Act on Market Surveillance and the Promotion of Innovation in Artificial Intelligence (KI-MIG)

Summary

Germany's law implementing the EU AI Act (Regulation (EU) 2024/1689). It makes the Bundesnetzagentur the main market surveillance authority, single point of contact and central complaints office; BaFin supervises AI systems linked to regulated financial activities, and existing product regulators cover AI in products under Annex I. An independent AI market surveillance chamber oversees certain high-risk systems, including biometric systems used for law enforcement, border management, justice and democracy. The law also sets up a coordination and competence centre, AI regulatory sandboxes, approval of real-world tests of high-risk systems, fines and a register of certain high-risk systems.

Language

No English version of this instrument was found. The English title and the summary are the register's own, written from the sources below; for the exact wording use the German text.

Safety topics

Status notes

The Federal Government sent its bill to the Bundesrat on 13 February 2026 as particularly urgent, noting that Germany had to implement the AI Act by 2 August 2025 (Bundesrat printed paper 97/26). The Bundestag passed the act on 11 June 2026, and on 10 July 2026 the Bundesrat decided not to call the mediation committee. The act was signed on 22 July 2026 and published in Bundesgesetzblatt 2026 I No. 223 on 28 July 2026; under its Article 5 it entered into force the day after promulgation, 29 July 2026. The KI-MIG is Article 1 of that act (Gesetz zur Durchführung der Verordnung über künstliche Intelligenz); Articles 2 to 4 amend the Whistleblower Protection Act to cover breaches of the AI Act, the First Book of the Social Code and the Financial Services Supervision Act. Structure of the KI-MIG: Part 1 scope; Part 2 competent authorities and cooperation (sections 2-10); Part 3 powers (section 11); Part 4 innovation support (sections 12-14, AI regulatory sandboxes and real-world testing of high-risk systems); Part 5 fines (sections 15-17); Part 6 retention duties; Part 7 evaluation; Part 8 register of certain high-risk AI systems (section 20). Breaches listed in section 15 carry fines of up to EUR 50,000, and no fines are imposed on public authorities and other public bodies (section 17(2)). A real-world test plan counts as approved if the provider receives no answer within 30 days. The AI market surveillance chamber reports to the Bundestag every year, first for 2026; the government evaluates the supervisory structure within 18 months and again within three years of entry into force.

Sources

Open the official source https://www.gesetze-im-internet.de/ki-mig/BJNR0DF0B0026.html

Local copy

Verification

History

1. 2026-10-17english_version: – → {"kind": "none found"} — no English translation of the KI-MIG is listed on gesetze-im-internet.de2026-10-17-recheck-europe-2 · Claude Code (claude-opus-5-5)
2. 2026-10-17notes: Dated 22 July 2026 and promulgated in Bundesgesetzblatt 2026 I No. 223; in force → The Federal Government sent its bill to the Bundesrat on 13 February 2026 as par — replaced the press-reported parliamentary dates with those of the stored Bundesrat papers (government bill 13 Feb 2026, Bundestag 11 Jun 2026, Bundesrat 10 Jul 2026) and the promulgation date; removed the claim about when the AI Act's main obligations apply; added Articles 2-4 of the enacting act, fines, the deemed approval of test plans, the chamber's report and the evaluation deadlines2026-10-17-recheck-europe-2 · Claude Code (claude-opus-5-5)
3. 2026-10-17safety_topics: ["accountability & liability", "risk-based classification", "evaluation & testin → ["accountability & liability", "risk-based classification", "evaluation & testin — 'public-sector use' added for the rules on public bodies (no fines, section 17(2); registration of federal public deployers, section 20(3); classification advice to public bodies, section 12)2026-10-17-recheck-europe-2 · Claude Code (claude-opus-5-5)
4. 2026-10-17summary: Germany's national implementing law for the EU AI Act (Regulation (EU) 2024/1689 → Germany's law implementing the EU AI Act (Regulation (EU) 2024/1689). It makes t — rewritten from sections 2-20 of the stored text: adds BaFin's and the product regulators' remits, what the chamber supervises and the approval of real-world tests2026-10-17-recheck-europe-2 · Claude Code (claude-opus-5-5)
5. 2026-10-17issuing_body: Federal Republic of Germany: Bundestag with the consent of the Bundesrat (promul → German Bundestag — the promulgated act reads 'Der Bundestag hat das folgende Gesetz beschlossen' and 'Die verfassungsmäßigen Rechte des Bundesrates sind gewahrt', and the Bundesrat only decided not to call the mediation committee (printed paper 375/26 (B)); the act did not need the Bundesrat's consent, so 'with the consent of the Bundesrat' is removed2026-10-17-recheck-europe-2 · Claude Code (claude-opus-5-5)

Related records

EU AI Act European Union · Partially in force

Citation

German Bundestag. Act on Market Surveillance and the Promotion of Innovation in Artificial Intelligence (KI-MIG) [BGBl. 2026 I Nr. 223]. 2026-07-22. https://www.gesetze-im-internet.de/ki-mig/BJNR0DF0B0026.html. Status: In force; verified 2026-10-17 (level A). Local copy archive/DE-01/2026-10-11/official.html retrieved 2026-10-11 15:42:22 UTC, SHA-256 9da231873a835aff0fb98773b90e4fbba790c7e9307a2d063d3b84d15c1a552d. Every AI Policy Ever, version 1.18 (snapshot 2026-10-18), record DE-01.

Improve this record

Know of an amendment, a status change or an error? Report news or an error on GitHub; the form opens with this record filled in.