Germany vs Italy

Germany (tightening): Germany moved from having no national AI-specific statute to standing up enforcement machinery within months: the KI-MIG — reportedly in force from 29 July 2026 — names the Bundesnetzagentur as central AI market-surveillance authority and adds modest national fines, and some legal commentators argue it heightens executives' exposure under existing German corporate-law doctrine even though the bill's own text does not appear to create a new personal-liability clause. This represents a tightening in enforcement posture even though the underlying substantive rules remain the EU AI Act's rather than a new German AI statute. At the same time, the EU's 2026 'Digital Omnibus on AI' postponed most high-risk AI Act obligations to late 2027/2028, so the near-term practical effect of this tightening on regulated businesses remains limited for now. Its clearest legislative marker on file is "EU AI Act (as applied in Germany)" (in force). Italy (tightening): Italy moved first among EU states to legislate its own comprehensive national AI law rather than rely on the EU AI Act alone, and is now working through implementing decrees — due by October 2026 — that will help determine how strictly its national copyright and sector rules end up being enforced. From 2 August 2026 the EU's GPAI supervision and enforcement powers came into application on top of this national framework, and the Garante has continued an unusually active run of AI privacy enforcement, so the near-term direction is towards firmer, more operational oversight even as most high-risk AI Act obligations were pushed to 2027–2028. Its clearest legislative marker on file is "National AI Law (Law No. 132/2025)" (in force).

Germany: Rising — new enforcement law advancing and a dedicated Digital Ministry in place since 2025 (notable named developers: Aleph Alpha, DeepL). Italy: High — first EU state with its own comprehensive AI statute, framed as digital sovereignty (notable named developers: Generative Bionics, Axyon AI).

No shared "security"-tagged debate axis is recorded for both — on the evidence here, each is legislating its international posture on its own track rather than a shared one.

Where each government is actually spending its attention right now — not a statement of law, but of priority.

Germany tracks 5 government AI institutions; Italy tracks 3 government AI institutions. Raw counts aren't a maturity score by themselves — a single binding statute can matter more than five proposals — but they mark how much formal apparatus each country has stood up so far.

The gaps recorded for each country don't overlap — each is missing something different, which is a weaker signal than a shared gap but still worth reading as "not present as of the most recent research," not "definitively absent forever."