# What regulators say about AI agents in banking

Source: https://www.bankingnewsai.com/agentic-banking/regulation
Last updated: Oct 19, 2026

Every documented position on agentic AI, dated and quoted, with a link to the primary document.

| Date | Authority | Document | Position |
| --- | --- | --- | --- |
| Oct 15, 2026 | [HKMA](https://www.bankingnewsai.com/ai-regulation/hkma) | [HKMA "ART" Framework / AI supervisory guidance](https://www.bankingnewsai.com/ai-regulation/documents/hkma-art-framework-ai-guidance-2026) | Guidance 'recognises a progressive shift from "human-in-the-loop" to "human-on-the-loop" oversight' for agentic AI; governance for an AI agent should be tied to its intended purpose as a 'prerequisite for effective intervention', with resilience measures that may include a 'kill-switch' and a possible centralised registry of AI agents. |
| Oct 15, 2026 | [FSB](https://www.bankingnewsai.com/ai-regulation/fsb) | [FSB AI sound practices (final report, Oct 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-2026) | Twelve finalised sound practices with 'specific attention to generative and agentic AI'; Sound Practice 10 asks for extra human-oversight measures for highly autonomous agents; risks named include autonomous multi-step actions, agentic memory poisoning and AI-generated code defects. |
| Oct 7, 2026 | [MAS](https://www.bankingnewsai.com/ai-regulation/mas) | [MAS Guidelines on Artificial Intelligence Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/mas-guidelines-ai-risk-management-2026) | Final Guidelines on AI Risk Management apply to all forms of AI technology, 'including generative AI and AI agents'; institutions need board/senior-management oversight, an AI use-case inventory, materiality-based risk assessment and lifecycle controls proportionate to that materiality, with a dedicated cross-functional AI committee expected where overall AI risk exposure is material. |
| Sep 30, 2026 | [State of California](https://www.bankingnewsai.com/ai-regulation/california) | [SB 947](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-947-2026) | An employer may not rely solely on an automated decision system to discipline or terminate an employee; where it primarily relies on an ADS output, a human must corroborate the decision with other supporting information before it is finalized. |
| Sep 30, 2026 | [UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk) | [Bailey: Frontier AI and the Question of Governance (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-bailey-frontier-ai-governance-2026) | Frontier AI's recursive learning risks a 'closed loop in which the model progressively governs itself'; 'regulation is not, in my view, the right place to start' — rigorous testing and 'credible points of intervention' must come first, with frontier AI framed as a financial-stability issue through cyber risk and agentic trading and payments. |
| Sep 28, 2026 | [State of California](https://www.bankingnewsai.com/ai-regulation/california) | [AB 1609](https://www.bankingnewsai.com/ai-regulation/documents/ca-ab-1609-2026) | A large business may not represent a customer-service chatbot as human, must disclose clearly when AI could otherwise mislead a reasonable person, and must make a good-faith effort to connect a customer to a human agent within 15 minutes of request. |
| Sep 2, 2026 | [UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk) | [FCA multi-firm review: Frontier AI and cyber resilience (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fca-frontier-ai-cyber-resilience-2026) | Frontier AI accelerates vulnerability discovery faster than most firms can remediate; effectiveness depends on the surrounding 'harness' — governance, controls and human oversight — more than the model itself. Creates no new rule, guidance or regulatory expectation. |
| Aug 31, 2026 | [FSB](https://www.bankingnewsai.com/ai-regulation/fsb) | [FSB Chair's letter to G20 (Aug 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-chair-letter-g20-august-2026) | Frontier models show 'increasingly sophisticated autonomy and problem-solving abilities, as well as threat capabilities'; authorities should support safe model release and deployment as a priority. |
| Jul 31, 2026 | [EBA](https://www.bankingnewsai.com/ai-regulation/eba) | [ESA Statement on ICT risks from frontier AI models (JC 2026 25)](https://www.bankingnewsai.com/ai-regulation/documents/esas-jc-2026-25-frontier-ai-statement) | Keep continuously updated asset inventories including AI/ML components; move from periodic to continuous monitoring; management bodies own frontier-AI risk under DORA. |
| Jun 5, 2026 | [UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk) | [2026 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2026) | The first BoE/FCA survey to cover agentic AI explicitly; the 2024 baseline found 2% of use cases fully autonomous; the FPC asked for further work on agentic AI in payments and markets. |
| May 27, 2026 | [Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve) | [Cook: Opportunities and Risks of AI (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-cook-speech-ai-economy-financial-system-2026) | AI-driven trading risks correlated strategies, endogenous model collusion and market concentration; AI-generated code may outpace security review. |
| May 21, 2026 | [NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs) | [DFS Frontier AI Models Industry Letter (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-frontier-ai-models) | Put human review on AI-generated code before deployment; strengthen logging and alerting; shorten remediation timelines; map third-party dependencies. |
| May 14, 2026 | [Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act) | [SB 26-189](https://www.bankingnewsai.com/ai-regulation/documents/co-sb26-189) | From January 1, 2027, consequential automated decisions require notice, a 30-day explanation of an adverse outcome, and human review by trained staff with authority to override. |
| May 7, 2026 | [OCC](https://www.bankingnewsai.com/ai-regulation/occ) | [OCC Semiannual Risk Perspective, Spring 2026](https://www.bankingnewsai.com/ai-regulation/documents/occ-semiannual-risk-perspective-spring-2026) | Banks are taking a 'measured approach' to generative and agentic AI, limited to specific use cases with guardrails and human-in-the-loop accountability; lack of explainability makes governance essential before use expands to material financial decisions. |
| May 1, 2026 | [Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve) | [Bowman: AI in the Financial System (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-bowman-speech-ai-financial-system-2026) | Confirms the model-risk carve-out for generative and agentic AI; supervisors are assessing third-party risk expectations for vendor-provided AI; no pre-emptive AI-specific rulemaking. |
| Apr 17, 2026 | [Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve) | [SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2) | Generative and agentic AI models 'are novel and rapidly evolving' and 'are not within the scope of this guidance'; banks should use broader risk-management and governance practices for them. An interagency request for information on AI and model risk is promised. |
| Feb 24, 2026 | [ECB](https://www.bankingnewsai.com/ai-regulation/ecb) | [Machado speech: 'Technology is neutral, governance is not' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-technology-neutral-governance-speech-2026) | Generative and agentic AI adoption is accelerating in IT operations, legal and document analysis and front-line support; banks are accountable for outcomes regardless of how the technology performs. |
| Jan 12, 2026 | [NIST](https://www.bankingnewsai.com/ai-regulation/nist) | [CAISI RFI on AI agent security (2026)](https://www.bankingnewsai.com/ai-regulation/documents/nist-caisi-rfi-ai-agent-security-2026) | Defines AI agents as systems that plan and take autonomous actions affecting real-world systems; asks about indirect prompt injection, poisoning, specification gaming, and safeguards for constraining and monitoring agent access in production. |
| Nov 17, 2025 | [SEC](https://www.bankingnewsai.com/ai-regulation/sec) | [Division of Examinations FY2026 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2026) | Examiners will focus on 'recent advancements in AI' and test whether firms have policies to monitor and supervise AI used in fraud prevention, back-office operations, AML and trading. |
| Sep 25, 2025 | [EBA](https://www.bankingnewsai.com/ai-regulation/eba) | [EBA report: Rising application of AI in EU banking and payments (Sep 2025)](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-adoption-report-2025) | 55% of surveyed EU banks already use general-purpose or agentic AI in consumer-facing processes — fraud alerts, agent assist, self-service and digital or voice assistants. |
| Aug 14, 2025 | [NIST](https://www.bankingnewsai.com/ai-regulation/nist) | [NIST COSAiS control overlays](https://www.bankingnewsai.com/ai-regulation/documents/nist-cosais-control-overlays) | Plans SP 800-53 control overlays for single-agent and multi-agent AI systems; these are the least mature of the five overlays. |
| Jul 26, 2024 | [NIST](https://www.bankingnewsai.com/ai-regulation/nist) | [NIST AI 600-1 (Generative AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-600-1) | Names information-security risks — prompt injection, data poisoning, model extraction — and confabulation among twelve generative-AI risks, with actions mapped to the AI RMF. |
| Jul 12, 2024 | [EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act) | [Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689) | High-risk systems require human oversight (Art. 14) and automatic logging (Art. 12); deployers must ensure oversight, monitor operation and keep logs at least six months (Art. 26). |
| Jun 6, 2023 | [CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb) | [CFPB Chatbots in Consumer Finance (issue spotlight, 2023)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-chatbots-in-consumer-finance-2023) | Institutions remain responsible for timely, accurate answers and access to a human 'regardless of the processes or technologies used'. |

## Timeline

- Dec 2, 2027 — EU AI Act high-risk obligations (expected): Stand-alone Annex III systems, including credit scoring. ([Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689))
- Jan 1, 2027 — Colorado ADMT Act in force (expected): Notice, explanation and human review for consequential decisions. ([SB 26-189](https://www.bankingnewsai.com/ai-regulation/documents/co-sb26-189))
- Oct 15, 2026 — HKMA 'ART' Framework shifts oversight for AI agents: New supervisory guidance 'recognises a progressive shift from "human-in-the-loop" to "human-on-the-loop" oversight' as AI agents grow more capable, drawing on a GenA.I. Sandbox cohort where over 60% of use cases involved agents. ([HKMA "ART" Framework / AI supervisory guidance](https://www.bankingnewsai.com/ai-regulation/documents/hkma-art-framework-ai-guidance-2026))
- Oct 15, 2026 — FSB publishes final sound practices: The FSB published the final 'Sound Practices for Responsible Adoption of AI' report, finalising the 12 practices first proposed in June 2026, as a 2026 G20 deliverable. ([FSB AI sound practices (final report, Oct 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-2026))
- Oct 7, 2026 — MAS finalises AI risk management guidelines: Guidelines apply to all financial institutions, covering generative AI and AI agents; oversight expectations from Oct 2027, lifecycle controls from Oct 2028. ([MAS Guidelines on Artificial Intelligence Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/mas-guidelines-ai-risk-management-2026))
- Sep 30, 2026 — California SB 947 signed ('No Robo Bosses Act'): First US law barring sole reliance on an automated decision system for employee discipline or termination; human corroboration required from Jul 1, 2027. ([SB 947](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-947-2026))
- Sep 30, 2026 — Bailey: 'regulation is not the right place to start': BoE Governor ties frontier AI's closed-loop recursive learning to financial stability; prioritises testing and 'credible points of intervention' over rulemaking. ([Bailey: Frontier AI and the Question of Governance (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-bailey-frontier-ai-governance-2026))
- Sep 28, 2026 — California AB 1609 signed: Bars representing a customer-service chatbot as human from Jan 1, 2027; requires a route to a human agent within 15 minutes. ([AB 1609](https://www.bankingnewsai.com/ai-regulation/documents/ca-ab-1609-2026))
- Sep 2, 2026 — FCA frontier AI and cyber review: Vulnerability discovery outpaces remediation; the surrounding 'harness', not the model, decides outcomes. ([FCA multi-firm review: Frontier AI and cyber resilience (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fca-frontier-ai-cyber-resilience-2026))
- Aug 31, 2026 — FSB Chair to the G20: Frontier models' autonomy named as a stability concern. ([FSB Chair's letter to G20 (Aug 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-chair-letter-g20-august-2026))
- Jul 31, 2026 — ESAs on frontier AI under DORA: AI components in asset inventories; continuous monitoring. ([ESA Statement on ICT risks from frontier AI models (JC 2026 25)](https://www.bankingnewsai.com/ai-regulation/documents/esas-jc-2026-25-frontier-ai-statement))
- Jul 14, 2026 — HM Treasury adoption plan: 'Beyond isolated pilots' as government policy. ([HM Treasury Financial Services AI Adoption Plan (Jul 2026)](https://www.bankingnewsai.com/ai-regulation/documents/hmt-financial-services-ai-adoption-plan-2026))
- Jun 10, 2026 — FSB 12 sound practices: Human oversight scales with autonomy; agentic risks named. ([FSB AI sound practices (final report, Oct 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-2026))
- Jun 5, 2026 — UK survey asks about agents: First regulator dataset on agentic deployment, due late 2026. ([2026 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2026))
- May 21, 2026 — DFS frontier-AI letter: Human review of AI-generated code; logging; faster patching. ([DFS Frontier AI Models Industry Letter (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-frontier-ai-models))
- May 7, 2026 — OCC Risk Perspective: Banks 'measured' on agentic AI: guardrails, human in the loop. ([OCC Semiannual Risk Perspective, Spring 2026](https://www.bankingnewsai.com/ai-regulation/documents/occ-semiannual-risk-perspective-spring-2026))
- Apr 17, 2026 — SR 26-2 / Bulletin 2026-13: Model risk modernised; generative and agentic AI carved out. ([SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2))
- Feb 24, 2026 — ECB: 'governance is not neutral': 85%+ of large EU banks use AI; agentic accelerating. ([Machado speech: 'Technology is neutral, governance is not' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-technology-neutral-governance-speech-2026))
- Feb 19, 2026 — Treasury FS AI RMF: The sector's voluntary risk-management template. ([Treasury FS AI RMF and AI Lexicon (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fs-ai-rmf-and-ai-lexicon-2026))
- Jan 12, 2026 — NIST CAISI agent-security RFI: First federal workstream on AI agents as such. ([CAISI RFI on AI agent security (2026)](https://www.bankingnewsai.com/ai-regulation/documents/nist-caisi-rfi-ai-agent-security-2026))
- Dec 11, 2025 — FSOC AI Working Group: 'Harnessing AI' becomes a Council priority. ([FSOC 2025 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2025))
- Dec 10, 2025 — Basel third-party principles: Nth-party and concentration risk for AI and cloud. ([BCBS Third-Party Risk Principles (Dec 2025)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-third-party-risk-principles-2025))
- Sep 25, 2025 — EBA: 92% of EU banks deploy AI: 55% use general-purpose or agentic AI with consumers. ([EBA report: Rising application of AI in EU banking and payments (Sep 2025)](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-adoption-report-2025))
- Dec 19, 2024 — Treasury RFI report: Review each use case before deployment; regulators to clarify expectations. ([Treasury AI in Financial Services report (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-report-2024))
- Nov 14, 2024 — FSB: six AI vulnerabilities: Includes misaligned AI systems and provider concentration. ([FSB AI financial stability report (Nov 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-financial-stability-implications-of-ai-2024))
- Nov 13, 2024 — FinCEN deepfake alert: AI-generated identities at account opening. ([FIN-2024-Alert004 (Deepfake Media)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2024-deepfake-media))
- Jul 26, 2024 — NIST AI 600-1: Twelve generative-AI risks, 200+ actions. ([NIST AI 600-1 (Generative AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-600-1))
- Jul 12, 2024 — EU AI Act published: Credit scoring high-risk; logging and human oversight by design. ([Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689))
- Mar 27, 2024 — Treasury AI cyber and fraud report: Capability gap, fraud data divide, data supply chain. ([Treasury AI cybersecurity risks report (Mar 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-cybersecurity-risks-report-2024))
- Jun 7, 2023 — SR 23-4 third-party guidance: The framework that reaches vendor AI. ([SR 23-4](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-23-4))
- Jun 6, 2023 — CFPB on bank chatbots: Every top-10 bank runs one; duties apply 'regardless of technology'. ([CFPB Chatbots in Consumer Finance (issue spotlight, 2023)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-chatbots-in-consumer-finance-2023))
- Jan 26, 2023 — NIST AI RMF 1.0: Govern–Map–Measure–Manage becomes the shared vocabulary. ([NIST AI RMF 1.0](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-1))

---

Canonical page: https://www.bankingnewsai.com/agentic-banking/regulation
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (43 authorities, 244 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.