DE | Incident Report
Regulatory Action
2025-12-04
German Government Proposes GDPR Reform for AI Responsibility Shift
AI Model: Multiple models GDPRGermanyLiability
I. Executive Summary
The German Federal Government's 'Federal Modernization Agenda' suggests shifting data protection responsibility from users (lawyers/firms) to AI manufacturers.
II. Key Facts
- Proposal modeled after the Cyber Resilience Act (CRA). • Aims to facilitate law-compliant deployment of standard IT solutions. • Includes provisions for 'Regulatory Sandboxes' per Art. 57 of the AI Act.
III. Regulatory & Ethical Implications
Would lower the compliance burden for small law firms by placing liability on software providers.