With the rapid advancement of Artificial Intelligence, AI systems can now create deceptively realistic faces, voices, and entire personalities—often without the knowledge or consent of those affected. Companies, platform operators, developers, and individuals face major challenges: reputation damage through deepfakes, unwanted commercial appearances, identity misuse, and exploitation of personal identity by third parties are increasingly common realities.
As a multidisciplinary German law firm, Schlun & Elseven Rechtsanwälte advises international companies and individuals on all aspects of personality rights law under German and EU legislation—particularly concerning new technologies like Artificial Intelligence. We ensure that your identity and rights remain protected in the digital age, whether defending against unauthorised use, deleting manipulated content, or ensuring legally compliant use of AI-generated content.
What is the General Personality Right and Where is it Legally Anchored?
The General Personality Right (Allgemeines Persönlichkeitsrecht) is a fundamental legal protection in Germany, derived from Article 2(1) in conjunction with Article 1(1) of the German Basic Law (Grundgesetz), even though it is not explicitly codified. This comprehensive right protects individual identity and personal development through various sub-rights that prevent unauthorised use of a person’s image, voice, or personal data.
Under German civil law, personality rights protection is anchored in Section 823(1) BGB (German Civil Code). However, not every interference automatically constitutes a violation – determining whether an intrusion is unlawful requires individual case assessment and careful balancing against other fundamental rights, such as freedom of expression, press freedom, or artistic freedom. For international businesses operating in Germany, understanding these protections is essential for AI compliance and avoiding costly legal disputes.
Key Aspects of German Personality Rights in AI Context
German personality rights encompass several specific protections that have gained critical importance with the rise of Artificial Intelligence. These rights determine how individuals and businesses can control the use of personal data, appearance, and other identifying characteristics in AI systems.
Right to Informational Self-Determination and Data Control
Every person has the fundamental right to determine which personal data is collected, processed, or shared. While no standalone law exists, the German Federal Constitutional Court established this right through its landmark “Census Judgment” (Volkszählungsurteil), deriving it from Basic Law Articles 2(1) and 1(1). The EU’s GDPR provides additional concrete requirements for personal data handling, making this particularly relevant for international companies using AI systems with German data.
Protection of Image and Voice Rights
Section 22 of the German Copyright Act (Kunsturhebergesetz) protects visual identity by prohibiting publication or distribution of photos or videos without consent. AI-generated images that realistically depict or imitate real people significantly increase violation risks, making this protection essential for both individuals and companies managing digital content.
Voice represents a characteristic personality trait with both personal and commercial value. Using or imitating someone’s voice without permission violates personality rights—including AI-generated voices that digitally reproduce real voices. This protection is increasingly important for businesses developing voice AI technologies.
Post-mortem Personality Rights Protection
Personality rights extend beyond death, with heirs able to assert certain protections for limited periods. This is particularly relevant when AI systems use deceased persons’ image or voice material. German legislators are developing new regulations, including the proposed Section 201b StGB, addressing “digital forgery” violations and anti-digital violence legislation to strengthen enforcement for affected parties.
AI-Related Violations and Legal Protection Mechanisms
Artificial Intelligence deployment offers significant opportunities but creates substantial risks for personality rights and data protection under German and EU law. International companies and individuals operating in Germany require effective legal protection mechanisms to address these challenges.
How can I get AI-generated content deleted?
When unauthorised AI-generated content such as deepfakes, voice clones, or synthetic images is published without consent, affected parties have legal rights to demand removal under German law. These claims extend beyond the immediate violator to include platform operators hosting the content and, in some instances, search engine operators ensuring content remains discoverable.
German law provides deletion rights for unlawful AI-generated content through multiple legal pathways. Claims can target content creators and platform operators once they gain knowledge of rights violations. While legal scholars debate whether deletion rights derive from Section 1004 BGB (analog application) or exclusively from GDPR Article 17, affected parties can definitively demand content removal. German courts continuously develop new standards, particularly regarding preventive filtering obligations for platforms hosting AI-generated content.
Legal Remedies and Compensation Options
Injunctive Relief: Prevents violators from future personality rights violations involving AI-generated content. This remedy applies to defamatory AI content but excludes protection against truthful factual statements. For international businesses, obtaining injunctive relief can prevent ongoing reputational damage from synthetic content campaigns.
Correction and Right of Reply: Correction claims encompass revocation, clarification, and supplementation of false AI-generated statements violating personality rights. Right of reply claims specifically apply to press-published AI content, allowing affected parties to publish responses equal to the contested AI-generated material’s prominence.
Damages and Monetary Compensation: Material damages from AI-generated content violations allow compensation claims under Sections 823 ff. BGB when demonstrable losses occur. Additionally, severe personality rights violations through AI manipulation may warrant monetary compensation for non-material damages when standard remedies prove insufficient.
GDPR Obligations for Companies Using AI Systems
Companies utilising AI systems must comply with GDPR requirements, ensuring that data subject rights such as access, deletion, and objection can be effectively implemented for AI applications. Since AI systems often involve complex data processing and model training, early technical and organisational planning is essential to avoid legal risks.
What information must companies provide about AI data processing?
Under GDPR Article 15, companies must provide detailed information upon request about which personal data is used in AI systems, for what purposes, and how long it remains stored. In the AI context, this proves technically challenging because AI models cannot reproduce training data in isolation. Structured data inventories and comprehensive logging systems should be implemented from the outset to meet these transparency obligations.
Deletion and Objection Rights in AI Context
Under GDPR Article 17, companies must delete personal data when the processing purpose lapses or when data subjects exercise their objection rights. For AI systems, this includes removing personal data from training datasets and, where technically feasible, from trained models. Data subjects can also object to AI processing at any time when it is based on legitimate interests, requiring companies to establish efficient review and implementation processes.
Frequently Asked Questions: AI and Personality Rights in Germany
Companies must ensure that AI deployment does not violate personality rights under German and EU law. This includes obtaining effective consent for using images, voices, or personal data in AI systems, as well as maintaining strict compliance with GDPR requirements for international operations in Germany.
Yes. The right to one’s own image under Section 22 KunstUrhG (German Copyright Act) protects against AI-generated representations that realistically depict real people. Without express consent, such deepfake content cannot be published or distributed, regardless of the AI technology used to create it.
Voice represents a protected personality characteristic under German law. AI-generated voices that imitate real people may only be used with explicit consent, particularly for commercial applications. This protection applies equally to sophisticated AI voice cloning technologies and simpler audio manipulation tools.
Primary liability rests with the content creator. However, platform operators must delete unlawful AI-generated content immediately upon gaining knowledge of violations. This creates dual responsibility ensuring comprehensive protection for affected parties.
Deletion must occur immediately upon gaining knowledge of violations. Delays can result in legal action including cease and desist letters, preliminary injunctions, and damage claims. German courts typically expect rapid response, particularly for clearly unlawful AI-generated content.
Beyond damage compensation claims, companies risk substantial fines under GDPR, significant reputational damage, and ongoing legal consequences. Companies should implement efficient processes to handle deletion requests promptly and maintain compliance with German personality rights law.
Practice Group: German AI Law
Practice Group:
German AI Law
Contact Schlun & Elseven Rechtsanwälte
Please use our online form to outline your request to us. After receiving your request, we will make a brief initial assessment based on the facts described and provide you with a cost offer. You can then decide whether you would like to engage our services.
