checklist for German Tech Companies" description: "EU AI Act checklist: what applied from August 2025 and what German tech companies must implement by August 2026." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/news/eu-ai-act-compliance-checklist-german-tech-companies/" language: "en" --- ![EU AI Act compliance checklist for German tech companies](https://compound.law/assets/images/news/ai-act-digital.webp) Guides # EU AI Act Compliance Checklist for German Tech Companies 23 March 2026 Short answer If your company builds, deploys, or buys AI in Germany, you need a documented risk classification now, compliance with the first EU AI Act duties that started on August 2, 2025, and a practical roadmap for high-risk controls before August 2, 2026. - Classify each AI use case before you decide what obligations apply. - Check transparency, GPAI, and AI literacy duties that are already live. - Coordinate EU AI Act work with GDPR and works council review. The EU AI Act is law. The first compliance deadline — August 2, 2025 — has already passed. If you use, deploy, or develop AI systems and operate in Germany, you need to understand where you stand. This checklist covers the key compliance areas for German tech companies: what applies to you based on your AI risk classification, what the August 2025 requirements actually required, and what the August 2026 high-risk obligations will demand. *** ## Step 1: Understand the Risk Classification Framework Not everything you do with AI is regulated equally. The EU AI Act uses a tiered risk framework. **Prohibited AI systems** — banned entirely. Includes social scoring, biometric categorization based on sensitive characteristics, subliminal manipulation, and real-time remote biometric identification in public spaces (with narrow exceptions). If you operate any of these, stop immediately. **High-risk AI systems** — subject to strict requirements. This includes AI systems used in hiring and HR decisions, credit scoring, essential private and public services, safety components of products, and a range of other applications defined in Annex III of the Regulation. If your AI outputs affect individual rights or access to services, you’re likely here. **Limited-risk AI systems** — subject to transparency obligations only. [AI chatbots](https://compound.law/en-DE/compliance/ai-chatbots/) and other AI that interacts with users must disclose that users are interacting with AI. **Minimal-risk AI systems** — largely unregulated. Most AI features (recommendation engines, spam filters, basic automation) fall here. **Your first compliance action**: Map your AI systems against this framework. You cannot comply until you know where you sit. *** ## Step 2: August 2025 Transparency Requirements — Are You Compliant? The August 2, 2025 deadline applied to two main areas: **1. Prohibited AI systems** — full prohibition applied. If your systems included any of the banned categories, they should have been discontinued. **2. General-purpose AI models** — providers of GPAI models became subject to transparency and cooperation obligations. If you develop foundation models or GPAI models (not just use them), this applied to you directly. **3. AI literacy obligations** — all providers and deployers of AI systems must ensure sufficient AI literacy among their staff and those who operate their systems. This isn’t just formal training; it means your team needs to understand the AI systems they work with. **Checklist — August 2025:** - [ ] Prohibited AI systems identified and discontinued - [ ] AI literacy programs implemented for relevant staff - [ ] GPAI model documentation in place (if applicable) - [ ] Transparency obligations met for chatbots and AI-interaction interfaces *** ## Step 3: August 2026 High-Risk Requirements — Prepare Now The full high-risk AI obligations apply from August 2, 2026. If your systems are high-risk under the Act, you have approximately 12 months to build compliance infrastructure. **Risk management system** — you need a documented, ongoing risk management system for each high-risk AI system. This isn’t a one-time assessment; it’s a continuous process covering the entire lifecycle of the system. **Data governance** — training, validation, and testing datasets must meet specific quality criteria. Practices for data preparation, examination, and management must be documented. **Technical documentation** — comprehensive documentation covering system purpose, design, development process, validation results, and performance metrics. This documentation must be sufficient to allow a conformity assessment. **Transparency and instructions for use** — high-risk AI systems must come with clear instructions for intended users covering capabilities, limitations, human oversight mechanisms, and technical measures. **Human oversight** — high-risk systems must be designed to allow human oversight by natural persons during use. The ability to intervene, override, and monitor must be built into the system. **Accuracy, robustness, and cybersecurity** — systems must meet appropriate levels of accuracy, they must be robust against errors and inconsistencies, and they must be secure against adversarial attacks. **Registration** — high-risk AI systems must be registered in the EU database prior to being placed on the market. **Conformity assessment** — most high-risk AI systems require a conformity assessment before deployment. Some require third-party assessment; others can be self-assessed. **Checklist — August 2026 preparation:** - [ ] High-risk AI systems identified and catalogued - [ ] Risk management system framework developed - [ ] Data governance documentation started - [ ] Technical documentation process established - [ ] Human oversight mechanisms designed - [ ] Conformity assessment pathway identified - [ ] EU database registration timeline set *** ## Step 4: The Works Council Angle — §87 BetrVG German employment law adds a layer that pure EU AI Act compliance doesn’t cover: if you have a works council (Betriebsrat), deploying AI systems that affect employees triggers co-determination rights under §87 BetrVG. Monitoring employees, performance assessment using AI, or changing work processes via automated systems all require works council consultation before implementation. This applies regardless of where your AI system sits in the EU AI Act risk framework. If you’re deploying AI internally — in HR, performance management, productivity monitoring, or workflow automation — you need to run a parallel track with your works council alongside EU AI Act compliance. *** ## Step 5: GDPR Overlap — The Dual Framework Problem Many AI Act compliance questions also implicate GDPR. Automated decision-making (Art. 22 GDPR) already carries restrictions and transparency requirements. High-risk AI systems that process personal data will need to satisfy both frameworks simultaneously. **Key overlap areas:** - Data minimization requirements vs. AI training data needs - Rights to explanation for automated decisions - Data protection impact assessments (DPIAs) — many high-risk AI DPIAs and EU AI Act risk assessments will need to be coordinated - Cross-border data flows if your AI systems process data using providers in non-EU countries A compliance approach that treats EU AI Act and GDPR as separate workstreams will create gaps. They need to be handled together. *** ## Step 6: What SaaS Companies Specifically Need to Check If you provide B2B SaaS and your product includes AI features, you’re in the supply chain. Your obligations depend on whether you are a provider (you developed the model or system), deployer (you put a third-party AI system to work), or importer/distributor. **Provider obligations are heaviest.** If you built the AI and offer it to customers, you bear full compliance responsibility. This applies equally to SaaS teams offering [AI code generation tools](https://compound.law/en-DE/compliance/ai-code-generation/) to developers — provider obligations extend to any AI system placed on the market. **Deployer obligations are real but lighter.** If you use a third-party AI system in your product, you still have obligations: transparency to end users, monitoring, and — if the system is high-risk — ensuring the provider has met their own requirements and maintaining usage logs. **Contractual clarity matters.** Your AI vendor contracts should now explicitly address EU AI Act obligations, technical documentation handover, and allocation of compliance responsibility. Many off-the-shelf vendor agreements don’t cover this yet. *** ## Getting Legal Support for EU AI Act Compliance EU AI Act compliance isn’t just a technical problem — it’s a legal one. Classification decisions, documentation standards, conformity assessment pathways, and GDPR coordination all require legal analysis tailored to your specific systems and use cases. Compound Law advises German tech companies on EU AI Act compliance alongside GDPR, works council requirements, and employment law. If you’re in a professional services business, our sector guide on [EU AI Act compliance for professional services firms](https://compound.law/en-DE/ai-act/professional-services/) covers the specific obligations that apply. If you’re not certain where your AI systems sit under the framework, [schedule a consultation](https://compound.law/en-DE/#booking) to get a clear picture before August 2026. ## You might also like [![Marc Schuba and Philipp Brandt, new partners at Compound Law](https://compound.law/assets/images/news/two_partners_editorial.webp)](https://compound.law/en-DE/news/two-new-partners/) [Team](https://compound.law/en-DE/news/two-new-partners/) ### [AI-native law firm Compound Law appoints Marc Schuba and Philipp Brandt as partners](https://compound.law/en-DE/news/two-new-partners/) [White & Case alumnus Marc Schuba joins as founding partner and Philipp Brandt as partner, launching a restructuring and insolvency practice and expanding IT and AI law, data protection and IP.](https://compound.law/en-DE/news/two-new-partners/) [![Dr. Markus Dreißigacker Joins Compound Law](https://compound.law/assets/images/news/markus_dreissigacker_editorial.webp)](https://compound.law/en-DE/news/markus-dreissigacker-joins/) [Team](https://compound.law/en-DE/news/markus-dreissigacker-joins/) ### [Dr. Markus Dreißigacker Joins Compound Law as Of Counsel](https://compound.law/en-DE/news/markus-dreissigacker-joins/) [Dr. Markus Dreißigacker joins Compound Law as Of Counsel: two decades of in-house M\&A and compliance leadership at Bruker, JDE Peet's, and Kellogg's meet the AI law firm.](https://compound.law/en-DE/news/markus-dreissigacker-joins/) [![Employment law in Germany for employers reviewing contracts and workplace rules](https://compound.law/assets/images/news/employment-desk.webp)](https://compound.law/en-DE/news/employment-law-germany/) [Guides](https://compound.law/en-DE/news/employment-law-germany/) ### [Employment Law in Germany: Contracts, Termination, and Works Councils](https://compound.law/en-DE/news/employment-law-germany/) [Employment law in Germany explained for employers: contracts, working time, leave, dismissal protection, works councils, and data rules for business operations.](https://compound.law/en-DE/news/employment-law-germany/) [![Commercial contracts in Germany for B2B companies](https://compound.law/assets/images/news/commercial-folder.webp)](https://compound.law/en-DE/news/commercial-contracts-germany/) [Guides](https://compound.law/en-DE/news/commercial-contracts-germany/) ### [Commercial Contracts in Germany: Key Clauses, Risks, and Review Triggers](https://compound.law/en-DE/news/commercial-contracts-germany/) [Commercial contracts in Germany need more than a template. Businesses should review liability, termination, data protection, and mandatory German contract rules before signing.](https://compound.law/en-DE/news/commercial-contracts-germany/) [![Intellectual property law in Germany for businesses](https://compound.law/assets/images/news/ip-protection.webp)](https://compound.law/en-DE/news/intellectual-property-law-germany/) [Guides](https://compound.law/en-DE/news/intellectual-property-law-germany/) ### [Intellectual Property Law in Germany: What Businesses Should Protect](https://compound.law/en-DE/news/intellectual-property-law-germany/) [Intellectual property law in Germany covers trademarks, copyright, patents, designs, trade secrets, ownership, licensing, and enforcement for businesses.](https://compound.law/en-DE/news/intellectual-property-law-germany/) [![AI recruitment in Germany with GDPR, AI Act and works council compliance](https://compound.law/assets/images/news/ai-recruiting.webp)](https://compound.law/en-DE/news/ai-recruitment-germany/) [Guides](https://compound.law/en-DE/news/ai-recruitment-germany/) ### [AI Recruitment in Germany: GDPR, AI Act and Works Council Rules (2026)](https://compound.law/en-DE/news/ai-recruitment-germany/) [AI recruitment in Germany is legal only with human review, clear GDPR notices, and HR governance before the AI Act high-risk rules apply on August 2, 2026.](https://compound.law/en-DE/news/ai-recruitment-germany/) ## Frequently asked questions The first obligations started to apply on August 2, 2025. That includes bans on prohibited AI practices and AI literacy duties, while broader high-risk system requirements follow on August 2, 2026. Yes. Even if you do not build the underlying model, you can still have deployer obligations around transparency, monitoring, vendor coordination, and downstream compliance. No. Most practical implementations overlap with GDPR and, for employee-facing systems, can also trigger works council co-determination under German labor law. ## Ready to get started? Tell us what you need and we’ll send a fixed-price quote by email. 1h response. Prefer to talk? Book a call on the calendar. [Get a quote](https://compound.law/en-DE/quote/) ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "EU AI Act Compliance Checklist for German Tech Companies", "description": "EU AI Act checklist: what applied from August 2025 and what German tech companies must implement by August 2026.", "image": "https://compound.law/assets/images/news/ai-act-digital.webp", "datePublished": "2026-03-23T00:00:00.000Z", "dateModified": "2026-03-23T00:00:00.000Z", "author": { "@type": "Person", "name": "Dr. Markus Dreißigacker", "image": "https://compound.law/assets/images/team/markusdreissigacker.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/news/eu-ai-act-compliance-checklist-german-tech-companies/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "News", "item": "https://compound.law/en-DE/news/" }, { "@type": "ListItem", "position": 3, "name": "EU AI Act Compliance Checklist for German Tech Companies", "item": "https://compound.law/en-DE/news/eu-ai-act-compliance-checklist-german-tech-companies/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "When did the first EU AI Act obligations start to apply?", "acceptedAnswer": { "@type": "Answer", "text": "The first obligations started to apply on August 2, 2025. That includes bans on prohibited AI practices and AI literacy duties, while broader high-risk system requirements follow on August 2, 2026." } }, { "@type": "Question", "name": "Do German SaaS companies need to care about the EU AI Act if they use third-party models?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Even if you do not build the underlying model, you can still have deployer obligations around transparency, monitoring, vendor coordination, and downstream compliance." } }, { "@type": "Question", "name": "Is EU AI Act compliance separate from GDPR in Germany?", "acceptedAnswer": { "@type": "Answer", "text": "No. Most practical implementations overlap with GDPR and, for employee-facing systems, can also trigger works council co-determination under German labor law." } } ] } ] ```