The Basel Committee has not issued AI-specific standards for banks — it monitors AI under its digitalisation-of-finance workstream and addresses the risks through existing prudential channels. Its May 2024 digitalisation report analyzed AI/ML among the technologies reshaping banking, and its 2025–26 work programme keeps AI under watch, including a June 2026 report on ICT risk-management practices and ongoing attention to AI's implications for bank cybersecurity.
| Full name | Basel Committee on Banking Supervision (BCBS) |
| Role | Global banking standard-setter |
| Force on banks | Non-binding standards |
| Applies to | Internationally active banks, via national implementation of Basel standards |
| Key document | Digitalisation of finance report (May 2024) |
| Latest move | June 2026 ICT risk-management report; AI monitoring continues in the 2025–26 work programme |
The Committee's posture is deliberate patience: rather than write AI rules that member jurisdictions would implement unevenly, it tracks how AI changes the risk profile of banks — operational resilience, third-party dependence, cyber threat, and strategic risk — and lets existing Basel standards (operational risk, outsourcing principles) carry the load.
Two documents anchor the current position: the May 2024 'Digitalisation of finance' report, which assessed AI/ML alongside APIs, DLT, and cloud, warning about new vulnerabilities and system-wide interconnection; and the June 2026 range-of-practices report on ICT risk management, produced under a work programme that explicitly monitors AI developments and their cybersecurity implications. If the FSB's 2026 sound-practices work hardens into expectations, the Basel Committee is the likely channel for turning them into supervisory standards.
| Date | Type | Document / event |
|---|---|---|
| Mar 16, 2022 | Guidance | Newsletter on artificial intelligence and machine learning. Supervisory observations on bank AI/ML use: explainability, governance, and resilience themes for internationally active banks. |
| May 16, 2024 | Report | Digitalisation of finance report. Assesses AI/ML, APIs, DLT, and cloud: benefits for banks and customers, but new vulnerabilities, greater operational-resilience demands, and potential system-wide risks from interconnection. |
| Jun 2, 2026 | Report | Range of practices report on ICT risk management. Analysis of global ICT risk-management practices under the 2025–26 work programme, which also monitors AI developments and their implications for bank cybersecurity. |
- Whether FSB sound practices on AI (final report Oct 2026) get translated into Basel supervisory expectations
- Treatment of AI third-party concentration under Basel outsourcing and operational-resilience principles
- Any move from monitoring to standard-setting as agentic AI enters core banking processes
Has the Basel Committee issued AI regulations?
No. The Committee monitors AI under its digitalisation workstream and addresses risks through existing standards on operational risk and resilience. Its most relevant publications are the 2022 AI/ML newsletter, the May 2024 digitalisation-of-finance report, and the June 2026 ICT risk-management report.
How does Basel Committee work reach actual banks?
Through national implementation: the Committee's 28 member jurisdictions translate Basel standards and guidance into local regulation. Its AI observations shape how the ECB, PRA, OCC, and other supervisors examine banks even without a dedicated AI standard.
Follow every move these regulators make
6 curated AI stories for banking executives · Every morning · Free
Subscribe to BankingNewsAI →