As EU AI Act Nears, German Courts Send a Warning to Middle Managers: Silence Is Not an Option

From August 2026, EU AI Act imposes fines up to 13% of global turnover. Manager liability sharpened by German court ruling. NIS-2, pay transparency, and whistleblower cases add compliance pressure.

From August 2026, the European Union’s AI Act will start imposing sanctions on companies that cannot demonstrate robust AI governance. Fines can pile up from multiple regulatory frameworks — the GDPR, NIS-2, and the AI Act itself — and in extreme cases reach 13% of global annual turnover. Article 4 of the regulation, which requires AI literacy across all employees, is itself sanctionable. While high-risk AI systems get until December 2027 to comply, the clock is already ticking for every organisation that uses artificial intelligence.

The new liability landscape is not limited to AI. A recent judgment by the Arbeitsgericht Offenbach (Case No. 1 Ca 136/25) has sharpened the personal accountability of managers well below the C-suite. The case involved a chief legal officer who knew about irregularities in a precious-metal recycling operation — and did nothing. The company had to set aside provisions of €457.7 million, and the Frankfurt public prosecutor’s office is investigating for fraud and breach of trust. The labour court upheld the manager’s conduct-related dismissal as valid, ruling that inaction constitutes a serious breach of duty.

Crucially, these supervisory duties apply regardless of whether the manager holds a criminal-law guarantor position. Legal experts advise proactive documentation and regular compliance audits to avoid personal exposure.

Parallel to those developments, another legal time bomb has been ticking since the end of 2025 with the NIS-2 directive taking effect. It affects any company in regulated sectors with at least 50 employees or €10 million in revenue. Managers in those businesses must monitor risk-management measures and register with the Federal Office for Information Security (BSI).

On the pay-transparency front, Germany has missed a critical deadline. The EU Pay Transparency Directive was supposed to be transposed into national law by 7 June 2026, but the black-red coalition has yet to produce a completed bill. Labour lawyers warn that the legal vacuum raises the risk of discrimination lawsuits. The Federal Labour Court has already ruled that a single better-paid male colleague can create a suspicion of unequal treatment. A study from May 2026 found that 56% of employees intend to actively exercise their right to salary transparency.

Meanwhile, the courts are clarifying the boundaries of internal investigations. The Landesarbeitsgericht Niedersachsen confirmed in early 2025 that systematic employee surveys with a concrete investigative purpose are legal. And a ruling on 29 May 2026 made clear that the protection of Germany’s whistleblower act does not apply retroactively to reports made before the law came into force.

A more fundamental test is heading to the European Court of Justice. The Federal Court of Justice (BGH) has referred a question: can EU law prohibit national rules that allow companies to seek recourse from board members for fines? The background is a managing director who was held personally liable for his company’s participation in a stainless-steel cartel. The company had been fined €4.1 million. D&O insurance often covers such recourse claims, but the underlying fine itself remains excluded. The ECJ’s answer could have ripple effects well beyond cartel law — including into areas like the GDPR.