Germany's AI compliance framework operates on three simultaneous layers: the EU AI Act sets the baseline, BDSG §26 applies a stricter necessity standard than GDPR's legitimate interest, and BetrVG §87(1) No. 6 gives works councils a veto right over any AI monitoring tool — regardless of where the deployment decision was made. The August 2, 2026 deadline for Annex III high-risk AI systems (including recruitment and performance management AI) is confirmed firm under the May 202