EU AI Act Poised to Impact Vast Majority of German Companies, Raising Compliance Challenges

The EU AI Act is set to affect a much broader range of German companies than initially expected, extending its reach beyond AI developers to virtually all organizations using AI-integrated systems. This expanded applicability encompasses companies deploying AI functionalities within standard software used for HR, legal, financial, or other business operations. Erena Langley, Director of Regulatory Solutions at Navex, highlights that many German firms mistakenly believe the Act targets only AI creators, leading to widespread underestimation of compliance requirements.

The Act’s implementation has been complicated by misunderstandings around its deadlines and requirements. While some companies wrongly assume compliance deadlines are distant, transparency obligations for AI usage come into force from August 2, 2026. Deadlines for high-risk AI systems stretch into 2027 and 2028, increasing the urgency for businesses to assess and document their AI use promptly. A further source of uncertainty is the absence of clear standards and the division of responsibility among supervisory authorities, with many companies awaiting guidance from European standardization bodies and the German government.

Non-compliance risks include hefty fines amounting to up to €35 million or 7% of global annual revenue, whichever is higher. However, Langley warns that reputational damage caused by failure to adequately control AI systems and decisions could prove even more detrimental. To navigate these challenges, companies are urged to proactively establish robust compliance processes and meticulously document their AI deployments to align with evolving regulatory expectations.

In summary, the EU AI Act will have a profound impact on German business operations that rely on AI technologies. Firms must overcome confusion about their obligations and deadlines to mitigate the risk of severe sanctions and reputational harm. Early and comprehensive compliance measures will be crucial for maintaining stakeholder trust and adapting to the regulatory environment as it develops.