Share with your CISO
Germany’s EU AI Act workforce compliance obligation moved from paper to enforcement in February 2025, and regulators are now actively checking whether companies have documented, systematic AI competency programs for their staff. The law requires employers to prove workers can operate AI systems safely and within legal bounds. Organizations without that paper trail face real liability exposure. Separately, German courts have begun treating undisclosed AI use in formal processes as attempted deception, a precedent that travels well beyond academic settings.
What this means for your business
The enforcement clock started without most enterprises noticing. If your organization deploys AI tools to employees, whether a coding assistant, a contract review system, or a customer-facing chatbot, the EU AI Act’s competency requirement means you need documented proof that those employees received structured training. Awareness isn’t enough. “We rolled it out in Q4” isn’t enough. The companies that will survive a regulator’s inquiry are the ones who can produce dated training logs, competency assessments, and clear records of who approved what.
The Kassel court ruling on undisclosed AI use is worth treating as a liability template, not an academic curiosity. The logic the court applied, that using an undisclosed technical aid in a formal process constitutes deception, maps cleanly onto audit responses, regulatory submissions, and legal discovery. If an employee used an AI tool to draft a compliance filing and that fact wasn’t disclosed, you now have case law in a major EU jurisdiction suggesting that creates exposure. The documentation burden isn’t just about training your workforce; it’s about defining which processes require AI disclosure and enforcing that boundary consistently.
The companies most exposed here aren’t the ones that ignored AI; they’re the ones that encouraged adoption fast and formalized governance slow. If your AI deployment outpaced your policy infrastructure, the competency documentation gap is probably already there. The question to weigh isn’t whether to build the paper trail, it’s whether the cost of building it retroactively, under regulatory scrutiny, is higher than the cost of doing it now while no one is actively looking at your files.
Based on reporting from Germany Overhauls Construction Training and AI Compliance as New Workplace Rules Take Effect, originally published 2026-08-02 13:52:00.
