Interaction map

How the rules connect

• commission-guidance → aia
  Commission guidance explains prohibited practices and high-risk classification under the AI Act.
• kimig → aia
  The German law implements national functions required by the AI Act.
• aia → gdpr
  The AI Act reuses GDPR concepts and impact-assessment work.
• aia → authority:bafin
  The financial supervisor is market-surveillance authority for relevant high-risk systems.
• kimig → authority:bafin
  The KI-MIG names BaFin for AI systems connected with regulated financial activity.
• kimig → authority:bnetza
  The KI-MIG names the Bundesnetzagentur as the general German market-surveillance authority.
• kimig → dora
  The KI-MIG carves DORA financial entities out of specified cooperation criteria.
• marisk → aia
  MaRisk AT 4.3.4 expressly extends its model-governance requirements to automated models, technology-enabled innovation and AI. It does not make every MaRisk model an AI system; that classification is assessed under the AI Act definition.
• dora-rts-rmf → dora
  The delegated regulation specifies DORA's ICT risk-management framework.
• dora-rts-sub → dora
  The delegated regulation specifies subcontracting requirements under DORA.
• dora-its-register → dora
  The implementing regulation supplies templates for DORA's register of information.
• bafin-ai → dora
  BaFin explains how DORA ICT-risk duties apply to AI use.
• marisk → dora
  MaRisk AT 9 excludes ICT services governed by DORA's third-party regime.