§ 43a(2) BRAO (confidentiality, criminally backed by § 203(1) no. 3 StGB) and § 43e BRAO (IT outsourcing) apply to AI providers. BRAK §3.2: for LLMs, transmitting client secrets is 'nach aktuellem Stand der Technik nicht erforderlich' and therefore not permitted; prompts should be abstract and documents anonymised; § 43e(4) requires comparable secrecy protection abroad, so EU/German-hosted providers are preferred.
Regulation Tracker · Country · Europe
Germany
Extensivecivil lawupdated 2026-09-04verified 2026-09-04
EU-level rules also apply — see the European Union record →
As of 4 September 2026 Germany has no AI-specific court rule. The binding constraints come from professional statute, sections 43, 43a(2) and 43e BRAO, as applied by the BRAK's KI-Leitfaden of December 2024, which treats sending client secrets to a public LLM as impermissible. Four courts have censured hallucinated citations.
As of 2026-09-04, Germany has 6 binding rules, official guidance in 6 categories, 0 proposals and 1 position set only by case law across the 20 categories in the map. Binding rules cover client data in AI tools, technological competence, consumer AI legal services, horizontal AI statute, mandatory AI training, vendor due diligence. In 4 categories we found nothing; in 3 the position is not yet determined.
How to read this page
- Binding rule Binding rule means a rule in force from a court, statute, regulator or equivalent authority.
- Official guidance Official guidance means an official non-binding position from a judiciary, regulator, bar or public body.
- Proposed / consultation Proposed / consultation means a public bill, draft rule or consultation that is not yet in force.
- Set by case law Set by case law means no rule was found, but courts have set the position in decisions.
- Nothing found Nothing found means the category was checked and no rule, guidance, proposal or case-law position was found.
- Not yet determined Not yet determined means research did not establish a reliable position yet.
The rules, category by category
Article 4 of the EU AI Act has applied since 2 Feb 2025 and BRAK §5.1 confirms lawyers and Berufsausübungsgesellschaften are normally 'Betreiber' (deployers), so staff instructions and AI training are 'ein wesentlicher Bestandteil einer verantwortungsvollen Nutzung'; larger deployments may need a risk-management system with documentation and monitoring duties.
The Rechtsdienstleistungsgesetz (RDG) reserves out-of-court legal services and is technology-neutral. The BGH has already drawn the line for automated legal products: Urt. v. 9 Sep 2021, I ZR 113/20 ('smartlaw') held a digital contract generator is not a Rechtsdienstleistung, while Urt. v. 27 Nov 2019, VIII ZR 285/18 ('wenigermiete.de') admitted registered legal-tech collection models. No AI-specific ruling since.
The EU AI Act applies directly (Art. 4 literacy since 2 Feb 2025; Art. 50 transparency from 2 Aug 2026). BRAK §5.3 concludes law-firm tools are normally not high-risk because Annex III point 8(a) targets judicial authorities, not the bar. BRAK called for a broad reading of the Art. 50 transparency duties (19 Mar 2025) and filed a Stellungnahme on the digital/AI omnibus (2 Mar 2026). German designation of national authorities was not verified in this pass.
- Regulation (EU) 2024/1689 (Artificial Intelligence Act) 2026-07-27
- Guidelines on the transparency obligations under Article 50 of the AI Act 2026-07-20
- Regulation (EU) 2026/1744 (Digital Omnibus on AI) 2026-07-24
- Hinweise zum Einsatz von künstlicher Intelligenz (KI) 2024-12-01
- BRAK KI-Leitfaden §5 (official PDF)
Article 4 of the EU AI Act obliges deployers, including law firms, to ensure sufficient AI literacy from 2 Feb 2025; BRAK §5.1 spells out what that means for a Kanzlei. The general § 43a(6) BRAO continuing-education duty is not AI-specific and there is no mandatory German AI CLE.
§ 43e BRAO is the strictest vendor rule in this group: careful selection, a contract at least in text form containing the minimum content in § 43e(3) nos. 1–3 (confidentiality undertaking with warning of criminal consequences, purpose limitation), immediate termination if the safeguards fail, need-to-know access, and comparable secrecy protection for providers outside Germany (§ 43e(4)). Art. 28 GDPR applies alongside (§ 43e(8)).
BRAK KI-Leitfaden §2.1 grounds the duty in § 43 sentence 1 BRAO (gewissenhafte Berufsausübung) and the principle of personal performance (§ 613 BGB): AI may only support, never replace, and 'eine eigenverantwortliche Überprüfung und Endkontrolle der KI-Ergebnisse' is required in every case. KG Berlin (20 Nov 2025, 17 WF 144/25) held counsel must check whether citations come from a 'fantasising' AI.
No German rule barring AI from judgment drafting. The DSK Orientierungshilfe (6 May 2024) §1.6 states there must be 'keine automatisierte Letztentscheidung', reflecting Art. 22 GDPR; AI Act recital 61 and Annex III point 8(a) treat judicial-support AI as high-risk and reserve the final decision to the human judge.
- Regulation (EU) 2024/1689 (Artificial Intelligence Act) 2026-07-27
- Guidelines on the use of generative AI by courts and tribunals (CEPEJ(2025)18Final) 2025-12-19
- Orientierungshilfe: Künstliche Intelligenz und Datenschutz 2024-05-06
- DSK — Orientierungshilfe Künstliche Intelligenz und Datenschutz, 6 May 2024 (official PDF)
No express supervision rule for AI-assisted work. BRAK derives it from the Kanzleipflicht (§ 5 BORA) plus Art. 4 AI Act: firms should issue written internal instructions ('Handlungsanweisungen') and train staff. Heightened care applies where AI faces the client (chatbots, auto-responders, intake) — BRAK §2.2, citing OLG Hamm 'Scheidung Online'.
Germany expressly rejects a duty: BRAK §4 states that neither the BRAO nor the BORA currently creates a professional obligation to tell clients that AI was used, though transparency and a contractual clause are recommended and duties may arise from contract law or the UWG. Art. 50(4) AI Act creates no disclosure duty where a lawyer reviews and takes editorial responsibility for the text.
BRAK 'Hinweise zum Einsatz von künstlicher Intelligenz (KI)', Stand December 2024, published 9 Jan 2025 — eight sections covering § 43 BRAO verification, confidentiality and § 43e outsourcing, BRAO transparency, the AI Act, copyright/tax/insurance risks and European bar recommendations. BRAK also circulated the CCBE generative-AI guide and the CCBE technical guide adopted 27 Mar 2026.
The DSK's 'Künstliche Intelligenz und Datenschutz' Orientierungshilfe (v1.0, 6 May 2024) is the reference text: purpose definition, lawful basis, no automated final decision, closed vs open systems, transparency about training and prompt history, DPIA, work accounts for staff. BRAK §3.3 makes it the benchmark for law firms and flags that OpenAI is not on the EU-US Data Privacy Framework list.
Four reported decisions, all short of a formal sanction. AG Köln 2 Jul 2025 (312 F 130/25): every source from page 8 onwards invented; conduct impedes fact-finding and damages the standing of the profession (§ 43a(3) BRAO). OLG Celle 29 Apr 2025 (5 U 1/25): pleading built on invented OLG citations. LG Frankfurt 25 Sep 2025 (2-13 S 56/24): fabricated BGH quotation disregarded and the Streitwert set at EUR 3,000. KG Berlin 20 Nov 2025 (17 WF 144/25): formal admonition. No costs order or disciplinary measure reported.
No ZPO/StPO rule, court rule or reported standing order requires parties or counsel to disclose or certify AI use in filings as of 4 September 2026. Courts have criticised undeclared AI use but imposed no disclosure duty.
No court guidance for self-represented parties using AI found as of 4 September 2026.
No German evidence rule or guidance on AI-generated or deepfake material found as of 4 September 2026; the free evaluation of evidence under § 286 ZPO applies.
No rule, opinion or reported case on billing for AI-assisted work under the RVG found as of 4 September 2026.
No federal or Land-level published guidance for judges on generative AI was located before the search budget ran out; German court AI work sits mainly in Land pilot projects. CEPEJ(2025)18Final applies to Germany as a Council of Europe member. Treat as not fully checked rather than confirmed empty.
Not fully checked — the WebSearch budget was exhausted before German court AI deployment policies (Land-level pilots, Bund-Länder digitalisation programmes) could be verified against official sources.
Not researched — no DIS (German Arbitration Institute) AI rule or note identified before the search budget was exhausted. The Ciarb and ICC texts in the international map are the practical reference.
Official documents recorded for Germany (2)
- Hinweise zum Einsatz von künstlicher Intelligenz (KI)
BRAK · revised 2024-12-01 · verified 2026-09-04
- Orientierungshilfe: Künstliche Intelligenz und Datenschutz
DSK · revised 2024-05-06 · verified 2026-09-04
Court incidents on the record in Germany
- Yichang District Court (Hubei)2026-07-21 Warning
Cite this page
SafeLegalAI Legal AI Regulation Tracker, "Germany" (updated 2026-09-04, verified 2026-09-04), https://safelegalai.com/regulation/country/de (accessed 2026-09-04). Data: CC BY 4.0.
SafeLegalAI is a research publication by Cognesio LLP, not a law firm. Nothing here is legal advice, and no lawyer–client relationship arises from reading it. Rules change; always check the official document linked on each record and take advice on your own situation. Researched and drafted with AI assistance; verified against primary sources and edited by Cognesio LLP. The linked official documents are the record — our summaries are not the law and are not legal advice.
- BRAK — Hinweise zum Einsatz von künstlicher Intelligenz (KI), Stand Dezember 2024 (PDF)
- BRAK newsroom — künstliche Intelligenz tag
- BRAK — KG ermahnt Anwältin wegen erfundener Urteile im Schriftsatz (KG, 20 Nov 2025, 17 WF 144/25)
- DSK — Orientierungshilfe Künstliche Intelligenz und Datenschutz, 6 May 2024 (PDF)
- § 43e BRAO — Inanspruchnahme von Dienstleistungen
- Anwaltsblatt (DAV) — Halluzinationen in Schriftsätzen