Back to the AI Compass homepage

What legal requirements apply to the use of AI?

Compliance with legal requirements is essential for the safe and legally compliant use of Artificial Intelligence in the company. With the European AI Regulation (European AI Act), binding rules have been in effect since 2024/2025 that apply directly in all EU countries - regardless of whether you develop AI systems yourself or use market-ready solutions. Those who know the requirements early avoid legal risks and simultaneously strengthen customer and employee trust in the use of AI.

Thumbnail Recht und Regulation

Talking with Eric Hilgendorf and Philippe Coution

Clear legal guidelines are the prerequisite for safe AI use in the company. Where do you start if you want to use AI legally compliant?

Prof. Dr. Dr. Eric Hilgendorf (JMU Würzburg) and Philippe Coution (TÜV SÜD) provide a brief insight.

Our topic ambassadors

Portrait von Klaus Brisch, Grant Thornton Rechtsanwaltsgesellschaft mbH
Logo Grant Thornton

Klaus Brisch

Grant Thornton Legal Services GmbH
Lawyer, Partner, and Head of IT/IP, Data Protection, Digital Innovation

Portrait von Philippe Coution, TÜV SÜD
Logo TÜV Süd

Philippe Coution

TÜV SÜD
Head of Digital Interaction & Lead AI Quality

Portrait von Prof. Dr. Dr. Eric Hilgendorf, JMU Würzburg
Logo Julius-Maximilians-Universität Würzburg und robot recht forschungsstelle

Prof. Dr. Dr. Eric Hilgendorf

JMU Würzburg
Chair of Criminal Law, Criminal Procedure Law, Legal Theory, Information Law, and Legal Informatics, and Member of the Bavarian AI Council

Labeling requirement for AI content

Since the August 2, 2026 the transparency obligations of Article 50 of the AI Regulation (AI Act) apply. Not only for developers but for every company that uses AI. Anyone operating a chatbot on the website, publishing AI-generated images or texts, or using synthetic voices in customer service must make this visible to users. The European Commission has outlined what specifically needs to be labeled:

The AI Omnibus comes into force: Since July 27, 2026, the amendment to the AI Act applies: The obligations for high-risk systems will only take effect from December 2027 or August 2028, simplified documentation and proof obligations apply to SMEs.

Loading...

Who does the AI Regulation affect?

The regulation encompasses every company or organization that uses AI tools. Operators of AI systems are defined in the AI Regulation as "natural or legal persons, authorities, institutions, or other bodies that use an AI system on their own responsibility." This includes all professional applications. Only private, non-professional uses are excluded.

For all operators, Article 4 applies since February 2, 2025: sufficient AI competence of employees. How much more you need depends on what you use AI for. You should take a closer look if you ...

  • use AI in personnel selection, credit checks, or critical infrastructure – such applications are considered high-risk according to Annex III, even with purchased tools,

  • operate in a regulated industry such as healthcare, financial services, or transport,

  • work with personal data or copyrighted content,

  • develop or train your own AI systems – then you are also considered a provider, with significantly more extensive obligations.

The earlier you know the legal frameworks, the safer and faster you can implement AI projects without having to make corrections later.

Implement AI Act with the Bavarian AI Innovation Accelerator

Training, workshops, and practical aids for implementing the AI Act. The Bavarian AI Innovation Accelerator is a project funded by the Bavarian State Ministry for Digital Affairs for initially two years. Within the framework of the project, SMEs, startups, and the public sector in Bavaria are supported in complying with the European AI Regulation.

Icon des KI-Innovationsbeschleuniger

Event

AI Act and GDPR in Everyday Work

Discover where AI Act and GDPR intersect in practice, and what that means for your use of AI systems in everyday work.

AI Act and GDPR in Everyday Work
Icon des KI-Innovationsbeschleuniger

Event

Article 50 in Practice

The transparency rules under Article 50 apply from August 2026: Learn what the AI Act and the new Code of Practice require.

Article 50 in Practice
Icon des KI-Innovationsbeschleuniger

Event

AI Act for Beginners

What, how, and why is it regulated? Understand concisely why and how the EU AI Act regulates AI, from risk classes to AI agents.

AI Act for Beginners
Icon des KI-Innovationsbeschleuniger

Event

Implement AI Standards: Deadlines, Methods & Evidence

Receive a structured overview of AI standards and learn how to apply them for conformity assessment under the AI Act.

Implement AI Standards: Deadlines, Methods & Evidence
Icon des KI-Innovationsbeschleuniger

Event

AI Act Engineering: From Requirements to Code

Develop a step-by-step understanding of which engineering practices and tools are suitable for compliance with the AI Act.

AI Act Engineering: From Requirements to Code

Implement AI Act: 5 steps for your company

The following approach has proven effective for many companies:

  • Step 1 – Check relevance:
    Clarify whether your company qualifies as an operator of an AI system within the meaning of the AI Regulation. This concerns every professional use of AI tools, regardless of company size or industry – only purely private use is excluded.

  • Step 2 – Conduct risk assessment:
    Assign your AI applications to the four risk levels of the AI Acts, from harmless to unacceptable. This helps you identify which obligations specifically apply to you.

  • Step 3 – Ensure AI competence:
    Plan training measures for your employees according to Article 4 of the AI Regulation – as an online course, face-to-face training, or self-study, suitable for your team's knowledge level and application area. This not only fulfills the legal requirement: Trained employees recognize faulty AI results, use the systems more effectively, and can better assess where use makes sense.

  • Step 4 – Seek legal advice:
    Especially for self-developed AI systems and in questions regarding data protection, copyright, and industry-specific regulations, determine whether you need legal support.

  • Step 5 – Regularly review legal situation: Regulation is evolving dynamically. Follow current developments and continuously adapt your processes to remain compliant.

Ein dunkelblauer Farbverlauf

AI Compliance Check

The self-check by the Federal Network Agency, which classifies your AI system according to the AI Regulation.

More information

Loading...

Loading...

Loading...

You will find more information on the AI Compass theme "Law and Regulation" in our download portal. 

To the download portal

The BAIOSPHERE AI COMPASS 

How it works:  Turn the arrows to navigate through our ten focus topics. With one click, you can access the subpage with more information.

KI-Kompass

STRATEGY

Strategic planning ensures competitive advantages and includes setting goals, identifying use cases, and integrating AI into the company's overall strategy.

Data

Data is the foundation for any AI system. Its quality and integrity determine the applicability and performance of AI applications.

ECOSYSTEM

In AI usage and implementation, collaborations bring many advantages. A strong ecosystem fosters innovations through the transfer of knowledge, resources, and technologies.

FINANCING AND FUNDING

The costs of introducing AI range from free versions to significant investments for developing custom solutions. To alleviate the investment burden, there are various funding opportunities.

CULTURE AND MINDSET

An open and willing-to-learn company culture is fundamental to successfully implementing AI. The focus is on overcoming reservations and fears and involving the workforce in the transformation process.

Organization

The deployment of AI requires a well-thought-out organizational structure. This forms the foundation for the sustainable development of AI technologies as well as effective collaboration between different departments and interdisciplinary teams.

Technical requirements

A robust and flexible infrastructure includes hardware and software components, network infrastructure, and development processes to successfully implement, train, test, and use AI models.

Talents and skills

The development and integration of AI require a skilled team and specific knowledge. This includes both technical abilities and strategic and infrastructural understanding.

Law and regulation

Compliance with legal requirements and standards is essential for the use of AI. With the EU AI Act, guidelines have been created for AI solutions that will apply in all EU states when creating and using AI.

Ethics

Ethics in AI involves implementing moral principles to realize the benefits of AI and reduce risks. Topics such as transparency, fairness, avoiding bias, explainability, and data protection are essential in this context.