← Regulators
AI Act EU 2024/1689 Germany

Who is the BNetzA: Germany's AI Act market-surveillance authority

Germany chose its Federal Network Agency (Bundesnetzagentur, BNetzA) — the regulator that runs the power grid and telecoms — as its lead AI Act authority, not its data-protection commissioner. What the BNetzA is, the AI role set out in the draft KI-MIG law, and who runs it. Every fact sourced.

Published June 10, 2026 · Updated June 10, 2026 · 4 min read · 4 sources cited

When Germany picked the body to police the EU AI Act, it did not choose a data-protection authority or a new AI agency. It chose the Bundesnetzagentur (BNetzA) — the federal regulator already running the country’s electricity grid, gas, telecoms, post and railways. This is a profile of the body Germany is handing AI market surveillance to. Every fact is sourced.

Quick facts

  • Full name: Bundesnetzagentur für Elektrizität, Gas, Telekommunikation, Post und Eisenbahnen (BNetzA) — Federal Network Agency for Electricity, Gas, Telecommunications, Post and Railways
  • Established role: Germany’s federal network regulator — energy grids, telecoms (frequencies and market regulation), postal services and railways
  • New AI Act role: designated as the lead market-surveillance authority for the AI Act and the single point of contact for the EU AI Office, under Germany’s draft implementation law KI-MIG (DLA Piper)
  • Status caveat: the KI-MIG law was adopted by the Federal Cabinet as a government draft on 10 February 2026 but is not yet enacted — the AI role is set out in legislation still passing through parliament
  • President: Klaus Müller — in office as President of the BNetzA since 1 March 2022 (BNetzA)
  • Headquarters: Bonn
  • Website: bundesnetzagentur.de

What the BNetzA is

The BNetzA is Germany’s federal network and infrastructure regulator. Its long-standing job is the plumbing of the German economy: it regulates the electricity and gas grids (network expansion, security of supply), allocates telecom frequencies and oversees the telecoms market, and supervises postal and railway networks. It is a large, technically-minded market-surveillance body — and that is exactly why Germany handed it the AI Act.

The choice is deliberate. The EU AI Act is structured as product-safety and market-surveillance law — closer to how the EU regulates machines, medical devices and radio equipment than to data-protection law. So Germany routed it to the agency that already does market surveillance at scale, rather than to the BfDI, its data-protection commissioner, which keeps its separate GDPR remit.

The AI Act role (under the draft KI-MIG)

Under the draft AI Market Surveillance and Innovation Promotion Act (KI-MIG), adopted as a government draft on 10 February 2026, the BNetzA is set to become (DLA Piper):

  • the default market-surveillance authority for AI systems in Germany;
  • the single point of contact for the EU AI Office and the central complaints office;
  • the host of a Coordination and Competence Centre (KoKIVO) — pooling AI expertise centrally and making it available to other competent authorities;
  • the home of an independent three-member chamber (KI-Marktüberwachungskammer) for certain sensitive high-risk AI systems, operating with complete independence and reporting annually to the Bundestag.

Until KI-MIG is enacted, this architecture is legislative intent, not yet binding law — Germany missed the AI Act’s 2 August 2025 deadline for designating national authorities, and the BNetzA is running preparatory activities (including an AI Service Desk) in the meantime. See our news on Germany’s KI-MIG.

Leadership

  • President: Klaus Müller. He took office as President of the BNetzA on 1 March 2022 (BNetzA). Before the agency he led the Federation of German Consumer Organisations (vzbv). The President heads the agency across all its sectors, AI market surveillance included once KI-MIG takes effect.

What this means for you

  • If you provide or deploy AI in Germany: your market-surveillance authority will be the BNetzA, not the data-protection regulator. Watch the KI-MIG passage and the BNetzA’s AI Service Desk for the operational detail.
  • If you also process personal data: GDPR stays with the state DPAs (private sector) and the BfDI (federal bodies/telecom). An AI system handling personal data answers to both regimes at once.
  • If you track AI Act implementation: Germany’s model — a network regulator as AI authority — is a distinct choice from Spain’s dedicated AESIA or Italy’s split between AgID and ACN. The AI Act pillar compares the national approaches.

TL;DR

The BNetzA is Germany’s federal network regulator — energy, telecoms, post, railways — and the body Germany chose as its lead AI Act market-surveillance authority and single point of contact for the EU AI Office. That role is set out in the draft KI-MIG law (a government draft since 10 February 2026, not yet enacted), with a Coordination and Competence Centre (KoKIVO) and an independent market-surveillance chamber inside the agency. The data-protection commissioner BfDI was deliberately kept out of the lead AI role. Seat in Bonn, President Klaus Müller since 1 March 2022.

Sources