detect·deepfakesby Resemble AI
Deepfake law · Germany

Deepfake Law in Germany

Germany regulates deepfakes through the EU AI Act plus domestic provisions in the Criminal Code (StGB) covering defamation, identity, and non-consensual imagery. Among the most aggressive enforcement cultures in the EU.

Status
enacted
Jurisdiction
Germany
Effective
Feb 2026
Statute
EU AI Act + StGB §§ 33, 185, 201a, 238
AI Act transparencyNon-consensual imageryDefamation via manipulated mediaRight of personality
Updated Apr 16, 2026 · 2 min read

Germany regulates deepfakes through a layered framework: the EU AI Act at the European level, plus robust domestic provisions rooted in criminal law and constitutional personality rights. Enforcement culture is among the more aggressive in the EU.

Key provisions

EU AI Act (directly applicable). Article 50 labeling and provider-identifiability obligations apply from August 2026. Germany's federal office (Bundesnetzagentur) is a designated supervisory authority.

StGB § 201a — Violation of the highly personal sphere of life. Criminalizes creating or distributing imagery that violates a person's highly personal sphere — explicitly extended in 2021 amendments to cover AI-manipulated imagery. Penalties up to two years imprisonment.

StGB §§ 185, 186, 187 — Defamation offenses. Deepfakes that falsely attribute statements or actions to real persons are prosecutable under existing defamation law. Sentences up to five years for aggravated defamation.

StGB § 238 — Stalking. Deepfake-enabled harassment (repeated AI-generated imagery targeting a victim) has been prosecuted under stalking provisions.

Constitutional Right of Personality (Art. 1 & 2 GG). Germany's constitutional protection of personality grounds civil claims for unauthorized likeness or voice use. This is a foundational doctrine — stronger and older than AI-specific legislation — and applies to all forms of synthetic media depicting real persons.

Enforcement context

German prosecutors have been notably active:

  • Multiple convictions for non-consensual deepfake imagery under § 201a since 2022.
  • BKA (Federal Criminal Police Office) has dedicated digital investigation units with forensic deepfake capability.
  • State-level prosecutors in Nordrhein-Westfalen and Bayern have been particularly assertive.

Practical implications

For organizations operating in Germany:

  • Platforms: NetzDG (Network Enforcement Act) obligations combined with AI Act mean platform moderation pipelines must include deepfake detection for German-language content at scale.
  • Individuals: Criminal prosecution is a real possibility for creating non-consensual imagery. Civil claims under personality rights are practically accessible and frequently pursued.
  • Enterprises: GDPR plus personality rights plus AI Act — Germany is a multi-layer compliance jurisdiction.

Sources