Back to the AI Compass homepage

What legal requirements apply to the use of AI?

Compliance with legal requirements is a prerequisite for the safe and legally compliant use of artificial intelligence in companies. With the European AI Act, binding rules apply from 2024/2025 that have a direct effect in all EU states - whether you develop AI systems yourself or use market-ready solutions. Knowing the requirements early avoids legal risks and simultaneously strengthens the trust of customers and employees in the use of AI.

Thumbnail Recht und Regulation

In conversation with Eric Hilgendorf and Philippe Coution

Clear legal guidelines are a prerequisite for the safe use of AI in companies. Where do you start if you want to use AI legally compliant?

Prof. Dr. Dr. Eric Hilgendorf (JMU Würzburg) and Philippe Coution (TÜV SÜD) provide a brief insight.

Labelling requirement for AI content

Since the August 2, 2026 the transparency obligations from Article 50 of the AI Act apply. Not only for developers but for every company that uses AI. Anyone operating a chatbot on the website, publishing AI-generated images or texts, or using synthetic voices in customer service must make this recognizable for users. The European Commission has compiled exactly what needs to be labelled:

The AI Omnibus comes into force: Since July 27, 2026, the amendment regulation to the AI Act applies: The obligations for high-risk systems apply only from December 2027 or August 2028, simplified documentation and proof obligations apply for SMEs.

Our topic ambassadors

Portrait von Klaus Brisch, Grant Thornton Rechtsanwaltsgesellschaft mbH
Logo Grant Thornton

Klaus Brisch

Grant Thornton Rechtsanwaltsgesellschaft mbH
Lawyer, Partner, and Head of IT/IP, Data Protection, Digital Innovation

The regulation of artificial intelligence is crucial for innovation and risk minimization. "AI by (legal) design" reduces development costs, increases the marketability of AI products, and improves companies' competitiveness.

Portrait von Philippe Coution, TÜV SÜD
Logo TÜV Süd

Philippe Coution

TÜV SÜD
Head of Digital Interaction & Lead AI Quality

A comprehensive understanding of AI quality is essential to ensure compliance with legal regulations and standards and to scale one's AI activities.

Portrait von Prof. Dr. Dr. Eric Hilgendorf, JMU Würzburg
Logo Julius-Maximilians-Universität Würzburg und robot recht forschungsstelle

Prof. Dr. Dr. Eric Hilgendorf

JMU Würzburg
Chairholder of Criminal Law, Criminal Procedure Law, Legal Theory, Information Law, and Legal Informatics and member of the Bavarian AI Council

AI should become a technology that does not harm, that helps, that provides benefit, that can be accepted and trusted. Laws can significantly contribute to ensuring that this trust has a secure foundation and is thus preserved in the long term.

Who is affected by the AI regulation?

The regulation covers any company or organization that uses AI tools. Operators of AI systems are described in the AI Regulation as "natural or legal persons, authorities, institutions, or other entities that use an AI system under their own responsibility." This includes all professional applications. Only private, non-professional uses are exempt.

Thus, from February 2, 2025, Article 4 applies to all operators: sufficient AI competence of employees. How much further you need to go depends on what you use AI for. Take a closer look if you ...

  • use AI in personnel selection, credit checks, or critical infrastructure – such applications are considered high-risk according to Annex III, even with purchased tools,

  • operate in a regulated industry such as healthcare, financial services, or transportation,

  • work with personal data or copyrighted content,

  • develop or train your own AI systems – then you also apply as a provider, with significantly more extensive obligations.

The earlier you know the legal framework, the safer and quicker you can implement AI projects without having to make corrections later.

Implement AI Act with the Bavarian AI Innovation Accelerator

Training, workshops, and practical aids for implementing the AI Act. The Bavarian AI Innovation Accelerator is a project initially funded for two years by the Bavarian State Ministry for Digital Affairs. As part of the project, SMEs, startups, and the public sector in Bavaria are supported in complying with the European AI Regulation.

Icon des KI-Innovationsbeschleuniger

Event

Classifying AI Systems: Risk Classes, Roles, Duties

Learn how AI systems can be classified correctly and what obligations are associated with them.

Classifying AI Systems: Risk Classes, Roles, Duties
Icon des KI-Innovationsbeschleuniger

Event

Implementing the AI Act: Your Path to Compliance

This course explains all phases of AI Act compliance – from the scope examination to ongoing compliance.

Implementing the AI Act: Your Path to Compliance
Icon des KI-Innovationsbeschleuniger

Event

Article 50 in Practice

The transparency rules according to Article 50 will apply from August 2026: Learn what the AI Act and the new Code of Practice require.

Article 50 in Practice
Icon des KI-Innovationsbeschleuniger

Event

AI Act and GDPR in Everyday Work

Discover where AI Act and GDPR intersect in practice, and what that means for your use of AI systems in everyday work.

AI Act and GDPR in Everyday Work

Implement AI Act: 5 steps for your company

The following approach has proven successful for many companies:

  1. Step 1 – Check for impact: Clarify whether your company qualifies as an operator of an AI system within the meaning of the AI Regulation. This applies to any professional use of AI tools, regardless of company size or industry – only purely private use is exempt.

  2. Step 2 – Carry out risk assessment: Assign your AI applications to the four risk levels of the AI Act, from harmless to unacceptable. This way, you can recognize which obligations apply specifically to you.

  3. Step 3 – Ensure AI competence: Plan training measures for your employees in accordance with Article 4 of the AI Regulation – as an online course, face-to-face training, or self-study, suitable for the knowledge level and application area of your team. This not only meets the legal requirement: Trained employees recognize faulty AI results, use the systems more effectively, and assess more safely where use is sensible.

  4. Step 4 – Obtain legal advice: Check especially in the case of self-developed AI systems as well as questions regarding data protection, copyright, and industry-specific requirements, whether you need legal support.

  5. Step 5 – Regularly review the legal situation: Regulation is evolving dynamically. Follow current developments and continuously adapt your processes to remain compliant in the long term.

Ein dunkelblauer Farbverlauf

AI Compliance Check

The self-check by the Federal Network Agency classifies your AI system according to the AI Regulation.

More information

Loading...

You can find more information on the AI Compass topic "Law and Regulation" in our download portal.

To the download portal

Loading...

Loading...

Loading...

The BAIOSPHERE AI COMPASS 

How it works:  Rotate the arrows to navigate through our ten focus topics. A click will take you to the subpage with further information.

KI-Kompass

STRATEGY

Strategic planning secures competitive advantages and includes setting objectives, identifying use cases, and integrating AI into the company's overall strategy.

Data

Data is the foundation for any AI system. Its quality and integrity determine the applicability and performance of AI applications.

ECOSYSTEM

In AI usage and implementation, collaborations can bring many benefits. A strong ecosystem fosters innovation through the transfer of knowledge, resources, and technologies.

FUNDING AND SUPPORT

The costs of introducing AI vary between free versions and substantial investments for developing in-house solutions. To alleviate the investment burden, there are various funding options.

CULTURE AND MINDSET

An open and willing-to-learn corporate culture is fundamental for successfully implementing AI. The focus is on reducing reservations and fears and involving the workforce in the transformation process.

Organization

The use of AI requires a well-thought-out organizational structure. This forms the foundation for sustainable development of AI technologies as well as effective collaboration between different departments and interdisciplinary teams.

Technical prerequisites

A robust and flexible infrastructure encompasses hardware and software components, network infrastructure, and development processes to successfully implement, train, test, and utilize AI models.

Talent and competence

Development and integration of AI require a qualified team and specific knowledge. This includes both technical skills and strategic and infrastructural understanding.

Law and regulation

Compliance with legal requirements and standards is essential for using AI. With the EU AI Act, regulations have been established for AI solutions that will apply in all EU states when creating and using AI.

Ethics

Ethics in AI involves implementing moral principles to realize AI's benefits and reduce risks. Topics such as transparency, fairness, and avoiding bias, explainability, and data protection are essential in this context.