# AI regulation in banking, by use case

Source: https://www.bankingnewsai.com/ai-regulation/by-use-case
Last updated: Oct 5, 2026

## Which rules govern AI credit scoring and underwriting?

Creditworthiness models are the most heavily regulated bank AI use case: explicitly high-risk under the EU AI Act, and subject to adverse-action, fair-lending and model-risk requirements in the US.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2) — Revised Guidance on Model Risk Management (In force)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/fed-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [SR 11-7](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-11-7) — Supervisory Guidance on Model Risk Management (Superseded)

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [OCC Bulletin 2026-13](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2026-13) — Model Risk Management: Revised Guidance (In force)
- [Acting Comptroller Hood, 'AI in Financial Services' (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/occ-hood-responsible-ai-speech-2025) — Remarks by Acting Comptroller Rodney E. Hood at the National Fair Housing Alliance's Responsible AI Symposium: 'AI in Financial Services' (Final)
- [2021 Interagency AI RFI (OCC Bulletin 2021-17)](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-17-ai-rfi) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [OCC Bulletin 2011-12](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2011-12) — Sound Practices for Model Risk Management: Supervisory Guidance on Model Risk Management (Superseded)
- [OCC Bulletin 1997-24](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-1997-24) — Credit Scoring Models: Examination Guidance (Superseded)

**[FDIC](https://www.bankingnewsai.com/ai-regulation/fdic)**

- [FDIC FIL-15-2026](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-15-2026) — Agencies Revise the Interagency Model Risk Management Guidance (In force)
- [FDIC House testimony on AI and innovation (Mar 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-innovation-speed-of-markets-2026) — Innovation at the Speed of Markets: How Regulators Keep Pace with Technology (Final)
- [FDIC FIL-20-2021](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-20-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[NCUA](https://www.bankingnewsai.com/ai-regulation/ncua)**

- [Hauptman Senate testimony (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-hauptman-senate-testimony-2026) — Written Testimony of NCUA Chairman Kyle S. Hauptman before the U.S. Senate Committee on Banking, Housing, and Urban Affairs (Final)
- [NCUA Financial Innovation Rule (2023)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-financial-innovation-rule-2023) — Financial Innovation: Loan Participations, Eligible Obligations, and Notes of Liquidating Credit Unions (final rule) (In force)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/ncua-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb)**

- [Regulation B final rule on disparate impact (April 2026)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-regulation-b-final-rule-2026) — Equal Credit Opportunity Act (Regulation B) — final rule amending disparate impact, discouragement and special purpose credit program provisions (In force)
- [CFPB withdrawal of 67 guidance documents (May 2025)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-guidance-withdrawal-2025) — Interpretive Rules, Policy Statements, and Advisory Opinions; Withdrawal (In force)
- [CFPB comment to Treasury on AI in financial services (2024)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-comment-treasury-ai-rfi-2024) — CFPB Comment on Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)
- [CFPB Circular 2023-03](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-circular-2023-03) — Adverse action notification requirements and the proper use of the CFPB's sample forms provided in Regulation B (Withdrawn)
- [Joint Statement on Automated Systems (CFPB, DOJ, EEOC, FTC)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-joint-statement-automated-systems-2023) — Joint Statement on Enforcement Efforts Against Discrimination and Bias in Automated Systems (Final)
- [CFPB Circular 2022-03](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-circular-2022-03) — Adverse action notification requirements in connection with credit decisions based on complex algorithms (Withdrawn)
- [CFPB Innovation Spotlight on AI/ML adverse action notices (2020)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-innovation-spotlight-ai-ml-adverse-action-2020) — Innovation spotlight: Providing adverse action notices when using AI/ML models (Final)
- [ECOA / Regulation B adverse action (15 U.S.C. 1691(d); 12 CFR 1002.9)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-ecoa-regulation-b-adverse-action) — Equal Credit Opportunity Act section 701(d) and Regulation B section 1002.9 — notification of adverse action and statement of specific reasons (In force)
- [FCRA adverse action and credit-score disclosures (15 U.S.C. 1681m, 1681g(f))](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-fcra-adverse-action-key-factors) — Fair Credit Reporting Act — adverse-action notices based on consumer reports and disclosure of key factors affecting credit scores (In force)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [Treasury AI in Financial Services report (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-report-2024) — Artificial Intelligence in Financial Services — Report on the Uses, Opportunities, and Risks of AI in the Financial Services Sector (Final)
- [Treasury AI RFI (June 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-rfi-2024) — Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)

**[White House](https://www.bankingnewsai.com/ai-regulation/white-house)**

- [EO 14365](https://www.bankingnewsai.com/ai-regulation/documents/eo-14365) — Ensuring a National Policy Framework for Artificial Intelligence (In force)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [Insurance Circular Letter No. 7 (2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-insurance-circular-letter-2024-07) — Use of Artificial Intelligence Systems and External Consumer Data and Information Sources in Insurance Underwriting and Pricing (In force)
- [DFS Proposed AI Insurance Circular Letter (Jan 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-proposed-insurance-circular-letter-2024-01) — Proposed Insurance Circular Letter on the Use of Artificial Intelligence Systems and External Consumer Data and Information Sources in Insurance Underwriting and Pricing (Superseded)

**[Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act)**

- [Colorado AG proposed ADMT rules](https://www.bankingnewsai.com/ai-regulation/documents/co-ag-admt-proposed-rules-2026) — Proposed Automated Decision-Making Technology and Conversational AI Service Rules (Notice of Rulemaking Hearing) (Comment period open)
- [SB 26-189](https://www.bankingnewsai.com/ai-regulation/documents/co-sb26-189) — Automated Decision-Making Technology Act (repeal and reenactment of the Colorado AI Act) (Final · applies from Jan 1, 2027)
- [SB 25B-004](https://www.bankingnewsai.com/ai-regulation/documents/co-sb25b-004) — Artificial Intelligence Consumer Protections — delay of effective date to June 30, 2026 (Superseded)
- [SB 24-205](https://www.bankingnewsai.com/ai-regulation/documents/co-sb24-205) — Consumer Protections for Artificial Intelligence (Colorado Artificial Intelligence Act) (Superseded)

**[California CPPA](https://www.bankingnewsai.com/ai-regulation/california)**

- [CPPA ADMT, risk-assessment and cybersecurity-audit regulations](https://www.bankingnewsai.com/ai-regulation/documents/ca-cppa-admt-risk-cyber-regulations-2025) — CCPA Updates, Cybersecurity Audits, Risk Assessments, Automated Decisionmaking Technology, and Insurance Companies — approved regulation text (11 CCR Division 6) (In force)
- [California AG legal advisory on AI (Jan 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ca-ag-legal-advisory-ai-2025) — Legal Advisory: Application of Existing California Laws to Artificial Intelligence (Final)
- [Cal. Civ. Code §1798.145 (CCPA exemptions, incl. GLBA data)](https://www.bankingnewsai.com/ai-regulation/documents/ca-civil-code-1798-145) — California Consumer Privacy Act — exemptions, including the data-level exemption for information subject to the Gramm-Leach-Bliley Act and the California Financial Information Privacy Act (Civil Code §1798.145) (In force)

**[Massachusetts AG](https://www.bankingnewsai.com/ai-regulation/massachusetts)**

- [Massachusetts AG Earnest Operations settlement (July 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-earnest-settlement-2025) — Assurance of Discontinuance: In the matter of Earnest Operations LLC (Massachusetts Attorney General, announced July 10, 2025) (In force)
- [Massachusetts AG AI Advisory (April 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-ai-advisory-2024) — Attorney General Advisory on the Application of the Commonwealth's Consumer Protection, Civil Rights, and Data Privacy Laws to Artificial Intelligence (In force)

**[New Jersey DCR](https://www.bankingnewsai.com/ai-regulation/new-jersey)**

- [NJ DCR Algorithmic Discrimination Guidance (January 2025)](https://www.bankingnewsai.com/ai-regulation/documents/nj-dcr-algorithmic-discrimination-guidance-2025) — Guidance on Algorithmic Discrimination and the New Jersey Law Against Discrimination (In force)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [Regulation (EU) 2026/1744 (Digital Omnibus on AI)](https://www.bankingnewsai.com/ai-regulation/documents/eu-digital-omnibus-ai-regulation-2026-1744) — Regulation (EU) 2026/1744 amending Regulation (EU) 2024/1689 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) (In force)
- [Draft Commission guidelines on high-risk classification](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-draft-guidelines-high-risk-classification-2026) — Draft Commission Guidelines on the classification of high-risk AI systems under Article 6 of the AI Act (Proposed · comment period closed)
- [EBA factsheet on the AI Act](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-banking-payments-2025) — AI Act: implications for the EU banking and payments sector (EBA factsheet) (Final)
- [Commission guidelines on the AI system definition](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-system-definition-2025) — Commission Guidelines on the definition of an artificial intelligence system established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [Commission guidelines on prohibited AI practices](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-prohibited-ai-practices-2025) — Commission Guidelines on prohibited artificial intelligence practices established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689) — Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) (In force)
- [Consumer Credit Directive (EU) 2023/2225](https://www.bankingnewsai.com/ai-regulation/documents/eu-consumer-credit-directive-2023-2225) — Directive (EU) 2023/2225 on credit agreements for consumers (CCD2) — automated creditworthiness assessment provisions (Final · applies from Nov 20, 2026)
- [GDPR Article 22](https://www.bankingnewsai.com/ai-regulation/documents/eu-gdpr-article-22-automated-decision-making) — Regulation (EU) 2016/679 (GDPR), Article 22 — Automated individual decision-making, including profiling (In force)

**[ECB](https://www.bankingnewsai.com/ai-regulation/ecb)**

- [Supervision Newsletter: AI use cases for credit scoring and fraud detection (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-supervision-newsletter-ai-credit-scoring-fraud-2025) — AI's impact on banking: use cases for credit scoring and fraud detection (Supervision Newsletter, November 2025) (Final)
- [SSM supervisory priorities 2026–28](https://www.bankingnewsai.com/ai-regulation/documents/ecb-ssm-supervisory-priorities-2026-28) — ECB Banking Supervision: SSM supervisory priorities for 2026–28 (In force)
- [ECB Guide to internal models (July 2025, ML section)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-guide-to-internal-models-2025-machine-learning) — Revised ECB Guide to internal models — expectations for machine-learning techniques in internal models (In force)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [EBA factsheet: AI Act implications for the EU banking and payments sector](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-2025) — AI Act: implications for the EU banking and payments sector (Final)
- [EBA Chair letter to the Commission on the AI Act mapping exercise (EBA/2025/D/5384)](https://www.bankingnewsai.com/ai-regulation/documents/eba-2025-d-5384-ai-act-mapping-letter) — Outcome of EBA's AI Act mapping exercise — letter to DG FISMA and DG CNECT (Final)
- [EBA Work Programme 2026](https://www.bankingnewsai.com/ai-regulation/documents/eba-work-programme-2026) — EBA Work Programme 2026 — AI Act implementation and digital-finance priorities (In force)
- [EBA report: Rising application of AI in EU banking and payments (Sep 2025)](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-adoption-report-2025) — Rising application of AI in EU banking and payments sector (Final)
- [EBA follow-up report on machine learning for IRB models (EBA/REP/2023/28)](https://www.bankingnewsai.com/ai-regulation/documents/eba-rep-2023-28-ml-irb-follow-up) — Machine Learning for IRB Models — Follow-up report from the consultation on the Discussion paper on machine learning for IRB models (Final)
- [EBA discussion paper on machine learning for IRB models](https://www.bankingnewsai.com/ai-regulation/documents/eba-ml-irb-discussion-paper-2021) — Discussion Paper on machine learning for IRB models (Superseded)
- [EBA Guidelines on loan origination and monitoring (EBA/GL/2020/06)](https://www.bankingnewsai.com/ai-regulation/documents/eba-gl-2020-06-loan-origination-monitoring) — Guidelines on loan origination and monitoring (In force)
- [EBA Report on Big Data and Advanced Analytics (EBA/REP/2020/01)](https://www.bankingnewsai.com/ai-regulation/documents/eba-rep-2020-01-big-data-advanced-analytics) — Report on Big Data and Advanced Analytics (Final)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [PRA AI/ML model-risk roundtable (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/pra-mrm-roundtable-ai-ml-2025) — The PRA holds model risk management roundtable on artificial intelligence and machine learning technologies (Final)
- [FCA FS25/5](https://www.bankingnewsai.com/ai-regulation/documents/fca-fs25-5-ai-live-testing) — FS25/5: AI Live Testing (Final)
- [Data (Use and Access) Act 2025](https://www.bankingnewsai.com/ai-regulation/documents/uk-data-use-and-access-act-2025) — Data (Use and Access) Act 2025 (2025 c. 18) — automated decision-making reform, section 80 and new UK GDPR Articles 22A to 22D (In force)
- [FPC Financial Stability in Focus: AI (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/boe-fpc-fsif-ai-financial-system-2025) — Financial Stability in Focus: Artificial intelligence in the financial system (Final)
- [FCA AI Update (Apr 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fca-ai-update-2024) — Artificial Intelligence (AI) update – further to the Government's response to the AI White Paper (Final)
- [PRA SS1/23](https://www.bankingnewsai.com/ai-regulation/documents/pra-ss1-23-model-risk-management) — Supervisory Statement 1/23: Model risk management principles for banks (In force)
- [ICO Guidance on AI and data protection](https://www.bankingnewsai.com/ai-regulation/documents/ico-guidance-ai-data-protection) — Guidance on AI and data protection (ICO) (In force)
- [FCA PS22/9 Consumer Duty](https://www.bankingnewsai.com/ai-regulation/documents/fca-ps22-9-consumer-duty) — PS22/9: A new Consumer Duty — Feedback to CP21/36 and final rules (with FG22/5 guidance) (In force)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin/Bundesbank ML in risk models results](https://www.bankingnewsai.com/ai-regulation/documents/bafin-bundesbank-ml-risk-models-2022) — Machine learning in risk models – Characteristics and supervisory priorities: Responses to the consultation paper (Final)
- [BaFin BDAI principles paper](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-principles-2021) — Big data and artificial intelligence: Principles for the use of algorithms in decision-making processes (Final)

**[ACPR](https://www.bankingnewsai.com/ai-regulation/acpr)**

- [ACPR discussion document on AI governance](https://www.bankingnewsai.com/ai-regulation/documents/acpr-governance-ai-finance-2020) — Governance of Artificial Intelligence in Finance (Final)

**[DNB / AFM](https://www.bankingnewsai.com/ai-regulation/dnb)**

- [AFM and DNB report on the impact of AI](https://www.bankingnewsai.com/ai-regulation/documents/afm-dnb-ai-impact-report-2024) — The impact of AI on the financial sector and supervision (Final)

**[OSFI](https://www.bankingnewsai.com/ai-regulation/osfi)**

- [OSFI Guideline E-23](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-e-23) — Guideline E-23 – Model Risk Management (2027) (Final · applies from May 1, 2027)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS FEAT Principles](https://www.bankingnewsai.com/ai-regulation/documents/mas-feat-principles-2018) — Principles to Promote Fairness, Ethics, Accountability and Transparency (FEAT) in the Use of Artificial Intelligence and Data Analytics in Singapore's Financial Sector (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA GenA.I. Sandbox++ joint circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-plus-plus-2026) — Joint Circular on the Expansion of Generative Artificial Intelligence Sandbox (HKMA, SFC, Insurance Authority and MPFA, 5 March 2026) (In force)
- [HKMA BDAI consumer protection principles](https://www.bankingnewsai.com/ai-regulation/documents/hkma-bdai-consumer-protection-2019) — Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence by Authorized Institutions (HKMA circular, 5 November 2019) (In force)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [ASIC REP 798](https://www.bankingnewsai.com/ai-regulation/documents/asic-rep-798) — REP 798 Beware the gap: Governance arrangements in the face of AI innovation (Final)

**[RBI](https://www.bankingnewsai.com/ai-regulation/rbi)**

- [RBI draft Guidance on Regulatory Principles for Model Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risk-management-guidance-2026) — Guidance on Regulatory Principles for Model Risk Management, 2026 (draft released for public comments) (Proposed · comment period closed)
- [RBI draft circular on Regulatory Principles for Management of Model Risks in Credit](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risks-credit-circular-2024) — Regulatory Principles for Management of Model Risks in Credit (draft circular for comments) (Proposed · comment period closed)

**[FSB](https://www.bankingnewsai.com/ai-regulation/fsb)**

- [FSB 2017 AI/ML report](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-ml-financial-services-2017) — Artificial intelligence and machine learning in financial services: Market developments and financial stability implications (Final)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS Digitalisation of finance report (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-digitalisation-of-finance-2024) — Digitalisation of finance (Final)

## Which rules apply to AI bias and fair lending?

Anti-discrimination law applies regardless of how a decision was made. Regulators have said 'the algorithm did it' is not a defence.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/fed-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [Acting Comptroller Hood, 'AI in Financial Services' (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/occ-hood-responsible-ai-speech-2025) — Remarks by Acting Comptroller Rodney E. Hood at the National Fair Housing Alliance's Responsible AI Symposium: 'AI in Financial Services' (Final)
- [2021 Interagency AI RFI (OCC Bulletin 2021-17)](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-17-ai-rfi) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [OCC Bulletin 1997-24](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-1997-24) — Credit Scoring Models: Examination Guidance (Superseded)

**[NCUA](https://www.bankingnewsai.com/ai-regulation/ncua)**

- [NCUA Letter 26-CU-01](https://www.bankingnewsai.com/ai-regulation/documents/ncua-letter-26-cu-01) — NCUA's 2026 Supervisory Priorities (In force)
- [NCUA testimony to House AI Task Force (2022)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-ai-task-force-testimony-2022) — Written Testimony of Kelly Lay, Director of the Office of Examination and Insurance, before the House Financial Services Task Force on Artificial Intelligence (Final)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/ncua-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb)**

- [Regulation B final rule on disparate impact (April 2026)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-regulation-b-final-rule-2026) — Equal Credit Opportunity Act (Regulation B) — final rule amending disparate impact, discouragement and special purpose credit program provisions (In force)
- [CFPB withdrawal of 67 guidance documents (May 2025)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-guidance-withdrawal-2025) — Interpretive Rules, Policy Statements, and Advisory Opinions; Withdrawal (In force)
- [CFPB comment to Treasury on AI in financial services (2024)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-comment-treasury-ai-rfi-2024) — CFPB Comment on Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)
- [CFPB Circular 2023-03](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-circular-2023-03) — Adverse action notification requirements and the proper use of the CFPB's sample forms provided in Regulation B (Withdrawn)
- [Joint Statement on Automated Systems (CFPB, DOJ, EEOC, FTC)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-joint-statement-automated-systems-2023) — Joint Statement on Enforcement Efforts Against Discrimination and Bias in Automated Systems (Final)
- [CFPB Circular 2022-03](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-circular-2022-03) — Adverse action notification requirements in connection with credit decisions based on complex algorithms (Withdrawn)
- [CFPB Innovation Spotlight on AI/ML adverse action notices (2020)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-innovation-spotlight-ai-ml-adverse-action-2020) — Innovation spotlight: Providing adverse action notices when using AI/ML models (Final)
- [ECOA / Regulation B adverse action (15 U.S.C. 1691(d); 12 CFR 1002.9)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-ecoa-regulation-b-adverse-action) — Equal Credit Opportunity Act section 701(d) and Regulation B section 1002.9 — notification of adverse action and statement of specific reasons (In force)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [Treasury AI in Financial Services report (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-report-2024) — Artificial Intelligence in Financial Services — Report on the Uses, Opportunities, and Risks of AI in the Financial Services Sector (Final)
- [FSOC 2024 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2024) — Financial Stability Oversight Council 2024 Annual Report — Section 3.3.3, The Use of Artificial Intelligence in Financial Services (Superseded)
- [Treasury AI RFI (June 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-rfi-2024) — Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)

**[White House](https://www.bankingnewsai.com/ai-regulation/white-house)**

- [EO 14365](https://www.bankingnewsai.com/ai-regulation/documents/eo-14365) — Ensuring a National Policy Framework for Artificial Intelligence (In force)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [Asrow Assembly Statement on AI in Insurance (Dec 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-asrow-assembly-statement-2025-12-16-ai-insurance) — Statement by DFS Acting Superintendent Kaitlin Asrow at the NYS Assembly Hearing on the Use of Artificial Intelligence Systems in Insurance Underwriting and Pricing (Final)
- [Insurance Circular Letter No. 7 (2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-insurance-circular-letter-2024-07) — Use of Artificial Intelligence Systems and External Consumer Data and Information Sources in Insurance Underwriting and Pricing (In force)
- [DFS Proposed AI Insurance Circular Letter (Jan 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-proposed-insurance-circular-letter-2024-01) — Proposed Insurance Circular Letter on the Use of Artificial Intelligence Systems and External Consumer Data and Information Sources in Insurance Underwriting and Pricing (Superseded)

**[NYC DCWP](https://www.bankingnewsai.com/ai-regulation/new-york-city)**

- [NYC Local Law 144 (AEDT)](https://www.bankingnewsai.com/ai-regulation/documents/nyc-local-law-144) — A Local Law to amend the administrative code of the city of New York, in relation to automated employment decision tools (Local Law 144 of 2021) and DCWP final rule (In force)

**[Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act)**

- [Colorado AG proposed ADMT rules](https://www.bankingnewsai.com/ai-regulation/documents/co-ag-admt-proposed-rules-2026) — Proposed Automated Decision-Making Technology and Conversational AI Service Rules (Notice of Rulemaking Hearing) (Comment period open)
- [SB 26-189](https://www.bankingnewsai.com/ai-regulation/documents/co-sb26-189) — Automated Decision-Making Technology Act (repeal and reenactment of the Colorado AI Act) (Final · applies from Jan 1, 2027)
- [SB 24-205](https://www.bankingnewsai.com/ai-regulation/documents/co-sb24-205) — Consumer Protections for Artificial Intelligence (Colorado Artificial Intelligence Act) (Superseded)
- [Colorado SB 21-169 and Regulation 10-1-1](https://www.bankingnewsai.com/ai-regulation/documents/co-sb21-169) — Protecting Consumers from Unfair Discrimination in Insurance Practices (SB21-169, C.R.S. § 10-3-1104.9) and Colorado Insurance Regulation 10-1-1 (3 CCR 702-10) (In force)

**[California CPPA](https://www.bankingnewsai.com/ai-regulation/california)**

- [CPPA ADMT, risk-assessment and cybersecurity-audit regulations](https://www.bankingnewsai.com/ai-regulation/documents/ca-cppa-admt-risk-cyber-regulations-2025) — CCPA Updates, Cybersecurity Audits, Risk Assessments, Automated Decisionmaking Technology, and Insurance Companies — approved regulation text (11 CCR Division 6) (In force)
- [California AG legal advisory on AI (Jan 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ca-ag-legal-advisory-ai-2025) — Legal Advisory: Application of Existing California Laws to Artificial Intelligence (Final)

**[Texas AG](https://www.bankingnewsai.com/ai-regulation/texas)**

- [Texas TRAIGA (HB 149)](https://www.bankingnewsai.com/ai-regulation/documents/tx-hb-149-traiga) — Texas Responsible Artificial Intelligence Governance Act (H.B. 149, 89th Legislature) (In force)

**[Illinois IDHR](https://www.bankingnewsai.com/ai-regulation/illinois)**

- [Illinois HB 3773 (P.A. 103-0804)](https://www.bankingnewsai.com/ai-regulation/documents/il-hb-3773) — Illinois Human Rights Act amendments on artificial intelligence in employment (H.B. 3773, Public Act 103-0804) (In force)

**[Massachusetts AG](https://www.bankingnewsai.com/ai-regulation/massachusetts)**

- [Massachusetts AG Earnest Operations settlement (July 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-earnest-settlement-2025) — Assurance of Discontinuance: In the matter of Earnest Operations LLC (Massachusetts Attorney General, announced July 10, 2025) (In force)
- [Massachusetts AG AI Advisory (April 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-ai-advisory-2024) — Attorney General Advisory on the Application of the Commonwealth's Consumer Protection, Civil Rights, and Data Privacy Laws to Artificial Intelligence (In force)

**[New Jersey DCR](https://www.bankingnewsai.com/ai-regulation/new-jersey)**

- [NJ DCR Algorithmic Discrimination Guidance (January 2025)](https://www.bankingnewsai.com/ai-regulation/documents/nj-dcr-algorithmic-discrimination-guidance-2025) — Guidance on Algorithmic Discrimination and the New Jersey Law Against Discrimination (In force)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [Commission guidelines on prohibited AI practices](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-prohibited-ai-practices-2025) — Commission Guidelines on prohibited artificial intelligence practices established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689) — Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) (In force)
- [Consumer Credit Directive (EU) 2023/2225](https://www.bankingnewsai.com/ai-regulation/documents/eu-consumer-credit-directive-2023-2225) — Directive (EU) 2023/2225 on credit agreements for consumers (CCD2) — automated creditworthiness assessment provisions (Final · applies from Nov 20, 2026)
- [GDPR Article 22](https://www.bankingnewsai.com/ai-regulation/documents/eu-gdpr-article-22-automated-decision-making) — Regulation (EU) 2016/679 (GDPR), Article 22 — Automated individual decision-making, including profiling (In force)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [EBA factsheet: AI Act implications for the EU banking and payments sector](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-2025) — AI Act: implications for the EU banking and payments sector (Final)
- [EBA Guidelines on loan origination and monitoring (EBA/GL/2020/06)](https://www.bankingnewsai.com/ai-regulation/documents/eba-gl-2020-06-loan-origination-monitoring) — Guidelines on loan origination and monitoring (In force)

**[EIOPA](https://www.bankingnewsai.com/ai-regulation/eiopa)**

- [EIOPA Opinion on AI governance and risk management (EIOPA-BoS-25-360)](https://www.bankingnewsai.com/ai-regulation/documents/eiopa-opinion-ai-governance-2025) — EIOPA-BoS-25-360 Opinion on AI governance and risk management (In force)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [FCA AI Update (Apr 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fca-ai-update-2024) — Artificial Intelligence (AI) update – further to the Government's response to the AI White Paper (Final)
- [FS2/23](https://www.bankingnewsai.com/ai-regulation/documents/uk-fs2-23-ai-and-machine-learning) — Feedback Statement 2/23: Artificial Intelligence and Machine Learning (Final)
- [DP5/22](https://www.bankingnewsai.com/ai-regulation/documents/uk-dp5-22-ai-and-machine-learning) — Discussion Paper 5/22: Artificial Intelligence and Machine Learning (Final)
- [FCA PS22/9 Consumer Duty](https://www.bankingnewsai.com/ai-regulation/documents/fca-ps22-9-consumer-duty) — PS22/9: A new Consumer Duty — Feedback to CP21/36 and final rules (with FG22/5 guidance) (In force)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin BDAI principles paper](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-principles-2021) — Big data and artificial intelligence: Principles for the use of algorithms in decision-making processes (Final)

**[ACPR](https://www.bankingnewsai.com/ai-regulation/acpr)**

- [ACPR discussion document on AI governance](https://www.bankingnewsai.com/ai-regulation/documents/acpr-governance-ai-finance-2020) — Governance of Artificial Intelligence in Finance (Final)

**[DNB / AFM](https://www.bankingnewsai.com/ai-regulation/dnb)**

- [AFM and DNB report on the impact of AI](https://www.bankingnewsai.com/ai-regulation/documents/afm-dnb-ai-impact-report-2024) — The impact of AI on the financial sector and supervision (Final)
- [DNB SAFEST AI principles](https://www.bankingnewsai.com/ai-regulation/documents/dnb-safest-ai-principles-2019) — General principles for the use of Artificial Intelligence in the financial sector (Final)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS Consultation Paper P017-2025 (AI Risk Management Guidelines)](https://www.bankingnewsai.com/ai-regulation/documents/mas-consultation-ai-risk-management-guidelines-2025) — Consultation Paper on Guidelines on Artificial Intelligence Risk Management (Proposed · comment period closed)
- [MAS FEAT Principles](https://www.bankingnewsai.com/ai-regulation/documents/mas-feat-principles-2018) — Principles to Promote Fairness, Ethics, Accountability and Transparency (FEAT) in the Use of Artificial Intelligence and Data Analytics in Singapore's Financial Sector (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA GenAI consumer protection circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-consumer-protection-2024) — Consumer Protection in respect of Use of Generative Artificial Intelligence (HKMA circular, 19 August 2024) (In force)
- [HKMA BDAI consumer protection principles](https://www.bankingnewsai.com/ai-regulation/documents/hkma-bdai-consumer-protection-2019) — Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence by Authorized Institutions (HKMA circular, 5 November 2019) (In force)
- [HKMA High-level Principles on Artificial Intelligence](https://www.bankingnewsai.com/ai-regulation/documents/hkma-high-level-principles-ai-2019) — High-level Principles on Artificial Intelligence (HKMA circular to all Authorized Institutions, 1 November 2019) (In force)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [ASIC REP 798](https://www.bankingnewsai.com/ai-regulation/documents/asic-rep-798) — REP 798 Beware the gap: Governance arrangements in the face of AI innovation (Final)

**[RBI](https://www.bankingnewsai.com/ai-regulation/rbi)**

- [RBI draft Guidance on Regulatory Principles for Model Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risk-management-guidance-2026) — Guidance on Regulatory Principles for Model Risk Management, 2026 (draft released for public comments) (Proposed · comment period closed)
- [RBI draft circular on Regulatory Principles for Management of Model Risks in Credit](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risks-credit-circular-2024) — Regulatory Principles for Management of Model Risks in Credit (draft circular for comments) (Proposed · comment period closed)

## Which rules govern AI in AML, sanctions screening and KYC?

Regulators actively encourage machine learning in transaction monitoring, but expect the same explainability and validation as any other BSA/AML control.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2) — Revised Guidance on Model Risk Management (In force)
- [2021 BSA/AML Model Risk Statement](https://www.bankingnewsai.com/ai-regulation/documents/fed-bsa-aml-model-risk-statement-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML Compliance (Superseded)
- [SR 11-7](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-11-7) — Supervisory Guidance on Model Risk Management (Superseded)

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [OCC Bulletin 2021-19](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-19) — Bank Secrecy Act/Anti-Money Laundering: Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML Compliance and Request for Information (Superseded)
- [2021 Interagency AI RFI (OCC Bulletin 2021-17)](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-17-ai-rfi) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[FDIC](https://www.bankingnewsai.com/ai-regulation/fdic)**

- [Hill House oversight testimony (Jun 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-oversight-prudential-regulators-2026) — Statement of Chairman Travis Hill: Oversight of Prudential Regulators (Final)
- [FDIC FIL-15-2026](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-15-2026) — Agencies Revise the Interagency Model Risk Management Guidance (In force)
- [FDIC House testimony on AI and innovation (Mar 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-innovation-speed-of-markets-2026) — Innovation at the Speed of Markets: How Regulators Keep Pace with Technology (Final)
- [FDIC FIL-27-2021](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-27-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML and OFAC Compliance (Superseded)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [Division of Examinations FY2026 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2026) — Examination Priorities: Fiscal Year 2026 — Division of Examinations (In force)
- [Division of Examinations FY2025 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2025) — Examination Priorities: Fiscal Year 2025 — Division of Examinations (Superseded)

**[CFTC](https://www.bankingnewsai.com/ai-regulation/cftc)**

- [Johnson RegHub Summit Remarks (Jun 2025)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-johnson-reghub-london-2025) — Keynote Remarks of Commissioner Kristin N. Johnson at RegHub Summit London 2025: Enabling AI Tools To Enhance Compliance and Surveillance (Final)

**[FinCEN](https://www.bankingnewsai.com/ai-regulation/fincen)**

- [FIN-2026-Alert005 (Digital Asset Investment Scam Centers)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2026-scam-centers) — FinCEN Alert on Money Laundering Activity Associated with Digital Asset Investment Scam Centers (In force)
- [FIN-2026-Alert004 (Federal Student Aid Fraud)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2026-federal-student-aid-fraud) — FinCEN Alert on Fraud Schemes Targeting Federal Student Aid (In force)
- [2026 AML/CFT Program Proposed Rule](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-cft-program-nprm-2026) — Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2026) (Proposed · comment period closed)
- [FIN-2024-Alert004 (Deepfake Media)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2024-deepfake-media) — FinCEN Alert on Fraud Schemes Involving Deepfake Media Targeting Financial Institutions (In force)
- [2024 AML/CFT Program Proposed Rule (withdrawn)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-cft-program-nprm-2024) — Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2024) (Withdrawn)
- [2021 BSA/AML Model Risk Management Statement](https://www.bankingnewsai.com/ai-regulation/documents/fincen-bsa-aml-model-risk-statement-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting Bank Secrecy Act/Anti-Money Laundering Compliance (Withdrawn)
- [Anti-Money Laundering Act of 2020](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-act-2020) — Anti-Money Laundering Act of 2020 (Division F of the National Defense Authorization Act for Fiscal Year 2021) (In force)
- [FinCEN Innovation Hours](https://www.bankingnewsai.com/ai-regulation/documents/fincen-innovation-hours-2019) — FinCEN's Innovation Initiative: Implementation of FinCEN Innovation Hours; Invitation to Request Innovation Hours Meeting (In force)
- [2018 Joint Statement on BSA/AML Innovation](https://www.bankingnewsai.com/ai-regulation/documents/fincen-joint-statement-innovation-2018) — Joint Statement on Innovative Efforts to Combat Money Laundering and Terrorist Financing (In force)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [Treasury $4B AI fraud-prevention announcement (Oct 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ml-fraud-prevention-fy2024) — Treasury Announces Enhanced Fraud Detection Processes, Including Machine Learning AI, Prevented and Recovered Over $4 Billion in Fiscal Year 2024 (Final)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [EBA report: Rising application of AI in EU banking and payments (Sep 2025)](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-adoption-report-2025) — Rising application of AI in EU banking and payments sector (Final)
- [EBA/GL/2022/15 (remote customer onboarding)](https://www.bankingnewsai.com/ai-regulation/documents/eba-gl-2022-15-remote-customer-onboarding) — EBA/GL/2022/15 Guidelines on the use of Remote Customer Onboarding Solutions under Article 13(1) of Directive (EU) 2015/849 (In force)
- [EBA Report on Big Data and Advanced Analytics (EBA/REP/2020/01)](https://www.bankingnewsai.com/ai-regulation/documents/eba-rep-2020-01-big-data-advanced-analytics) — Report on Big Data and Advanced Analytics (Final)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [Data (Use and Access) Act 2025](https://www.bankingnewsai.com/ai-regulation/documents/uk-data-use-and-access-act-2025) — Data (Use and Access) Act 2025 (2025 c. 18) — automated decision-making reform, section 80 and new UK GDPR Articles 22A to 22D (In force)
- [2024 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2024) — Artificial intelligence in UK financial services – 2024 (Final)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin/Bundesbank ML in risk models results](https://www.bankingnewsai.com/ai-regulation/documents/bafin-bundesbank-ml-risk-models-2022) — Machine learning in risk models – Characteristics and supervisory priorities: Responses to the consultation paper (Final)
- [BaFin BDAI principles paper](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-principles-2021) — Big data and artificial intelligence: Principles for the use of algorithms in decision-making processes (Final)

**[ACPR](https://www.bankingnewsai.com/ai-regulation/acpr)**

- [ACPR discussion document on AI governance](https://www.bankingnewsai.com/ai-regulation/documents/acpr-governance-ai-finance-2020) — Governance of Artificial Intelligence in Finance (Final)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS Circular MAS/TCRS/2025/06](https://www.bankingnewsai.com/ai-regulation/documents/mas-circular-cyber-risks-deepfakes-2025) — Cyber Risks Associated with Deepfakes (Information Paper) (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA circular on AI for monitoring of suspicious activities](https://www.bankingnewsai.com/ai-regulation/documents/hkma-ai-aml-monitoring-2024) — Use of Artificial Intelligence for Monitoring of Suspicious Activities (HKMA circular, 9 September 2024) (In force)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS Digitalisation of finance report (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-digitalisation-of-finance-2024) — Digitalisation of finance (Final)

## Which rules govern AI-based fraud detection — and AI-enabled fraud?

Two sides: banks deploying AI to catch fraud, and regulators warning about deepfakes and generative-AI-enabled scams targeting banks and their customers.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2) — Revised Guidance on Model Risk Management (In force)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/fed-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [SR 11-7](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-11-7) — Supervisory Guidance on Model Risk Management (Superseded)

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [OCC Semiannual Risk Perspective, Spring 2026](https://www.bankingnewsai.com/ai-regulation/documents/occ-semiannual-risk-perspective-spring-2026) — Semiannual Risk Perspective from the National Risk Committee, Spring 2026 (Final)
- [2021 Interagency AI RFI (OCC Bulletin 2021-17)](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-17-ai-rfi) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[FDIC](https://www.bankingnewsai.com/ai-regulation/fdic)**

- [FDIC House testimony on AI and innovation (Mar 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-innovation-speed-of-markets-2026) — Innovation at the Speed of Markets: How Regulators Keep Pace with Technology (Final)
- [FDIC 2025 Report on Cybersecurity and Resilience](https://www.bankingnewsai.com/ai-regulation/documents/fdic-cybersecurity-resilience-report-2025) — 2025 Report on Cybersecurity and Resilience (Final)
- [FDIC 2024 Risk Review](https://www.bankingnewsai.com/ai-regulation/documents/fdic-risk-review-2024) — 2024 Risk Review — Section 5: Operational and Cyber Risks (Final)
- [FDIC FIL-29-2023](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-29-2023) — Interagency Guidance on Third-Party Relationships: Risk Management (In force)
- [FDIC FIL-20-2021](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-20-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[NCUA](https://www.bankingnewsai.com/ai-regulation/ncua)**

- [Hauptman Senate testimony (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-hauptman-senate-testimony-2026) — Written Testimony of NCUA Chairman Kyle S. Hauptman before the U.S. Senate Committee on Banking, Housing, and Urban Affairs (Final)
- [NCUA Letter 26-CU-01](https://www.bankingnewsai.com/ai-regulation/documents/ncua-letter-26-cu-01) — NCUA's 2026 Supervisory Priorities (In force)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/ncua-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb)**

- [CFPB comment to Treasury on AI in financial services (2024)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-comment-treasury-ai-rfi-2024) — CFPB Comment on Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)
- [FCRA adverse action and credit-score disclosures (15 U.S.C. 1681m, 1681g(f))](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-fcra-adverse-action-key-factors) — Fair Credit Reporting Act — adverse-action notices based on consumer reports and disclosure of key factors affecting credit scores (In force)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [Division of Examinations FY2026 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2026) — Examination Priorities: Fiscal Year 2026 — Division of Examinations (In force)
- [Division of Examinations FY2025 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2025) — Examination Priorities: Fiscal Year 2025 — Division of Examinations (Superseded)

**[CFTC](https://www.bankingnewsai.com/ai-regulation/cftc)**

- [Johnson Statement on AI in Derivatives Markets (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-johnson-statement-2024-12-05) — Statement of Commissioner Kristin N. Johnson on Future-Proofing Financial Markets: Assessing the Integration of Artificial Intelligence in Global Derivatives Markets (Final)
- [CFTC AI Scams Customer Advisory](https://www.bankingnewsai.com/ai-regulation/documents/cftc-ai-scams-customer-advisory-2024) — Customer Advisory: AI Won't Turn Trading Bots into Money Machines (In force)

**[FinCEN](https://www.bankingnewsai.com/ai-regulation/fincen)**

- [FIN-2026-Alert005 (Digital Asset Investment Scam Centers)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2026-scam-centers) — FinCEN Alert on Money Laundering Activity Associated with Digital Asset Investment Scam Centers (In force)
- [FIN-2026-Alert004 (Federal Student Aid Fraud)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2026-federal-student-aid-fraud) — FinCEN Alert on Fraud Schemes Targeting Federal Student Aid (In force)
- [FIN-2024-Alert004 (Deepfake Media)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2024-deepfake-media) — FinCEN Alert on Fraud Schemes Involving Deepfake Media Targeting Financial Institutions (In force)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [FSOC AI Innovation Series (Mar–May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fsoc-ai-innovation-series-2026) — Artificial Intelligence Innovation Series — FSOC and Treasury AI Transformation Office roundtables (Final)
- [FSOC 2025 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2025) — Financial Stability Oversight Council 2025 Annual Report — Section 3.4, Harnessing Artificial Intelligence to Promote Financial Stability (Final)
- [Treasury AI in Financial Services report (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-report-2024) — Artificial Intelligence in Financial Services — Report on the Uses, Opportunities, and Risks of AI in the Financial Services Sector (Final)
- [Treasury $4B AI fraud-prevention announcement (Oct 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ml-fraud-prevention-fy2024) — Treasury Announces Enhanced Fraud Detection Processes, Including Machine Learning AI, Prevented and Recovered Over $4 Billion in Fiscal Year 2024 (Final)
- [Treasury AI cybersecurity risks report (Mar 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-cybersecurity-risks-report-2024) — Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector (Final)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [DFS AI Cybersecurity Industry Letter (Oct 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2024-10-16-ai-cyber-risks) — Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks (In force)

**[Massachusetts AG](https://www.bankingnewsai.com/ai-regulation/massachusetts)**

- [Massachusetts AG AI Advisory (April 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-ai-advisory-2024) — Attorney General Advisory on the Application of the Commonwealth's Consumer Protection, Civil Rights, and Data Privacy Laws to Artificial Intelligence (In force)

**[NIST](https://www.bankingnewsai.com/ai-regulation/nist)**

- [NIST IR 8596 (Cyber AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ir-8596) — Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile), NIST IR 8596 — preliminary draft (Proposed · comment period closed)
- [NIST AI 100-2e2025 (Adversarial ML)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-2e2025) — Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST AI 100-2e2025) (Final)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [Commission guidelines on AI Act Article 50 transparency](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-act-article-50-transparency-2026) — Commission Guidelines on the implementation of the transparency obligations for certain AI systems under Article 50 of Regulation (EU) 2024/1689 (AI Act) (In force)
- [Draft Commission guidelines on high-risk classification](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-draft-guidelines-high-risk-classification-2026) — Draft Commission Guidelines on the classification of high-risk AI systems under Article 6 of the AI Act (Proposed · comment period closed)
- [EBA factsheet on the AI Act](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-banking-payments-2025) — AI Act: implications for the EU banking and payments sector (EBA factsheet) (Final)
- [Commission guidelines on the AI system definition](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-system-definition-2025) — Commission Guidelines on the definition of an artificial intelligence system established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689) — Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) (In force)

**[ECB](https://www.bankingnewsai.com/ai-regulation/ecb)**

- [Montagner speech: 'Encouraging innovation, managing risks' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-montagner-digital-transformation-speech-2026) — Encouraging innovation, managing risks: the ECB's approach to digital transformation — speech by Patrick Montagner (Final)
- [Supervision Newsletter: AI use cases for credit scoring and fraud detection (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-supervision-newsletter-ai-credit-scoring-fraud-2025) — AI's impact on banking: use cases for credit scoring and fraud detection (Supervision Newsletter, November 2025) (Final)
- [SSM supervisory priorities 2026–28](https://www.bankingnewsai.com/ai-regulation/documents/ecb-ssm-supervisory-priorities-2026-28) — ECB Banking Supervision: SSM supervisory priorities for 2026–28 (In force)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [EBA report: Rising application of AI in EU banking and payments (Sep 2025)](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-adoption-report-2025) — Rising application of AI in EU banking and payments sector (Final)
- [EBA/GL/2022/15 (remote customer onboarding)](https://www.bankingnewsai.com/ai-regulation/documents/eba-gl-2022-15-remote-customer-onboarding) — EBA/GL/2022/15 Guidelines on the use of Remote Customer Onboarding Solutions under Article 13(1) of Directive (EU) 2015/849 (In force)
- [EBA Report on Big Data and Advanced Analytics (EBA/REP/2020/01)](https://www.bankingnewsai.com/ai-regulation/documents/eba-rep-2020-01-big-data-advanced-analytics) — Report on Big Data and Advanced Analytics (Final)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [HM Treasury Financial Services AI Adoption Plan (Jul 2026)](https://www.bankingnewsai.com/ai-regulation/documents/hmt-financial-services-ai-adoption-plan-2026) — Financial Services AI Adoption Plan (Final)
- [Data (Use and Access) Act 2025](https://www.bankingnewsai.com/ai-regulation/documents/uk-data-use-and-access-act-2025) — Data (Use and Access) Act 2025 (2025 c. 18) — automated decision-making reform, section 80 and new UK GDPR Articles 22A to 22D (In force)
- [2024 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2024) — Artificial intelligence in UK financial services – 2024 (Final)
- [ICO Guidance on AI and data protection](https://www.bankingnewsai.com/ai-regulation/documents/ico-guidance-ai-data-protection) — Guidance on AI and data protection (ICO) (In force)
- [FCA PS22/9 Consumer Duty](https://www.bankingnewsai.com/ai-regulation/documents/fca-ps22-9-consumer-duty) — PS22/9: A new Consumer Duty — Feedback to CP21/36 and final rules (with FG22/5 guidance) (In force)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin/Bundesbank ML in risk models results](https://www.bankingnewsai.com/ai-regulation/documents/bafin-bundesbank-ml-risk-models-2022) — Machine learning in risk models – Characteristics and supervisory priorities: Responses to the consultation paper (Final)

**[DNB / AFM](https://www.bankingnewsai.com/ai-regulation/dnb)**

- [AFM and DNB report on the impact of AI](https://www.bankingnewsai.com/ai-regulation/documents/afm-dnb-ai-impact-report-2024) — The impact of AI on the financial sector and supervision (Final)

**[OSFI](https://www.bankingnewsai.com/ai-regulation/osfi)**

- [OSFI FIFAI II report (AGILE framework)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fifai-report-2026) — FIFAI II: AI Risks and Opportunities: Adopting an AGILE Framework in Canadian Financial Services (Final)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS Circular MAS/TCRS/2025/06](https://www.bankingnewsai.com/ai-regulation/documents/mas-circular-cyber-risks-deepfakes-2025) — Cyber Risks Associated with Deepfakes (Information Paper) (In force)
- [MAS Circular MAS/TCRS/2024/05](https://www.bankingnewsai.com/ai-regulation/documents/mas-circular-cyber-risks-generative-ai-2024) — Cyber Risks Associated with Generative Artificial Intelligence (Information Paper) (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA GenA.I. Sandbox++ joint circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-plus-plus-2026) — Joint Circular on the Expansion of Generative Artificial Intelligence Sandbox (HKMA, SFC, Insurance Authority and MPFA, 5 March 2026) (In force)
- [HKMA GenA.I. Sandbox circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-2024) — Generative Artificial Intelligence Sandbox (HKMA circular inviting applications to the GenA.I. Sandbox, 20 September 2024) (In force)
- [HKMA circular on AI for monitoring of suspicious activities](https://www.bankingnewsai.com/ai-regulation/documents/hkma-ai-aml-monitoring-2024) — Use of Artificial Intelligence for Monitoring of Suspicious Activities (HKMA circular, 9 September 2024) (In force)

**[FSB](https://www.bankingnewsai.com/ai-regulation/fsb)**

- [FSB AI financial stability report (Nov 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-financial-stability-implications-of-ai-2024) — The Financial Stability Implications of Artificial Intelligence (Final)
- [FSB 2017 AI/ML report](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-ml-financial-services-2017) — Artificial intelligence and machine learning in financial services: Market developments and financial stability implications (Final)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS Digitalisation of finance report (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-digitalisation-of-finance-2024) — Digitalisation of finance (Final)

## Which rules apply to AI chatbots and virtual assistants in banking?

Consumer-protection law follows the customer interaction: a chatbot that gives wrong information or obstructs a dispute can be a UDAAP or compliance violation.

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [2021 Interagency AI RFI (OCC Bulletin 2021-17)](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-17-ai-rfi) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[FDIC](https://www.bankingnewsai.com/ai-regulation/fdic)**

- [FDIC House testimony on AI and innovation (Mar 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-innovation-speed-of-markets-2026) — Innovation at the Speed of Markets: How Regulators Keep Pace with Technology (Final)
- [FDIC FIL-29-2023](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-29-2023) — Interagency Guidance on Third-Party Relationships: Risk Management (In force)

**[NCUA](https://www.bankingnewsai.com/ai-regulation/ncua)**

- [Hauptman Senate testimony (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-hauptman-senate-testimony-2026) — Written Testimony of NCUA Chairman Kyle S. Hauptman before the U.S. Senate Committee on Banking, Housing, and Urban Affairs (Final)
- [NCUA Credit Union AI Resource Center](https://www.bankingnewsai.com/ai-regulation/documents/ncua-credit-union-ai-resource-center) — Artificial Intelligence (AI) — Credit Union AI Resource Center and AI Resources page (In force)

**[CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb)**

- [CFPB comment to Treasury on AI in financial services (2024)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-comment-treasury-ai-rfi-2024) — CFPB Comment on Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)
- [CFPB Chatbots in Consumer Finance (issue spotlight, 2023)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-chatbots-in-consumer-finance-2023) — Chatbots in consumer finance (Final)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [SEC withdrawal of proposed rules (33-11377)](https://www.bankingnewsai.com/ai-regulation/documents/sec-pda-proposal-withdrawal-33-11377) — Withdrawal of Proposed Regulatory Actions — including the predictive data analytics conflicts proposal (Final)
- [SEC Predictive Data Analytics proposal (34-97990)](https://www.bankingnewsai.com/ai-regulation/documents/sec-pda-conflicts-proposal-34-97990) — Conflicts of Interest Associated with the Use of Predictive Data Analytics by Broker-Dealers and Investment Advisers — proposed rule (Withdrawn)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [Treasury AI in Financial Services report (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-report-2024) — Artificial Intelligence in Financial Services — Report on the Uses, Opportunities, and Risks of AI in the Financial Services Sector (Final)

**[FINRA](https://www.bankingnewsai.com/ai-regulation/finra)**

- [FINRA Regulatory Notice 24-09](https://www.bankingnewsai.com/ai-regulation/documents/finra-regulatory-notice-24-09) — FINRA Reminds Members of Regulatory Obligations When Using Generative Artificial Intelligence and Large Language Models (In force)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [Asrow Assembly Statement on AI in Insurance (Dec 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-asrow-assembly-statement-2025-12-16-ai-insurance) — Statement by DFS Acting Superintendent Kaitlin Asrow at the NYS Assembly Hearing on the Use of Artificial Intelligence Systems in Insurance Underwriting and Pricing (Final)
- [DFS Virtual Currency Customer Service Guidance (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2024-05-30-vce-customer-service) — Guidance Regarding Customer Service Requests and Complaints (Virtual Currency Entities) (In force)

**[Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act)**

- [Colorado AG proposed ADMT rules](https://www.bankingnewsai.com/ai-regulation/documents/co-ag-admt-proposed-rules-2026) — Proposed Automated Decision-Making Technology and Conversational AI Service Rules (Notice of Rulemaking Hearing) (Comment period open)
- [HB 26-1263](https://www.bankingnewsai.com/ai-regulation/documents/co-hb26-1263) — Conversational Artificial Intelligence Service Operator Requirements (Chatbot Safety Act) (Final · applies from Jan 1, 2027)
- [SB 26-189](https://www.bankingnewsai.com/ai-regulation/documents/co-sb26-189) — Automated Decision-Making Technology Act (repeal and reenactment of the Colorado AI Act) (Final · applies from Jan 1, 2027)

**[California CPPA](https://www.bankingnewsai.com/ai-regulation/california)**

- [AB 1609](https://www.bankingnewsai.com/ai-regulation/documents/ca-ab-1609-2026) — Customer Service Chatbots (Right to Human Customer Service Act) (Final · applies from Jan 1, 2027)
- [California AG legal advisory on AI (Jan 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ca-ag-legal-advisory-ai-2025) — Legal Advisory: Application of Existing California Laws to Artificial Intelligence (Final)

**[Texas AG](https://www.bankingnewsai.com/ai-regulation/texas)**

- [Texas TRAIGA (HB 149)](https://www.bankingnewsai.com/ai-regulation/documents/tx-hb-149-traiga) — Texas Responsible Artificial Intelligence Governance Act (H.B. 149, 89th Legislature) (In force)

**[Utah Division of Consumer Protection](https://www.bankingnewsai.com/ai-regulation/utah)**

- [Utah SB 226 (2025)](https://www.bankingnewsai.com/ai-regulation/documents/ut-sb-226-2025) — S.B. 226 Artificial Intelligence Consumer Protection Amendments (In force)
- [Utah AI Policy Act (SB 149)](https://www.bankingnewsai.com/ai-regulation/documents/ut-sb-149-ai-policy-act) — S.B. 149 Artificial Intelligence Amendments (creating the Utah Artificial Intelligence Policy Act) (In force)

**[Massachusetts AG](https://www.bankingnewsai.com/ai-regulation/massachusetts)**

- [Massachusetts AG AI Advisory (April 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-ai-advisory-2024) — Attorney General Advisory on the Application of the Commonwealth's Consumer Protection, Civil Rights, and Data Privacy Laws to Artificial Intelligence (In force)

**[NIST](https://www.bankingnewsai.com/ai-regulation/nist)**

- [NIST AI 600-1 (Generative AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-600-1) — Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) (In force)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [Regulation (EU) 2026/1744 (Digital Omnibus on AI)](https://www.bankingnewsai.com/ai-regulation/documents/eu-digital-omnibus-ai-regulation-2026-1744) — Regulation (EU) 2026/1744 amending Regulation (EU) 2024/1689 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) (In force)
- [Commission guidelines on AI Act Article 50 transparency](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-act-article-50-transparency-2026) — Commission Guidelines on the implementation of the transparency obligations for certain AI systems under Article 50 of Regulation (EU) 2024/1689 (AI Act) (In force)
- [Commission guidelines on prohibited AI practices](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-prohibited-ai-practices-2025) — Commission Guidelines on prohibited artificial intelligence practices established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [GDPR Article 22](https://www.bankingnewsai.com/ai-regulation/documents/eu-gdpr-article-22-automated-decision-making) — Regulation (EU) 2016/679 (GDPR), Article 22 — Automated individual decision-making, including profiling (In force)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [EBA report: Rising application of AI in EU banking and payments (Sep 2025)](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-adoption-report-2025) — Rising application of AI in EU banking and payments sector (Final)

**[ESMA](https://www.bankingnewsai.com/ai-regulation/esma)**

- [ESMA AI statement ESMA35-335435667-5924](https://www.bankingnewsai.com/ai-regulation/documents/esma-public-statement-ai-investment-services-2024) — Public Statement on the use of Artificial Intelligence (AI) in the provision of retail investment services (Final)

**[EIOPA](https://www.bankingnewsai.com/ai-regulation/eiopa)**

- [EIOPA Opinion on AI governance and risk management (EIOPA-BoS-25-360)](https://www.bankingnewsai.com/ai-regulation/documents/eiopa-opinion-ai-governance-2025) — EIOPA-BoS-25-360 Opinion on AI governance and risk management (In force)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [FCA FS25/5](https://www.bankingnewsai.com/ai-regulation/documents/fca-fs25-5-ai-live-testing) — FS25/5: AI Live Testing (Final)
- [Data (Use and Access) Act 2025](https://www.bankingnewsai.com/ai-regulation/documents/uk-data-use-and-access-act-2025) — Data (Use and Access) Act 2025 (2025 c. 18) — automated decision-making reform, section 80 and new UK GDPR Articles 22A to 22D (In force)
- [FCA AI Update (Apr 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fca-ai-update-2024) — Artificial Intelligence (AI) update – further to the Government's response to the AI White Paper (Final)
- [UK AI white paper government response (CP 1019)](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-white-paper-response-2024) — A pro-innovation approach to AI regulation: government response to consultation (CP 1019) (In force)
- [ICO Guidance on AI and data protection](https://www.bankingnewsai.com/ai-regulation/documents/ico-guidance-ai-data-protection) — Guidance on AI and data protection (ICO) (In force)
- [FCA PS22/9 Consumer Duty](https://www.bankingnewsai.com/ai-regulation/documents/fca-ps22-9-consumer-duty) — PS22/9: A new Consumer Duty — Feedback to CP21/36 and final rules (with FG22/5 guidance) (In force)

**[DNB / AFM](https://www.bankingnewsai.com/ai-regulation/dnb)**

- [DNB SAFEST AI principles](https://www.bankingnewsai.com/ai-regulation/documents/dnb-safest-ai-principles-2019) — General principles for the use of Artificial Intelligence in the financial sector (Final)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS AI Model Risk Management information paper](https://www.bankingnewsai.com/ai-regulation/documents/mas-info-paper-ai-model-risk-management-2024) — Artificial Intelligence Model Risk Management: Observations from a Thematic Review (Information Paper) (Final)
- [MAS FEAT Principles](https://www.bankingnewsai.com/ai-regulation/documents/mas-feat-principles-2018) — Principles to Promote Fairness, Ethics, Accountability and Transparency (FEAT) in the Use of Artificial Intelligence and Data Analytics in Singapore's Financial Sector (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA GenA.I. Sandbox++ joint circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-plus-plus-2026) — Joint Circular on the Expansion of Generative Artificial Intelligence Sandbox (HKMA, SFC, Insurance Authority and MPFA, 5 March 2026) (In force)
- [HKMA GenA.I. Sandbox circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-2024) — Generative Artificial Intelligence Sandbox (HKMA circular inviting applications to the GenA.I. Sandbox, 20 September 2024) (In force)
- [HKMA GenAI consumer protection circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-consumer-protection-2024) — Consumer Protection in respect of Use of Generative Artificial Intelligence (HKMA circular, 19 August 2024) (In force)
- [HKMA BDAI consumer protection principles](https://www.bankingnewsai.com/ai-regulation/documents/hkma-bdai-consumer-protection-2019) — Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence by Authorized Institutions (HKMA circular, 5 November 2019) (In force)

**[Hong Kong SFC](https://www.bankingnewsai.com/ai-regulation/sfc)**

- [SFC Circular 24EC55 (generative AI language models)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-genai-language-models-2024) — Circular to licensed corporations - Use of generative AI language models (In force)

**[Japan FSA](https://www.bankingnewsai.com/ai-regulation/japan-fsa)**

- [Japan FSA AI Discussion Paper v1.1](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-v1-1-2026) — AI Discussion Paper (Version 1.1): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Final)
- [Japan FSA AI Discussion Paper v1.0](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-2025) — AI Discussion Paper (Version 1.0): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Superseded)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [ASIC REP 798](https://www.bankingnewsai.com/ai-regulation/documents/asic-rep-798) — REP 798 Beware the gap: Governance arrangements in the face of AI innovation (Final)

**[RBI](https://www.bankingnewsai.com/ai-regulation/rbi)**

- [RBI draft Guidance on Regulatory Principles for Model Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risk-management-guidance-2026) — Guidance on Regulatory Principles for Model Risk Management, 2026 (draft released for public comments) (Proposed · comment period closed)
- [RBI FREE-AI framework](https://www.bankingnewsai.com/ai-regulation/documents/rbi-free-ai-framework-2025) — Framework for Responsible and Ethical Enablement of Artificial Intelligence (FREE-AI) Committee Report (Final)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS Digitalisation of finance report (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-digitalisation-of-finance-2024) — Digitalisation of finance (Final)

**[IOSCO](https://www.bankingnewsai.com/ai-regulation/iosco)**

- [IOSCO FR/02/2026](https://www.bankingnewsai.com/ai-regulation/documents/iosco-ai-capital-markets-fr02-2026) — Supervisory Toolkit for AI Use in Capital Markets: Final Report (In force)

## Which model risk management rules apply to AI and machine-learning models?

The validation, governance and 'effective challenge' framework that bank examiners test AI models against.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [Bowman: AI in the Financial System (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-bowman-speech-ai-financial-system-2026) — Artificial Intelligence in the Financial System — Vice Chair for Supervision Michelle W. Bowman (Final)
- [SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2) — Revised Guidance on Model Risk Management (In force)
- [SR 23-4](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-23-4) — Interagency Guidance on Third-Party Relationships: Risk Management (In force)
- [2021 BSA/AML Model Risk Statement](https://www.bankingnewsai.com/ai-regulation/documents/fed-bsa-aml-model-risk-statement-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML Compliance (Superseded)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/fed-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [SR 11-7](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-11-7) — Supervisory Guidance on Model Risk Management (Superseded)

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [OCC Bulletin 2026-13](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2026-13) — Model Risk Management: Revised Guidance (In force)
- [Acting Comptroller Hood, 'AI in Financial Services' (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/occ-hood-responsible-ai-speech-2025) — Remarks by Acting Comptroller Rodney E. Hood at the National Fair Housing Alliance's Responsible AI Symposium: 'AI in Financial Services' (Final)
- [OCC Bulletin 2023-17](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2023-17) — Third-Party Relationships: Interagency Guidance on Risk Management (In force)
- [OCC Bulletin 2021-19](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-19) — Bank Secrecy Act/Anti-Money Laundering: Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML Compliance and Request for Information (Superseded)
- [OCC Bulletin 2011-12](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2011-12) — Sound Practices for Model Risk Management: Supervisory Guidance on Model Risk Management (Superseded)
- [OCC Bulletin 1997-24](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-1997-24) — Credit Scoring Models: Examination Guidance (Superseded)

**[FDIC](https://www.bankingnewsai.com/ai-regulation/fdic)**

- [Hill House oversight testimony (Jun 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-oversight-prudential-regulators-2026) — Statement of Chairman Travis Hill: Oversight of Prudential Regulators (Final)
- [FDIC FIL-15-2026](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-15-2026) — Agencies Revise the Interagency Model Risk Management Guidance (In force)
- [FDIC FIL-27-2021](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-27-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML and OFAC Compliance (Superseded)
- [FDIC FIL-20-2021](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-20-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[NCUA](https://www.bankingnewsai.com/ai-regulation/ncua)**

- [NCUA Board AI briefing (Jul 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-ai-board-briefing-2025) — Board Briefing: Artificial Intelligence and Its Use Within the Credit Union Industry and the NCUA (Final)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/ncua-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb)**

- [Regulation B final rule on disparate impact (April 2026)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-regulation-b-final-rule-2026) — Equal Credit Opportunity Act (Regulation B) — final rule amending disparate impact, discouragement and special purpose credit program provisions (In force)
- [CFPB Circular 2022-03](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-circular-2022-03) — Adverse action notification requirements in connection with credit decisions based on complex algorithms (Withdrawn)
- [ECOA / Regulation B adverse action (15 U.S.C. 1691(d); 12 CFR 1002.9)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-ecoa-regulation-b-adverse-action) — Equal Credit Opportunity Act section 701(d) and Regulation B section 1002.9 — notification of adverse action and statement of specific reasons (In force)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [Delphia / Global Predictions AI-washing settlements](https://www.bankingnewsai.com/ai-regulation/documents/sec-delphia-global-predictions-ai-washing-2024) — SEC Charges Two Investment Advisers with Making False and Misleading Statements About Their Use of Artificial Intelligence (Final)
- [Gensler 'AI washing' remarks at Yale (Feb 2024)](https://www.bankingnewsai.com/ai-regulation/documents/sec-gensler-ai-washing-speech-2024) — AI, Finance, Movies, and the Law — Prepared Remarks Before the Yale Law School (Final)
- [SEC Predictive Data Analytics proposal (34-97990)](https://www.bankingnewsai.com/ai-regulation/documents/sec-pda-conflicts-proposal-34-97990) — Conflicts of Interest Associated with the Use of Predictive Data Analytics by Broker-Dealers and Investment Advisers — proposed rule (Withdrawn)

**[CFTC](https://www.bankingnewsai.com/ai-regulation/cftc)**

- [Johnson RegHub Summit Remarks (Jun 2025)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-johnson-reghub-london-2025) — Keynote Remarks of Commissioner Kristin N. Johnson at RegHub Summit London 2025: Enabling AI Tools To Enhance Compliance and Surveillance (Final)
- [CFTC Staff Advisory 24-17 on AI](https://www.bankingnewsai.com/ai-regulation/documents/cftc-staff-advisory-24-17) — Staff Advisory on the Use of Artificial Intelligence in CFTC-Regulated Markets (CFTC Letter No. 24-17) (In force)
- [CFTC TAC Responsible AI Report](https://www.bankingnewsai.com/ai-regulation/documents/cftc-tac-responsible-ai-report-2024) — Responsible Artificial Intelligence in Financial Markets: Opportunities, Risks & Recommendations (Final)
- [CFTC AI Request for Comment (2024)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-ai-request-for-comment-2024) — Request for Comment on the Use of Artificial Intelligence in CFTC-Regulated Markets (Final)

**[FinCEN](https://www.bankingnewsai.com/ai-regulation/fincen)**

- [2026 AML/CFT Program Proposed Rule](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-cft-program-nprm-2026) — Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2026) (Proposed · comment period closed)
- [2021 BSA/AML Model Risk Management Statement](https://www.bankingnewsai.com/ai-regulation/documents/fincen-bsa-aml-model-risk-statement-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting Bank Secrecy Act/Anti-Money Laundering Compliance (Withdrawn)
- [Anti-Money Laundering Act of 2020](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-act-2020) — Anti-Money Laundering Act of 2020 (Division F of the National Defense Authorization Act for Fiscal Year 2021) (In force)
- [2018 Joint Statement on BSA/AML Innovation](https://www.bankingnewsai.com/ai-regulation/documents/fincen-joint-statement-innovation-2018) — Joint Statement on Innovative Efforts to Combat Money Laundering and Terrorist Financing (In force)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [Treasury FS AI RMF and AI Lexicon (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fs-ai-rmf-and-ai-lexicon-2026) — Financial Services AI Risk Management Framework (FS AI RMF) and Artificial Intelligence Lexicon (Final)
- [FSOC 2024 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2024) — Financial Stability Oversight Council 2024 Annual Report — Section 3.3.3, The Use of Artificial Intelligence in Financial Services (Superseded)
- [FSOC 2023 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2023) — Financial Stability Oversight Council 2023 Annual Report — Section 3.3.3, The Use of Artificial Intelligence in Financial Services (Superseded)

**[White House](https://www.bankingnewsai.com/ai-regulation/white-house)**

- [America's AI Action Plan](https://www.bankingnewsai.com/ai-regulation/documents/americas-ai-action-plan-2025) — America's AI Action Plan (In force)
- [EO 14179](https://www.bankingnewsai.com/ai-regulation/documents/eo-14179) — Removing Barriers to American Leadership in Artificial Intelligence (In force)

**[FINRA](https://www.bankingnewsai.com/ai-regulation/finra)**

- [2026 FINRA Annual Regulatory Oversight Report](https://www.bankingnewsai.com/ai-regulation/documents/finra-annual-regulatory-oversight-report-2026) — 2026 FINRA Annual Regulatory Oversight Report: GenAI: Continuing and Emerging Trends (In force)
- [FINRA Regulatory Notice 24-09](https://www.bankingnewsai.com/ai-regulation/documents/finra-regulatory-notice-24-09) — FINRA Reminds Members of Regulatory Obligations When Using Generative Artificial Intelligence and Large Language Models (In force)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [Insurance Circular Letter No. 7 (2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-insurance-circular-letter-2024-07) — Use of Artificial Intelligence Systems and External Consumer Data and Information Sources in Insurance Underwriting and Pricing (In force)

**[NYC DCWP](https://www.bankingnewsai.com/ai-regulation/new-york-city)**

- [NYC Local Law 144 (AEDT)](https://www.bankingnewsai.com/ai-regulation/documents/nyc-local-law-144) — A Local Law to amend the administrative code of the city of New York, in relation to automated employment decision tools (Local Law 144 of 2021) and DCWP final rule (In force)

**[Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act)**

- [SB 24-205](https://www.bankingnewsai.com/ai-regulation/documents/co-sb24-205) — Consumer Protections for Artificial Intelligence (Colorado Artificial Intelligence Act) (Superseded)
- [Colorado SB 21-169 and Regulation 10-1-1](https://www.bankingnewsai.com/ai-regulation/documents/co-sb21-169) — Protecting Consumers from Unfair Discrimination in Insurance Practices (SB21-169, C.R.S. § 10-3-1104.9) and Colorado Insurance Regulation 10-1-1 (3 CCR 702-10) (In force)

**[California CPPA](https://www.bankingnewsai.com/ai-regulation/california)**

- [California SB 53 (Transparency in Frontier AI Act)](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-53-2025) — Senate Bill 53: Artificial intelligence models: large developers (Transparency in Frontier Artificial Intelligence Act), Chapter 138, Statutes of 2025 (In force)

**[Illinois IDHR](https://www.bankingnewsai.com/ai-regulation/illinois)**

- [Illinois HB 3773 (P.A. 103-0804)](https://www.bankingnewsai.com/ai-regulation/documents/il-hb-3773) — Illinois Human Rights Act amendments on artificial intelligence in employment (H.B. 3773, Public Act 103-0804) (In force)

**[Massachusetts AG](https://www.bankingnewsai.com/ai-regulation/massachusetts)**

- [Massachusetts AG Earnest Operations settlement (July 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-earnest-settlement-2025) — Assurance of Discontinuance: In the matter of Earnest Operations LLC (Massachusetts Attorney General, announced July 10, 2025) (In force)

**[New Jersey DCR](https://www.bankingnewsai.com/ai-regulation/new-jersey)**

- [NJ DCR Algorithmic Discrimination Guidance (January 2025)](https://www.bankingnewsai.com/ai-regulation/documents/nj-dcr-algorithmic-discrimination-guidance-2025) — Guidance on Algorithmic Discrimination and the New Jersey Law Against Discrimination (In force)

**[NIST](https://www.bankingnewsai.com/ai-regulation/nist)**

- [NIST AI 100-2e2025 (Adversarial ML)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-2e2025) — Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST AI 100-2e2025) (Final)
- [NIST AI RMF 1.0](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-1) — Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 (In force)
- [NIST AI RMF Playbook](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-rmf-playbook) — AI Risk Management Framework Playbook (In force)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [Regulation (EU) 2026/1744 (Digital Omnibus on AI)](https://www.bankingnewsai.com/ai-regulation/documents/eu-digital-omnibus-ai-regulation-2026-1744) — Regulation (EU) 2026/1744 amending Regulation (EU) 2024/1689 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) (In force)
- [Draft Commission guidelines on high-risk classification](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-draft-guidelines-high-risk-classification-2026) — Draft Commission Guidelines on the classification of high-risk AI systems under Article 6 of the AI Act (Proposed · comment period closed)
- [EBA factsheet on the AI Act](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-banking-payments-2025) — AI Act: implications for the EU banking and payments sector (EBA factsheet) (Final)
- [Commission GPAI model guidelines](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-gpai-obligations-2025) — Commission Guidelines on the scope of the obligations for general-purpose AI models established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [General-Purpose AI Code of Practice](https://www.bankingnewsai.com/ai-regulation/documents/eu-gpai-code-of-practice-2025) — General-Purpose AI Code of Practice under the AI Act (Transparency, Copyright, and Safety and Security chapters) (In force)
- [Commission guidelines on the AI system definition](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-system-definition-2025) — Commission Guidelines on the definition of an artificial intelligence system established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689) — Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) (In force)
- [DORA (Regulation (EU) 2022/2554)](https://www.bankingnewsai.com/ai-regulation/documents/eu-dora-regulation-2022-2554) — Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act, DORA) (In force)

**[ECB](https://www.bankingnewsai.com/ai-regulation/ecb)**

- [Machado speech: 'Technology is neutral, governance is not' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-technology-neutral-governance-speech-2026) — Technology is neutral, governance is not: AI adoption in the banking sector — speech by Pedro Machado (Final)
- [Supervision Newsletter: AI use cases for credit scoring and fraud detection (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-supervision-newsletter-ai-credit-scoring-fraud-2025) — AI's impact on banking: use cases for credit scoring and fraud detection (Supervision Newsletter, November 2025) (Final)
- [ECB Guide to internal models (July 2025, ML section)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-guide-to-internal-models-2025-machine-learning) — Revised ECB Guide to internal models — expectations for machine-learning techniques in internal models (In force)
- [ECB digitalisation sound practices report (July 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-digitalisation-key-assessment-criteria-2024) — Digitalisation: key assessment criteria and collection of sound practices (In force)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [EBA factsheet: AI Act implications for the EU banking and payments sector](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-2025) — AI Act: implications for the EU banking and payments sector (Final)
- [EBA Chair letter to the Commission on the AI Act mapping exercise (EBA/2025/D/5384)](https://www.bankingnewsai.com/ai-regulation/documents/eba-2025-d-5384-ai-act-mapping-letter) — Outcome of EBA's AI Act mapping exercise — letter to DG FISMA and DG CNECT (Final)
- [EBA follow-up report on machine learning for IRB models (EBA/REP/2023/28)](https://www.bankingnewsai.com/ai-regulation/documents/eba-rep-2023-28-ml-irb-follow-up) — Machine Learning for IRB Models — Follow-up report from the consultation on the Discussion paper on machine learning for IRB models (Final)
- [EBA discussion paper on machine learning for IRB models](https://www.bankingnewsai.com/ai-regulation/documents/eba-ml-irb-discussion-paper-2021) — Discussion Paper on machine learning for IRB models (Superseded)
- [EBA Guidelines on loan origination and monitoring (EBA/GL/2020/06)](https://www.bankingnewsai.com/ai-regulation/documents/eba-gl-2020-06-loan-origination-monitoring) — Guidelines on loan origination and monitoring (In force)
- [EBA Report on Big Data and Advanced Analytics (EBA/REP/2020/01)](https://www.bankingnewsai.com/ai-regulation/documents/eba-rep-2020-01-big-data-advanced-analytics) — Report on Big Data and Advanced Analytics (Final)

**[EIOPA](https://www.bankingnewsai.com/ai-regulation/eiopa)**

- [EIOPA Opinion on AI governance and risk management (EIOPA-BoS-25-360)](https://www.bankingnewsai.com/ai-regulation/documents/eiopa-opinion-ai-governance-2025) — EIOPA-BoS-25-360 Opinion on AI governance and risk management (In force)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [2026 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2026) — The Bank of England and FCA's 2026 AI Survey (Final)
- [BoE response to Treasury Committee AI inquiry (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-response-tsc-ai-inquiry-2026) — Response to TSC inquiry report on AI in financial services (Final)
- [BoE/PRA plan for safe AI innovation (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-safe-ai-innovation-plan-letter-2026) — Letter from Sarah Breeden and Sam Woods to the Chancellor and Secretaries of State on enabling safe AI innovation (Final)
- [PRA AI/ML model-risk roundtable (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/pra-mrm-roundtable-ai-ml-2025) — The PRA holds model risk management roundtable on artificial intelligence and machine learning technologies (Final)
- [UK AI white paper government response (CP 1019)](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-white-paper-response-2024) — A pro-innovation approach to AI regulation: government response to consultation (CP 1019) (In force)
- [FS2/23](https://www.bankingnewsai.com/ai-regulation/documents/uk-fs2-23-ai-and-machine-learning) — Feedback Statement 2/23: Artificial Intelligence and Machine Learning (Final)
- [PRA SS1/23](https://www.bankingnewsai.com/ai-regulation/documents/pra-ss1-23-model-risk-management) — Supervisory Statement 1/23: Model risk management principles for banks (In force)
- [ICO Guidance on AI and data protection](https://www.bankingnewsai.com/ai-regulation/documents/ico-guidance-ai-data-protection) — Guidance on AI and data protection (ICO) (In force)
- [DP5/22](https://www.bankingnewsai.com/ai-regulation/documents/uk-dp5-22-ai-and-machine-learning) — Discussion Paper 5/22: Artificial Intelligence and Machine Learning (Final)
- [2022 BoE/FCA ML survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ml-in-financial-services-survey-2022) — Machine learning in UK financial services (2022 survey) (Superseded)
- [FCA PS22/9 Consumer Duty](https://www.bankingnewsai.com/ai-regulation/documents/fca-ps22-9-consumer-duty) — PS22/9: A new Consumer Duty — Feedback to CP21/36 and final rules (with FG22/5 guidance) (In force)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin/Bundesbank ML in risk models results](https://www.bankingnewsai.com/ai-regulation/documents/bafin-bundesbank-ml-risk-models-2022) — Machine learning in risk models – Characteristics and supervisory priorities: Responses to the consultation paper (Final)
- [BaFin BDAI principles paper](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-principles-2021) — Big data and artificial intelligence: Principles for the use of algorithms in decision-making processes (Final)

**[ACPR](https://www.bankingnewsai.com/ai-regulation/acpr)**

- [ACPR discussion document on AI governance](https://www.bankingnewsai.com/ai-regulation/documents/acpr-governance-ai-finance-2020) — Governance of Artificial Intelligence in Finance (Final)

**[DNB / AFM](https://www.bankingnewsai.com/ai-regulation/dnb)**

- [AFM and DNB report on the impact of AI](https://www.bankingnewsai.com/ai-regulation/documents/afm-dnb-ai-impact-report-2024) — The impact of AI on the financial sector and supervision (Final)
- [DNB SAFEST AI principles](https://www.bankingnewsai.com/ai-regulation/documents/dnb-safest-ai-principles-2019) — General principles for the use of Artificial Intelligence in the financial sector (Final)

**[FINMA](https://www.bankingnewsai.com/ai-regulation/finma)**

- [FINMA Guidance 08/2024](https://www.bankingnewsai.com/ai-regulation/documents/finma-guidance-08-2024) — FINMA Guidance 08/2024: Governance and risk management when using artificial intelligence (Final)

**[OSFI](https://www.bankingnewsai.com/ai-regulation/osfi)**

- [OSFI Guideline E-23](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-e-23) — Guideline E-23 – Model Risk Management (2027) (Final · applies from May 1, 2027)
- [OSFI-FCAC AI Risk Report (2024)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fcac-ai-risk-report-2024) — OSFI-FCAC Risk Report - AI Uses and Risks at Federally Regulated Financial Institutions (Final)
- [OSFI Guideline B-10](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-b-10) — Third-Party Risk Management Guideline (In force)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS MindForge AI Risk Management Toolkit](https://www.bankingnewsai.com/ai-regulation/documents/mas-mindforge-ai-risk-management-toolkit-2026) — AI Risk Management: Operationalisation Handbook (Project MindForge AI Risk Management Toolkit) (Final)
- [MAS Consultation Paper P017-2025 (AI Risk Management Guidelines)](https://www.bankingnewsai.com/ai-regulation/documents/mas-consultation-ai-risk-management-guidelines-2025) — Consultation Paper on Guidelines on Artificial Intelligence Risk Management (Proposed · comment period closed)
- [MAS AI Model Risk Management information paper](https://www.bankingnewsai.com/ai-regulation/documents/mas-info-paper-ai-model-risk-management-2024) — Artificial Intelligence Model Risk Management: Observations from a Thematic Review (Information Paper) (Final)
- [MAS FEAT Principles](https://www.bankingnewsai.com/ai-regulation/documents/mas-feat-principles-2018) — Principles to Promote Fairness, Ethics, Accountability and Transparency (FEAT) in the Use of Artificial Intelligence and Data Analytics in Singapore's Financial Sector (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA GenA.I. Sandbox circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-2024) — Generative Artificial Intelligence Sandbox (HKMA circular inviting applications to the GenA.I. Sandbox, 20 September 2024) (In force)
- [HKMA circular on AI for monitoring of suspicious activities](https://www.bankingnewsai.com/ai-regulation/documents/hkma-ai-aml-monitoring-2024) — Use of Artificial Intelligence for Monitoring of Suspicious Activities (HKMA circular, 9 September 2024) (In force)
- [HKMA High-level Principles on Artificial Intelligence](https://www.bankingnewsai.com/ai-regulation/documents/hkma-high-level-principles-ai-2019) — High-level Principles on Artificial Intelligence (HKMA circular to all Authorized Institutions, 1 November 2019) (In force)

**[Hong Kong SFC](https://www.bankingnewsai.com/ai-regulation/sfc)**

- [SFC Circular 24EC55 (generative AI language models)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-genai-language-models-2024) — Circular to licensed corporations - Use of generative AI language models (In force)

**[Japan FSA](https://www.bankingnewsai.com/ai-regulation/japan-fsa)**

- [Japan FSA AI Discussion Paper v1.1](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-v1-1-2026) — AI Discussion Paper (Version 1.1): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Final)
- [Japan FSA AI Discussion Paper v1.0](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-2025) — AI Discussion Paper (Version 1.0): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Superseded)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [APRA AI Letter to Industry (April 2026)](https://www.bankingnewsai.com/ai-regulation/documents/apra-letter-industry-ai-2026) — APRA Letter to Industry on Artificial Intelligence (AI) (Final)
- [APRA CPS 230](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-230) — Prudential Standard CPS 230 Operational Risk Management (In force)

**[RBI](https://www.bankingnewsai.com/ai-regulation/rbi)**

- [RBI draft Guidance on Regulatory Principles for Model Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risk-management-guidance-2026) — Guidance on Regulatory Principles for Model Risk Management, 2026 (draft released for public comments) (Proposed · comment period closed)
- [RBI FREE-AI framework](https://www.bankingnewsai.com/ai-regulation/documents/rbi-free-ai-framework-2025) — Framework for Responsible and Ethical Enablement of Artificial Intelligence (FREE-AI) Committee Report (Final)
- [RBI draft circular on Regulatory Principles for Management of Model Risks in Credit](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risks-credit-circular-2024) — Regulatory Principles for Management of Model Risks in Credit (draft circular for comments) (Proposed · comment period closed)

**[FSB](https://www.bankingnewsai.com/ai-regulation/fsb)**

- [FSB AI sound practices consultation (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-consultation-2026) — Sound Practices for Responsible Adoption of Artificial Intelligence (AI): Consultation report (Proposed · comment period closed)
- [FSB AI monitoring report (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-monitoring-ai-adoption-vulnerabilities-2025) — Monitoring Adoption of Artificial Intelligence and Related Vulnerabilities in the Financial Sector (Final)
- [FSB AI financial stability report (Nov 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-financial-stability-implications-of-ai-2024) — The Financial Stability Implications of Artificial Intelligence (Final)
- [FSB 2017 AI/ML report](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-ml-financial-services-2017) — Artificial intelligence and machine learning in financial services: Market developments and financial stability implications (Final)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS 239 Implementation Newsletter (Jan 2026)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-newsletter-bcbs239-implementation-2026) — Implementation of the Principles for effective risk data aggregation and risk reporting (BCBS 239 Principles) (Final)
- [BCBS Digitalisation of finance report (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-digitalisation-of-finance-2024) — Digitalisation of finance (Final)
- [BCBS AI/ML Newsletter (March 2022)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-newsletter-ai-ml-2022) — Newsletter on artificial intelligence and machine learning (Final)
- [BCBS 239](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-239) — Principles for effective risk data aggregation and risk reporting (In force)

**[IOSCO](https://www.bankingnewsai.com/ai-regulation/iosco)**

- [IOSCO FR/02/2026](https://www.bankingnewsai.com/ai-regulation/documents/iosco-ai-capital-markets-fr02-2026) — Supervisory Toolkit for AI Use in Capital Markets: Final Report (In force)
- [IOSCO FR06/2021](https://www.bankingnewsai.com/ai-regulation/documents/iosco-fr06-2021-ai-ml-guidance) — The use of artificial intelligence and machine learning by market intermediaries and asset managers: Final Report (In force)

## Which rules cover generative AI and AI agents in banking?

The newest and least-settled area: several 2026 frameworks explicitly carve generative and agentic AI out of formal model-risk rules while signalling that dedicated guidance is coming.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [Bowman: AI in the Financial System (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-bowman-speech-ai-financial-system-2026) — Artificial Intelligence in the Financial System — Vice Chair for Supervision Michelle W. Bowman (Final)
- [SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2) — Revised Guidance on Model Risk Management (In force)
- [SR 23-4](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-23-4) — Interagency Guidance on Third-Party Relationships: Risk Management (In force)

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [OCC Semiannual Risk Perspective, Spring 2026](https://www.bankingnewsai.com/ai-regulation/documents/occ-semiannual-risk-perspective-spring-2026) — Semiannual Risk Perspective from the National Risk Committee, Spring 2026 (Final)
- [OCC Bulletin 2026-13](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2026-13) — Model Risk Management: Revised Guidance (In force)
- [OCC Bulletin 2023-17](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2023-17) — Third-Party Relationships: Interagency Guidance on Risk Management (In force)

**[FDIC](https://www.bankingnewsai.com/ai-regulation/fdic)**

- [FDIC FIL-15-2026](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-15-2026) — Agencies Revise the Interagency Model Risk Management Guidance (In force)
- [FDIC House testimony on AI and innovation (Mar 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-innovation-speed-of-markets-2026) — Innovation at the Speed of Markets: How Regulators Keep Pace with Technology (Final)
- [FDIC 2025 Report on Cybersecurity and Resilience](https://www.bankingnewsai.com/ai-regulation/documents/fdic-cybersecurity-resilience-report-2025) — 2025 Report on Cybersecurity and Resilience (Final)
- [Hill 'Charting a New Course' speech](https://www.bankingnewsai.com/ai-regulation/documents/fdic-charting-new-course-speech-2025) — Charting a New Course: Preliminary Thoughts on FDIC Policy Issues (Final)
- [FDIC 2024 Risk Review](https://www.bankingnewsai.com/ai-regulation/documents/fdic-risk-review-2024) — 2024 Risk Review — Section 5: Operational and Cyber Risks (Final)

**[CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb)**

- [CFPB Chatbots in Consumer Finance (issue spotlight, 2023)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-chatbots-in-consumer-finance-2023) — Chatbots in consumer finance (Final)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [Atkins remarks at Investor Advisory Committee (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/sec-atkins-iac-ai-disclosure-remarks-2026-09) — Remarks at the SEC Investor Advisory Committee Meeting on AI Technologies and the Public Markets Information Ecosystem (Final)
- [Atkins remarks at FSOC AI roundtable (Mar 2026)](https://www.bankingnewsai.com/ai-regulation/documents/sec-atkins-fsoc-ai-roundtable-2026) — Remarks at Financial Stability Oversight Council Artificial Intelligence Innovation Series Roundtable on Strategy and Governance Principles (Final)
- [Investor Advisory Committee AI disclosure recommendation](https://www.bankingnewsai.com/ai-regulation/documents/sec-iac-ai-disclosure-recommendation-2025) — Recommendation of the SEC Investor Advisory Committee Regarding the Disclosure of Artificial Intelligence's Impact on Operations (Final)
- [Division of Examinations FY2026 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2026) — Examination Priorities: Fiscal Year 2026 — Division of Examinations (In force)
- [Presto Automation AI-washing order](https://www.bankingnewsai.com/ai-regulation/documents/sec-presto-automation-ai-washing-2025) — SEC Charges Restaurant-Technology Company Presto Automation for Misleading Statements About AI Product (Final)
- [Gensler 'AI washing' remarks at Yale (Feb 2024)](https://www.bankingnewsai.com/ai-regulation/documents/sec-gensler-ai-washing-speech-2024) — AI, Finance, Movies, and the Law — Prepared Remarks Before the Yale Law School (Final)

**[CFTC](https://www.bankingnewsai.com/ai-regulation/cftc)**

- [CFTC Innovation Task Force](https://www.bankingnewsai.com/ai-regulation/documents/cftc-innovation-task-force-2026) — Chairman Selig Announces Formation of New Innovation Task Force (In force)
- [CFTC Staff Advisory 24-17 on AI](https://www.bankingnewsai.com/ai-regulation/documents/cftc-staff-advisory-24-17) — Staff Advisory on the Use of Artificial Intelligence in CFTC-Regulated Markets (CFTC Letter No. 24-17) (In force)

**[FinCEN](https://www.bankingnewsai.com/ai-regulation/fincen)**

- [FIN-2026-Alert005 (Digital Asset Investment Scam Centers)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2026-scam-centers) — FinCEN Alert on Money Laundering Activity Associated with Digital Asset Investment Scam Centers (In force)
- [FIN-2026-Alert004 (Federal Student Aid Fraud)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2026-federal-student-aid-fraud) — FinCEN Alert on Fraud Schemes Targeting Federal Student Aid (In force)
- [2026 AML/CFT Program Proposed Rule](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-cft-program-nprm-2026) — Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2026) (Proposed · comment period closed)
- [FIN-2024-Alert004 (Deepfake Media)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2024-deepfake-media) — FinCEN Alert on Fraud Schemes Involving Deepfake Media Targeting Financial Institutions (In force)
- [2024 AML/CFT Program Proposed Rule (withdrawn)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-cft-program-nprm-2024) — Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2024) (Withdrawn)
- [FinCEN Innovation Hours](https://www.bankingnewsai.com/ai-regulation/documents/fincen-innovation-hours-2019) — FinCEN's Innovation Initiative: Implementation of FinCEN Innovation Hours; Invitation to Request Innovation Hours Meeting (In force)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [FSOC AI Innovation Series (Mar–May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fsoc-ai-innovation-series-2026) — Artificial Intelligence Innovation Series — FSOC and Treasury AI Transformation Office roundtables (Final)
- [Treasury FS AI RMF and AI Lexicon (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fs-ai-rmf-and-ai-lexicon-2026) — Financial Services AI Risk Management Framework (FS AI RMF) and Artificial Intelligence Lexicon (Final)
- [FSOC 2025 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2025) — Financial Stability Oversight Council 2025 Annual Report — Section 3.4, Harnessing Artificial Intelligence to Promote Financial Stability (Final)
- [Treasury AI in Financial Services report (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-report-2024) — Artificial Intelligence in Financial Services — Report on the Uses, Opportunities, and Risks of AI in the Financial Services Sector (Final)
- [FSOC 2024 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2024) — Financial Stability Oversight Council 2024 Annual Report — Section 3.3.3, The Use of Artificial Intelligence in Financial Services (Superseded)
- [Treasury AI cybersecurity risks report (Mar 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-cybersecurity-risks-report-2024) — Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector (Final)
- [FSOC 2023 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2023) — Financial Stability Oversight Council 2023 Annual Report — Section 3.3.3, The Use of Artificial Intelligence in Financial Services (Superseded)

**[White House](https://www.bankingnewsai.com/ai-regulation/white-house)**

- [America's AI Action Plan](https://www.bankingnewsai.com/ai-regulation/documents/americas-ai-action-plan-2025) — America's AI Action Plan (In force)
- [EO 14179](https://www.bankingnewsai.com/ai-regulation/documents/eo-14179) — Removing Barriers to American Leadership in Artificial Intelligence (In force)

**[FINRA](https://www.bankingnewsai.com/ai-regulation/finra)**

- [2026 FINRA Annual Regulatory Oversight Report](https://www.bankingnewsai.com/ai-regulation/documents/finra-annual-regulatory-oversight-report-2026) — 2026 FINRA Annual Regulatory Oversight Report: GenAI: Continuing and Emerging Trends (In force)
- [FINRA Regulatory Notice 24-09](https://www.bankingnewsai.com/ai-regulation/documents/finra-regulatory-notice-24-09) — FINRA Reminds Members of Regulatory Obligations When Using Generative Artificial Intelligence and Large Language Models (In force)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [DFS Frontier AI Models Industry Letter (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-frontier-ai-models) — Heightened Cybersecurity Risks Associated with Frontier AI Models (In force)
- [New York RAISE Act](https://www.bankingnewsai.com/ai-regulation/documents/ny-raise-act) — Responsible AI Safety and Education (RAISE) Act, General Business Law Article 44-B (Chapter 699 of the Laws of 2025, as amended by Chapter 96 of the Laws of 2026) (Final · applies from Jan 1, 2027)
- [DFS AI Cybersecurity Industry Letter (Oct 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2024-10-16-ai-cyber-risks) — Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks (In force)
- [DFS Virtual Currency Customer Service Guidance (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2024-05-30-vce-customer-service) — Guidance Regarding Customer Service Requests and Complaints (Virtual Currency Entities) (In force)

**[Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act)**

- [HB 26-1263](https://www.bankingnewsai.com/ai-regulation/documents/co-hb26-1263) — Conversational Artificial Intelligence Service Operator Requirements (Chatbot Safety Act) (Final · applies from Jan 1, 2027)

**[California CPPA](https://www.bankingnewsai.com/ai-regulation/california)**

- [California SB 53 (Transparency in Frontier AI Act)](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-53-2025) — Senate Bill 53: Artificial intelligence models: large developers (Transparency in Frontier Artificial Intelligence Act), Chapter 138, Statutes of 2025 (In force)

**[Texas AG](https://www.bankingnewsai.com/ai-regulation/texas)**

- [Texas TRAIGA (HB 149)](https://www.bankingnewsai.com/ai-regulation/documents/tx-hb-149-traiga) — Texas Responsible Artificial Intelligence Governance Act (H.B. 149, 89th Legislature) (In force)

**[Utah Division of Consumer Protection](https://www.bankingnewsai.com/ai-regulation/utah)**

- [Utah SB 226 (2025)](https://www.bankingnewsai.com/ai-regulation/documents/ut-sb-226-2025) — S.B. 226 Artificial Intelligence Consumer Protection Amendments (In force)
- [Utah AI Policy Act (SB 149)](https://www.bankingnewsai.com/ai-regulation/documents/ut-sb-149-ai-policy-act) — S.B. 149 Artificial Intelligence Amendments (creating the Utah Artificial Intelligence Policy Act) (In force)

**[NIST](https://www.bankingnewsai.com/ai-regulation/nist)**

- [CAISI RFI on AI agent security (2026)](https://www.bankingnewsai.com/ai-regulation/documents/nist-caisi-rfi-ai-agent-security-2026) — Request for Information: Security Considerations for Artificial Intelligence Agents (Proposed · comment period closed)
- [NIST IR 8596 (Cyber AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ir-8596) — Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile), NIST IR 8596 — preliminary draft (Proposed · comment period closed)
- [NIST COSAiS control overlays](https://www.bankingnewsai.com/ai-regulation/documents/nist-cosais-control-overlays) — Control Overlays for Securing AI Systems (COSAiS): SP 800-53 overlays for generative, predictive and agentic AI (Proposed)
- [NIST AI 100-2e2025 (Adversarial ML)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-2e2025) — Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST AI 100-2e2025) (Final)
- [NIST AI 600-1 (Generative AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-600-1) — Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) (In force)
- [NIST SP 800-218A (SSDF profile for generative AI)](https://www.bankingnewsai.com/ai-regulation/documents/nist-sp-800-218a) — Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile (NIST SP 800-218A) (In force)
- [NIST AI RMF 1.0](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-1) — Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 (In force)
- [NIST AI RMF Playbook](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-rmf-playbook) — AI Risk Management Framework Playbook (In force)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [Regulation (EU) 2026/1744 (Digital Omnibus on AI)](https://www.bankingnewsai.com/ai-regulation/documents/eu-digital-omnibus-ai-regulation-2026-1744) — Regulation (EU) 2026/1744 amending Regulation (EU) 2024/1689 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) (In force)
- [Commission guidelines on AI Act Article 50 transparency](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-act-article-50-transparency-2026) — Commission Guidelines on the implementation of the transparency obligations for certain AI systems under Article 50 of Regulation (EU) 2024/1689 (AI Act) (In force)
- [Commission GPAI model guidelines](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-gpai-obligations-2025) — Commission Guidelines on the scope of the obligations for general-purpose AI models established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [General-Purpose AI Code of Practice](https://www.bankingnewsai.com/ai-regulation/documents/eu-gpai-code-of-practice-2025) — General-Purpose AI Code of Practice under the AI Act (Transparency, Copyright, and Safety and Security chapters) (In force)
- [Commission guidelines on the AI system definition](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-system-definition-2025) — Commission Guidelines on the definition of an artificial intelligence system established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689) — Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) (In force)
- [DORA (Regulation (EU) 2022/2554)](https://www.bankingnewsai.com/ai-regulation/documents/eu-dora-regulation-2022-2554) — Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act, DORA) (In force)

**[ECB](https://www.bankingnewsai.com/ai-regulation/ecb)**

- [ECB 'Dear CEO' letter on AI-enabled cybersecurity threats (SSM-2026-0301)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-letter-ai-enabled-cybersecurity-threats-2026) — Addressing AI-enabled cybersecurity threats — letter from the Chair of the Supervisory Board to CEOs of significant institutions (In force)
- [Elderson speech: 'Strengthening operational resilience for the age of AI' (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-elderson-operational-resilience-age-of-ai-speech-2026) — Strengthening operational resilience for the age of AI — speech by Frank Elderson (Final)
- [Machado speech: 'Technology is neutral, governance is not' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-technology-neutral-governance-speech-2026) — Technology is neutral, governance is not: AI adoption in the banking sector — speech by Pedro Machado (Final)
- [Montagner speech: 'Encouraging innovation, managing risks' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-montagner-digital-transformation-speech-2026) — Encouraging innovation, managing risks: the ECB's approach to digital transformation — speech by Patrick Montagner (Final)
- [SSM supervisory priorities 2026–28](https://www.bankingnewsai.com/ai-regulation/documents/ecb-ssm-supervisory-priorities-2026-28) — ECB Banking Supervision: SSM supervisory priorities for 2026–28 (In force)
- [Machado speech: 'Artificial intelligence and supervision: innovation with caution' (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-ai-and-supervision-speech-2025) — Artificial intelligence and supervision: innovation with caution — speech by Pedro Machado (Final)
- [ECB Guide on outsourcing cloud services](https://www.bankingnewsai.com/ai-regulation/documents/ecb-guide-outsourcing-cloud-services-2025) — ECB Guide on outsourcing cloud services to cloud service providers (In force)
- [Supervision Newsletter: suptech infrastructure (May 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-supervision-newsletter-suptech-may-2025) — Benefits from advanced technology infrastructure in supervision (Supervision Newsletter, May 2025) (Final)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [ESA Statement on ICT risks from frontier AI models (JC 2026 25)](https://www.bankingnewsai.com/ai-regulation/documents/esas-jc-2026-25-frontier-ai-statement) — ESA Statement: Toward a consistent and risk-based approach for ICT risks from frontier AI models (In force)
- [EBA report: Rising application of AI in EU banking and payments (Sep 2025)](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-adoption-report-2025) — Rising application of AI in EU banking and payments sector (Final)

**[ESMA](https://www.bankingnewsai.com/ai-regulation/esma)**

- [ESMA AI statement ESMA35-335435667-5924](https://www.bankingnewsai.com/ai-regulation/documents/esma-public-statement-ai-investment-services-2024) — Public Statement on the use of Artificial Intelligence (AI) in the provision of retail investment services (Final)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [Bailey: Frontier AI and the Question of Governance (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-bailey-frontier-ai-governance-2026) — Frontier AI and the Question of Governance — Governor Andrew Bailey (Final)
- [FCA multi-firm review: Frontier AI and cyber resilience (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fca-frontier-ai-cyber-resilience-2026) — Frontier AI and Cyber Resilience (In force)
- [HM Treasury Financial Services AI Adoption Plan (Jul 2026)](https://www.bankingnewsai.com/ai-regulation/documents/hmt-financial-services-ai-adoption-plan-2026) — Financial Services AI Adoption Plan (Final)
- [2026 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2026) — The Bank of England and FCA's 2026 AI Survey (Final)
- [BoE/FCA/HMT joint statement on frontier AI and cyber resilience (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/uk-joint-statement-frontier-ai-cyber-resilience-2026) — The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience (In force)
- [BoE response to Treasury Committee AI inquiry (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-response-tsc-ai-inquiry-2026) — Response to TSC inquiry report on AI in financial services (Final)
- [BoE/PRA plan for safe AI innovation (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-safe-ai-innovation-plan-letter-2026) — Letter from Sarah Breeden and Sam Woods to the Chancellor and Secretaries of State on enabling safe AI innovation (Final)
- [PRA AI/ML model-risk roundtable (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/pra-mrm-roundtable-ai-ml-2025) — The PRA holds model risk management roundtable on artificial intelligence and machine learning technologies (Final)
- [FCA FS25/5](https://www.bankingnewsai.com/ai-regulation/documents/fca-fs25-5-ai-live-testing) — FS25/5: AI Live Testing (Final)
- [FPC Financial Stability in Focus: AI (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/boe-fpc-fsif-ai-financial-system-2025) — Financial Stability in Focus: Artificial intelligence in the financial system (Final)
- [2024 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2024) — Artificial intelligence in UK financial services – 2024 (Final)
- [UK AI white paper government response (CP 1019)](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-white-paper-response-2024) — A pro-innovation approach to AI regulation: government response to consultation (CP 1019) (In force)
- [PRA SS1/23](https://www.bankingnewsai.com/ai-regulation/documents/pra-ss1-23-model-risk-management) — Supervisory Statement 1/23: Model risk management principles for banks (In force)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin guidance on ICT risks in the use of AI](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-ict-risk-guidance-2025) — Guidance on ICT Risks in the Use of AI at Financial Entities (Final)

**[FINMA](https://www.bankingnewsai.com/ai-regulation/finma)**

- [FINMA Guidance 08/2024](https://www.bankingnewsai.com/ai-regulation/documents/finma-guidance-08-2024) — FINMA Guidance 08/2024: Governance and risk management when using artificial intelligence (Final)

**[OSFI](https://www.bankingnewsai.com/ai-regulation/osfi)**

- [OSFI FIFAI II report (AGILE framework)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fifai-report-2026) — FIFAI II: AI Risks and Opportunities: Adopting an AGILE Framework in Canadian Financial Services (Final)
- [OSFI Guideline E-23](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-e-23) — Guideline E-23 – Model Risk Management (2027) (Final · applies from May 1, 2027)
- [OSFI-FCAC AI Risk Report (2024)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fcac-ai-risk-report-2024) — OSFI-FCAC Risk Report - AI Uses and Risks at Federally Regulated Financial Institutions (Final)
- [OSFI Guideline B-10](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-b-10) — Third-Party Risk Management Guideline (In force)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS MindForge AI Risk Management Toolkit](https://www.bankingnewsai.com/ai-regulation/documents/mas-mindforge-ai-risk-management-toolkit-2026) — AI Risk Management: Operationalisation Handbook (Project MindForge AI Risk Management Toolkit) (Final)
- [MAS Consultation Paper P017-2025 (AI Risk Management Guidelines)](https://www.bankingnewsai.com/ai-regulation/documents/mas-consultation-ai-risk-management-guidelines-2025) — Consultation Paper on Guidelines on Artificial Intelligence Risk Management (Proposed · comment period closed)
- [MAS Circular MAS/TCRS/2025/06](https://www.bankingnewsai.com/ai-regulation/documents/mas-circular-cyber-risks-deepfakes-2025) — Cyber Risks Associated with Deepfakes (Information Paper) (In force)
- [MAS AI Model Risk Management information paper](https://www.bankingnewsai.com/ai-regulation/documents/mas-info-paper-ai-model-risk-management-2024) — Artificial Intelligence Model Risk Management: Observations from a Thematic Review (Information Paper) (Final)
- [MAS Circular MAS/TCRS/2024/05](https://www.bankingnewsai.com/ai-regulation/documents/mas-circular-cyber-risks-generative-ai-2024) — Cyber Risks Associated with Generative Artificial Intelligence (Information Paper) (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA GenA.I. Sandbox++ joint circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-plus-plus-2026) — Joint Circular on the Expansion of Generative Artificial Intelligence Sandbox (HKMA, SFC, Insurance Authority and MPFA, 5 March 2026) (In force)
- [HKMA GenA.I. Sandbox circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-2024) — Generative Artificial Intelligence Sandbox (HKMA circular inviting applications to the GenA.I. Sandbox, 20 September 2024) (In force)
- [HKMA GenAI consumer protection circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-consumer-protection-2024) — Consumer Protection in respect of Use of Generative Artificial Intelligence (HKMA circular, 19 August 2024) (In force)

**[Hong Kong SFC](https://www.bankingnewsai.com/ai-regulation/sfc)**

- [SFC Circular 26EC32 (AI-enabled cyberattacks)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-ai-enabled-cyberattacks-2026) — Circular to licensed corporations, SFC-licensed virtual asset service providers and associated entities - Enhanced cybersecurity measures to address evolving risks arising from artificial intelligence-enabled cyberattacks (In force)
- [SFC Circular 24EC55 (generative AI language models)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-genai-language-models-2024) — Circular to licensed corporations - Use of generative AI language models (In force)

**[Japan FSA](https://www.bankingnewsai.com/ai-regulation/japan-fsa)**

- [Japan FSA/BOJ frontier AI request](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-boj-frontier-ai-request-2026) — Request regarding 'Short-term Responses by Financial Institutions in Light of Threat Changes from Frontier AI' (「フロンティアAIによる脅威変化を踏まえた金融機関等の短期的な対応」に係る要請について) (In force)
- [Japan FSA AI Discussion Paper v1.1](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-v1-1-2026) — AI Discussion Paper (Version 1.1): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Final)
- [Japan FSA AI Discussion Paper v1.0](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-2025) — AI Discussion Paper (Version 1.0): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Superseded)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [APRA AI Letter to Industry (April 2026)](https://www.bankingnewsai.com/ai-regulation/documents/apra-letter-industry-ai-2026) — APRA Letter to Industry on Artificial Intelligence (AI) (Final)
- [ASIC REP 798](https://www.bankingnewsai.com/ai-regulation/documents/asic-rep-798) — REP 798 Beware the gap: Governance arrangements in the face of AI innovation (Final)
- [APRA CPS 230](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-230) — Prudential Standard CPS 230 Operational Risk Management (In force)
- [APRA CPS 234](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-234) — Prudential Standard CPS 234 Information Security (In force)

**[RBI](https://www.bankingnewsai.com/ai-regulation/rbi)**

- [RBI draft Guidance on Regulatory Principles for Model Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risk-management-guidance-2026) — Guidance on Regulatory Principles for Model Risk Management, 2026 (draft released for public comments) (Proposed · comment period closed)
- [RBI FREE-AI framework](https://www.bankingnewsai.com/ai-regulation/documents/rbi-free-ai-framework-2025) — Framework for Responsible and Ethical Enablement of Artificial Intelligence (FREE-AI) Committee Report (Final)

**[FSB](https://www.bankingnewsai.com/ai-regulation/fsb)**

- [FSB Chair's letter to G20 (Aug 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-chair-letter-g20-august-2026) — FSB Chair's letter to G20 Finance Ministers and Central Bank Governors: August 2026 — risks arising from frontier artificial intelligence models (Final)
- [Bowman remarks at FSB AI outreach (July 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-bowman-remarks-ai-sound-practices-2026) — Opening remarks on sound practices for artificial intelligence (FSB virtual outreach event) (Final)
- [FSB AI sound practices consultation (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-consultation-2026) — Sound Practices for Responsible Adoption of Artificial Intelligence (AI): Consultation report (Proposed · comment period closed)
- [FSB AI financial stability report (Nov 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-financial-stability-implications-of-ai-2024) — The Financial Stability Implications of Artificial Intelligence (Final)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS ICT Risk Management Report (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-ict-risk-management-range-of-practices-2026) — Information and communication technology risk management: range of practices (Final)
- [BCBS Third-Party Risk Principles (Dec 2025)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-third-party-risk-principles-2025) — Principles for the sound management of third-party risk (In force)
- [BCBS Digitalisation of finance report (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-digitalisation-of-finance-2024) — Digitalisation of finance (Final)

**[IOSCO](https://www.bankingnewsai.com/ai-regulation/iosco)**

- [IOSCO FR/02/2026](https://www.bankingnewsai.com/ai-regulation/documents/iosco-ai-capital-markets-fr02-2026) — Supervisory Toolkit for AI Use in Capital Markets: Final Report (In force)

## Which rules apply when a bank buys AI from a vendor?

Outsourcing does not outsource accountability: third-party risk management guidance treats AI vendors, foundation-model providers and cloud AI services as critical relationships.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [Bowman: AI in the Financial System (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-bowman-speech-ai-financial-system-2026) — Artificial Intelligence in the Financial System — Vice Chair for Supervision Michelle W. Bowman (Final)
- [SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2) — Revised Guidance on Model Risk Management (In force)
- [SR 23-4](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-23-4) — Interagency Guidance on Third-Party Relationships: Risk Management (In force)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/fed-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [SR 11-7](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-11-7) — Supervisory Guidance on Model Risk Management (Superseded)

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [OCC Semiannual Risk Perspective, Spring 2026](https://www.bankingnewsai.com/ai-regulation/documents/occ-semiannual-risk-perspective-spring-2026) — Semiannual Risk Perspective from the National Risk Committee, Spring 2026 (Final)
- [OCC Bulletin 2026-13](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2026-13) — Model Risk Management: Revised Guidance (In force)
- [OCC Bulletin 2023-17](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2023-17) — Third-Party Relationships: Interagency Guidance on Risk Management (In force)
- [2021 Interagency AI RFI (OCC Bulletin 2021-17)](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-17-ai-rfi) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [OCC Bulletin 2011-12](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2011-12) — Sound Practices for Model Risk Management: Supervisory Guidance on Model Risk Management (Superseded)

**[FDIC](https://www.bankingnewsai.com/ai-regulation/fdic)**

- [FDIC FIL-15-2026](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-15-2026) — Agencies Revise the Interagency Model Risk Management Guidance (In force)
- [Hill 'Charting a New Course' speech](https://www.bankingnewsai.com/ai-regulation/documents/fdic-charting-new-course-speech-2025) — Charting a New Course: Preliminary Thoughts on FDIC Policy Issues (Final)
- [FDIC FIL-29-2023](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-29-2023) — Interagency Guidance on Third-Party Relationships: Risk Management (In force)
- [FDIC FIL-27-2021](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-27-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML and OFAC Compliance (Superseded)

**[NCUA](https://www.bankingnewsai.com/ai-regulation/ncua)**

- [NCUA Credit Union AI Resource Center](https://www.bankingnewsai.com/ai-regulation/documents/ncua-credit-union-ai-resource-center) — Artificial Intelligence (AI) — Credit Union AI Resource Center and AI Resources page (In force)
- [NCUA Board AI briefing (Jul 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-ai-board-briefing-2025) — Board Briefing: Artificial Intelligence and Its Use Within the Credit Union Industry and the NCUA (Final)
- [NCUA Financial Innovation Rule (2023)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-financial-innovation-rule-2023) — Financial Innovation: Loan Participations, Eligible Obligations, and Notes of Liquidating Credit Unions (final rule) (In force)
- [NCUA testimony to House AI Task Force (2022)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-ai-task-force-testimony-2022) — Written Testimony of Kelly Lay, Director of the Office of Examination and Insurance, before the House Financial Services Task Force on Artificial Intelligence (Final)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/ncua-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [NCUA Letter 07-CU-13](https://www.bankingnewsai.com/ai-regulation/documents/ncua-letter-07-cu-13) — Evaluating Third Party Relationships (In force)

**[CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb)**

- [FCRA adverse action and credit-score disclosures (15 U.S.C. 1681m, 1681g(f))](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-fcra-adverse-action-key-factors) — Fair Credit Reporting Act — adverse-action notices based on consumer reports and disclosure of key factors affecting credit scores (In force)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [SEC v. Saniger (Nate, Inc.)](https://www.bankingnewsai.com/ai-regulation/documents/sec-nate-saniger-ai-washing-2025) — SEC Charges Founder of Nate, Inc. with Fraud Over False Claims About the Company's Use of Artificial Intelligence (Final)
- [Presto Automation AI-washing order](https://www.bankingnewsai.com/ai-regulation/documents/sec-presto-automation-ai-washing-2025) — SEC Charges Restaurant-Technology Company Presto Automation for Misleading Statements About AI Product (Final)
- [Division of Examinations FY2025 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2025) — Examination Priorities: Fiscal Year 2025 — Division of Examinations (Superseded)

**[CFTC](https://www.bankingnewsai.com/ai-regulation/cftc)**

- [CFTC Staff Advisory 24-17 on AI](https://www.bankingnewsai.com/ai-regulation/documents/cftc-staff-advisory-24-17) — Staff Advisory on the Use of Artificial Intelligence in CFTC-Regulated Markets (CFTC Letter No. 24-17) (In force)

**[FinCEN](https://www.bankingnewsai.com/ai-regulation/fincen)**

- [2021 BSA/AML Model Risk Management Statement](https://www.bankingnewsai.com/ai-regulation/documents/fincen-bsa-aml-model-risk-statement-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting Bank Secrecy Act/Anti-Money Laundering Compliance (Withdrawn)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [Treasury FS AI RMF and AI Lexicon (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fs-ai-rmf-and-ai-lexicon-2026) — Financial Services AI Risk Management Framework (FS AI RMF) and Artificial Intelligence Lexicon (Final)
- [FSOC 2025 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2025) — Financial Stability Oversight Council 2025 Annual Report — Section 3.4, Harnessing Artificial Intelligence to Promote Financial Stability (Final)
- [Treasury AI in Financial Services report (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-report-2024) — Artificial Intelligence in Financial Services — Report on the Uses, Opportunities, and Risks of AI in the Financial Services Sector (Final)
- [FSOC 2024 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2024) — Financial Stability Oversight Council 2024 Annual Report — Section 3.3.3, The Use of Artificial Intelligence in Financial Services (Superseded)
- [Treasury AI RFI (June 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-rfi-2024) — Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)
- [Treasury AI cybersecurity risks report (Mar 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-cybersecurity-risks-report-2024) — Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector (Final)

**[FINRA](https://www.bankingnewsai.com/ai-regulation/finra)**

- [2026 FINRA Annual Regulatory Oversight Report](https://www.bankingnewsai.com/ai-regulation/documents/finra-annual-regulatory-oversight-report-2026) — 2026 FINRA Annual Regulatory Oversight Report: GenAI: Continuing and Emerging Trends (In force)
- [FINRA Regulatory Notice 24-09](https://www.bankingnewsai.com/ai-regulation/documents/finra-regulatory-notice-24-09) — FINRA Reminds Members of Regulatory Obligations When Using Generative Artificial Intelligence and Large Language Models (In force)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [DFS Frontier AI Models Industry Letter (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-frontier-ai-models) — Heightened Cybersecurity Risks Associated with Frontier AI Models (In force)
- [DFS Heightened Threat Environment Guidance (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-heightened-threat-environment) — Guidance on Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment (In force)
- [New York RAISE Act](https://www.bankingnewsai.com/ai-regulation/documents/ny-raise-act) — Responsible AI Safety and Education (RAISE) Act, General Business Law Article 44-B (Chapter 699 of the Laws of 2025, as amended by Chapter 96 of the Laws of 2026) (Final · applies from Jan 1, 2027)
- [DFS AI Cybersecurity Industry Letter (Oct 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2024-10-16-ai-cyber-risks) — Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks (In force)
- [Insurance Circular Letter No. 7 (2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-insurance-circular-letter-2024-07) — Use of Artificial Intelligence Systems and External Consumer Data and Information Sources in Insurance Underwriting and Pricing (In force)
- [23 NYCRR Part 500](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-23-nycrr-part-500) — Cybersecurity Requirements for Financial Services Companies (Second Amendment) (In force)

**[NYC DCWP](https://www.bankingnewsai.com/ai-regulation/new-york-city)**

- [NYC Local Law 144 (AEDT)](https://www.bankingnewsai.com/ai-regulation/documents/nyc-local-law-144) — A Local Law to amend the administrative code of the city of New York, in relation to automated employment decision tools (Local Law 144 of 2021) and DCWP final rule (In force)

**[Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act)**

- [Colorado AG proposed ADMT rules](https://www.bankingnewsai.com/ai-regulation/documents/co-ag-admt-proposed-rules-2026) — Proposed Automated Decision-Making Technology and Conversational AI Service Rules (Notice of Rulemaking Hearing) (Comment period open)
- [SB 26-189](https://www.bankingnewsai.com/ai-regulation/documents/co-sb26-189) — Automated Decision-Making Technology Act (repeal and reenactment of the Colorado AI Act) (Final · applies from Jan 1, 2027)
- [Colorado SB 21-169 and Regulation 10-1-1](https://www.bankingnewsai.com/ai-regulation/documents/co-sb21-169) — Protecting Consumers from Unfair Discrimination in Insurance Practices (SB21-169, C.R.S. § 10-3-1104.9) and Colorado Insurance Regulation 10-1-1 (3 CCR 702-10) (In force)

**[California CPPA](https://www.bankingnewsai.com/ai-regulation/california)**

- [California SB 53 (Transparency in Frontier AI Act)](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-53-2025) — Senate Bill 53: Artificial intelligence models: large developers (Transparency in Frontier Artificial Intelligence Act), Chapter 138, Statutes of 2025 (In force)
- [Civil Rights Council ADS employment regulations](https://www.bankingnewsai.com/ai-regulation/documents/ca-crc-ads-employment-regulations-2025) — Modifications to Employment Regulations Regarding Automated-Decision Systems (Fair Employment and Housing Act regulations, 2 CCR) (In force)

**[Illinois IDHR](https://www.bankingnewsai.com/ai-regulation/illinois)**

- [Illinois HB 3773 (P.A. 103-0804)](https://www.bankingnewsai.com/ai-regulation/documents/il-hb-3773) — Illinois Human Rights Act amendments on artificial intelligence in employment (H.B. 3773, Public Act 103-0804) (In force)
- [Illinois AI Video Interview Act (820 ILCS 42)](https://www.bankingnewsai.com/ai-regulation/documents/il-ai-video-interview-act) — Artificial Intelligence Video Interview Act (820 ILCS 42) (In force)

**[Massachusetts AG](https://www.bankingnewsai.com/ai-regulation/massachusetts)**

- [Massachusetts AG Earnest Operations settlement (July 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-earnest-settlement-2025) — Assurance of Discontinuance: In the matter of Earnest Operations LLC (Massachusetts Attorney General, announced July 10, 2025) (In force)
- [Massachusetts AG AI Advisory (April 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-ai-advisory-2024) — Attorney General Advisory on the Application of the Commonwealth's Consumer Protection, Civil Rights, and Data Privacy Laws to Artificial Intelligence (In force)

**[New Jersey DCR](https://www.bankingnewsai.com/ai-regulation/new-jersey)**

- [NJ DCR Algorithmic Discrimination Guidance (January 2025)](https://www.bankingnewsai.com/ai-regulation/documents/nj-dcr-algorithmic-discrimination-guidance-2025) — Guidance on Algorithmic Discrimination and the New Jersey Law Against Discrimination (In force)

**[NIST](https://www.bankingnewsai.com/ai-regulation/nist)**

- [AI RMF critical-infrastructure profile (concept note)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-rmf-critical-infrastructure-profile-concept-note) — Concept Note: AI RMF Profile on Trustworthy AI in Critical Infrastructure (Proposed)
- [NIST COSAiS control overlays](https://www.bankingnewsai.com/ai-regulation/documents/nist-cosais-control-overlays) — Control Overlays for Securing AI Systems (COSAiS): SP 800-53 overlays for generative, predictive and agentic AI (Proposed)
- [NIST AI 600-1 (Generative AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-600-1) — Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) (In force)
- [NIST SP 800-218A (SSDF profile for generative AI)](https://www.bankingnewsai.com/ai-regulation/documents/nist-sp-800-218a) — Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile (NIST SP 800-218A) (In force)
- [NIST AI RMF 1.0](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-1) — Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 (In force)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [EBA factsheet on the AI Act](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-banking-payments-2025) — AI Act: implications for the EU banking and payments sector (EBA factsheet) (Final)
- [Commission GPAI model guidelines](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-gpai-obligations-2025) — Commission Guidelines on the scope of the obligations for general-purpose AI models established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [General-Purpose AI Code of Practice](https://www.bankingnewsai.com/ai-regulation/documents/eu-gpai-code-of-practice-2025) — General-Purpose AI Code of Practice under the AI Act (Transparency, Copyright, and Safety and Security chapters) (In force)
- [Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689) — Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) (In force)
- [DORA (Regulation (EU) 2022/2554)](https://www.bankingnewsai.com/ai-regulation/documents/eu-dora-regulation-2022-2554) — Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act, DORA) (In force)

**[ECB](https://www.bankingnewsai.com/ai-regulation/ecb)**

- [ECB 'Dear CEO' letter on AI-enabled cybersecurity threats (SSM-2026-0301)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-letter-ai-enabled-cybersecurity-threats-2026) — Addressing AI-enabled cybersecurity threats — letter from the Chair of the Supervisory Board to CEOs of significant institutions (In force)
- [Elderson speech: 'Strengthening operational resilience for the age of AI' (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-elderson-operational-resilience-age-of-ai-speech-2026) — Strengthening operational resilience for the age of AI — speech by Frank Elderson (Final)
- [Machado speech: 'Technology is neutral, governance is not' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-technology-neutral-governance-speech-2026) — Technology is neutral, governance is not: AI adoption in the banking sector — speech by Pedro Machado (Final)
- [Montagner speech: 'Encouraging innovation, managing risks' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-montagner-digital-transformation-speech-2026) — Encouraging innovation, managing risks: the ECB's approach to digital transformation — speech by Patrick Montagner (Final)
- [Supervision Newsletter: AI use cases for credit scoring and fraud detection (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-supervision-newsletter-ai-credit-scoring-fraud-2025) — AI's impact on banking: use cases for credit scoring and fraud detection (Supervision Newsletter, November 2025) (Final)
- [SSM supervisory priorities 2026–28](https://www.bankingnewsai.com/ai-regulation/documents/ecb-ssm-supervisory-priorities-2026-28) — ECB Banking Supervision: SSM supervisory priorities for 2026–28 (In force)
- [ECB Guide on outsourcing cloud services](https://www.bankingnewsai.com/ai-regulation/documents/ecb-guide-outsourcing-cloud-services-2025) — ECB Guide on outsourcing cloud services to cloud service providers (In force)
- [ECB digitalisation sound practices report (July 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-digitalisation-key-assessment-criteria-2024) — Digitalisation: key assessment criteria and collection of sound practices (In force)
- [Cipollone speech: 'Artificial intelligence: a central bank's view' (July 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-cipollone-ai-central-bank-view-2024) — Artificial intelligence: a central bank's view — speech by Piero Cipollone (Final)
- [ECB FSR May 2024 AI special feature](https://www.bankingnewsai.com/ai-regulation/documents/ecb-fsr-may-2024-ai-special-feature) — The rise of artificial intelligence: benefits and risks for financial stability (Financial Stability Review, May 2024) (Final)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [ESA Statement on ICT risks from frontier AI models (JC 2026 25)](https://www.bankingnewsai.com/ai-regulation/documents/esas-jc-2026-25-frontier-ai-statement) — ESA Statement: Toward a consistent and risk-based approach for ICT risks from frontier AI models (In force)
- [EBA Work Programme 2026](https://www.bankingnewsai.com/ai-regulation/documents/eba-work-programme-2026) — EBA Work Programme 2026 — AI Act implementation and digital-finance priorities (In force)
- [EBA/GL/2022/15 (remote customer onboarding)](https://www.bankingnewsai.com/ai-regulation/documents/eba-gl-2022-15-remote-customer-onboarding) — EBA/GL/2022/15 Guidelines on the use of Remote Customer Onboarding Solutions under Article 13(1) of Directive (EU) 2015/849 (In force)

**[ESMA](https://www.bankingnewsai.com/ai-regulation/esma)**

- [ESMA AI statement ESMA35-335435667-5924](https://www.bankingnewsai.com/ai-regulation/documents/esma-public-statement-ai-investment-services-2024) — Public Statement on the use of Artificial Intelligence (AI) in the provision of retail investment services (Final)

**[EIOPA](https://www.bankingnewsai.com/ai-regulation/eiopa)**

- [EIOPA Opinion on AI governance and risk management (EIOPA-BoS-25-360)](https://www.bankingnewsai.com/ai-regulation/documents/eiopa-opinion-ai-governance-2025) — EIOPA-BoS-25-360 Opinion on AI governance and risk management (In force)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [FCA multi-firm review: Frontier AI and cyber resilience (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fca-frontier-ai-cyber-resilience-2026) — Frontier AI and Cyber Resilience (In force)
- [2026 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2026) — The Bank of England and FCA's 2026 AI Survey (Final)
- [BoE/FCA/HMT joint statement on frontier AI and cyber resilience (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/uk-joint-statement-frontier-ai-cyber-resilience-2026) — The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience (In force)
- [BoE response to Treasury Committee AI inquiry (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-response-tsc-ai-inquiry-2026) — Response to TSC inquiry report on AI in financial services (Final)
- [BoE/PRA plan for safe AI innovation (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-safe-ai-innovation-plan-letter-2026) — Letter from Sarah Breeden and Sam Woods to the Chancellor and Secretaries of State on enabling safe AI innovation (Final)
- [PRA AI/ML model-risk roundtable (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/pra-mrm-roundtable-ai-ml-2025) — The PRA holds model risk management roundtable on artificial intelligence and machine learning technologies (Final)
- [FPC Financial Stability in Focus: AI (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/boe-fpc-fsif-ai-financial-system-2025) — Financial Stability in Focus: Artificial intelligence in the financial system (Final)
- [2024 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2024) — Artificial intelligence in UK financial services – 2024 (Final)
- [FCA AI Update (Apr 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fca-ai-update-2024) — Artificial Intelligence (AI) update – further to the Government's response to the AI White Paper (Final)
- [FS2/23](https://www.bankingnewsai.com/ai-regulation/documents/uk-fs2-23-ai-and-machine-learning) — Feedback Statement 2/23: Artificial Intelligence and Machine Learning (Final)
- [PRA SS1/23](https://www.bankingnewsai.com/ai-regulation/documents/pra-ss1-23-model-risk-management) — Supervisory Statement 1/23: Model risk management principles for banks (In force)
- [DP5/22](https://www.bankingnewsai.com/ai-regulation/documents/uk-dp5-22-ai-and-machine-learning) — Discussion Paper 5/22: Artificial Intelligence and Machine Learning (Final)
- [2022 BoE/FCA ML survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ml-in-financial-services-survey-2022) — Machine learning in UK financial services (2022 survey) (Superseded)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin guidance on ICT risks in the use of AI](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-ict-risk-guidance-2025) — Guidance on ICT Risks in the Use of AI at Financial Entities (Final)

**[ACPR](https://www.bankingnewsai.com/ai-regulation/acpr)**

- [ACPR discussion document on AI governance](https://www.bankingnewsai.com/ai-regulation/documents/acpr-governance-ai-finance-2020) — Governance of Artificial Intelligence in Finance (Final)

**[DNB / AFM](https://www.bankingnewsai.com/ai-regulation/dnb)**

- [DNB SAFEST AI principles](https://www.bankingnewsai.com/ai-regulation/documents/dnb-safest-ai-principles-2019) — General principles for the use of Artificial Intelligence in the financial sector (Final)

**[FINMA](https://www.bankingnewsai.com/ai-regulation/finma)**

- [FINMA Guidance 08/2024](https://www.bankingnewsai.com/ai-regulation/documents/finma-guidance-08-2024) — FINMA Guidance 08/2024: Governance and risk management when using artificial intelligence (Final)

**[OSFI](https://www.bankingnewsai.com/ai-regulation/osfi)**

- [OSFI FIFAI II report (AGILE framework)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fifai-report-2026) — FIFAI II: AI Risks and Opportunities: Adopting an AGILE Framework in Canadian Financial Services (Final)
- [OSFI Guideline E-23](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-e-23) — Guideline E-23 – Model Risk Management (2027) (Final · applies from May 1, 2027)
- [OSFI-FCAC AI Risk Report (2024)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fcac-ai-risk-report-2024) — OSFI-FCAC Risk Report - AI Uses and Risks at Federally Regulated Financial Institutions (Final)
- [OSFI Guideline B-10](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-b-10) — Third-Party Risk Management Guideline (In force)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS MindForge AI Risk Management Toolkit](https://www.bankingnewsai.com/ai-regulation/documents/mas-mindforge-ai-risk-management-toolkit-2026) — AI Risk Management: Operationalisation Handbook (Project MindForge AI Risk Management Toolkit) (Final)
- [MAS Consultation Paper P017-2025 (AI Risk Management Guidelines)](https://www.bankingnewsai.com/ai-regulation/documents/mas-consultation-ai-risk-management-guidelines-2025) — Consultation Paper on Guidelines on Artificial Intelligence Risk Management (Proposed · comment period closed)
- [MAS AI Model Risk Management information paper](https://www.bankingnewsai.com/ai-regulation/documents/mas-info-paper-ai-model-risk-management-2024) — Artificial Intelligence Model Risk Management: Observations from a Thematic Review (Information Paper) (Final)
- [MAS Circular MAS/TCRS/2024/05](https://www.bankingnewsai.com/ai-regulation/documents/mas-circular-cyber-risks-generative-ai-2024) — Cyber Risks Associated with Generative Artificial Intelligence (Information Paper) (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA High-level Principles on Artificial Intelligence](https://www.bankingnewsai.com/ai-regulation/documents/hkma-high-level-principles-ai-2019) — High-level Principles on Artificial Intelligence (HKMA circular to all Authorized Institutions, 1 November 2019) (In force)

**[Hong Kong SFC](https://www.bankingnewsai.com/ai-regulation/sfc)**

- [SFC Circular 26EC32 (AI-enabled cyberattacks)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-ai-enabled-cyberattacks-2026) — Circular to licensed corporations, SFC-licensed virtual asset service providers and associated entities - Enhanced cybersecurity measures to address evolving risks arising from artificial intelligence-enabled cyberattacks (In force)
- [SFC Circular 24EC55 (generative AI language models)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-genai-language-models-2024) — Circular to licensed corporations - Use of generative AI language models (In force)

**[Japan FSA](https://www.bankingnewsai.com/ai-regulation/japan-fsa)**

- [Japan FSA/BOJ frontier AI request](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-boj-frontier-ai-request-2026) — Request regarding 'Short-term Responses by Financial Institutions in Light of Threat Changes from Frontier AI' (「フロンティアAIによる脅威変化を踏まえた金融機関等の短期的な対応」に係る要請について) (In force)
- [Japan FSA AI Discussion Paper v1.1](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-v1-1-2026) — AI Discussion Paper (Version 1.1): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Final)
- [Japan FSA AI Discussion Paper v1.0](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-2025) — AI Discussion Paper (Version 1.0): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Superseded)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [APRA AI Letter to Industry (April 2026)](https://www.bankingnewsai.com/ai-regulation/documents/apra-letter-industry-ai-2026) — APRA Letter to Industry on Artificial Intelligence (AI) (Final)
- [ASIC REP 798](https://www.bankingnewsai.com/ai-regulation/documents/asic-rep-798) — REP 798 Beware the gap: Governance arrangements in the face of AI innovation (Final)
- [APRA CPS 230](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-230) — Prudential Standard CPS 230 Operational Risk Management (In force)
- [APRA CPS 234](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-234) — Prudential Standard CPS 234 Information Security (In force)

**[RBI](https://www.bankingnewsai.com/ai-regulation/rbi)**

- [RBI draft Guidance on Regulatory Principles for Model Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risk-management-guidance-2026) — Guidance on Regulatory Principles for Model Risk Management, 2026 (draft released for public comments) (Proposed · comment period closed)
- [RBI FREE-AI framework](https://www.bankingnewsai.com/ai-regulation/documents/rbi-free-ai-framework-2025) — Framework for Responsible and Ethical Enablement of Artificial Intelligence (FREE-AI) Committee Report (Final)
- [RBI draft circular on Regulatory Principles for Management of Model Risks in Credit](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risks-credit-circular-2024) — Regulatory Principles for Management of Model Risks in Credit (draft circular for comments) (Proposed · comment period closed)

**[FSB](https://www.bankingnewsai.com/ai-regulation/fsb)**

- [FSB Chair's letter to G20 (Aug 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-chair-letter-g20-august-2026) — FSB Chair's letter to G20 Finance Ministers and Central Bank Governors: August 2026 — risks arising from frontier artificial intelligence models (Final)
- [FSB AI sound practices consultation (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-consultation-2026) — Sound Practices for Responsible Adoption of Artificial Intelligence (AI): Consultation report (Proposed · comment period closed)
- [FSB AI monitoring report (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-monitoring-ai-adoption-vulnerabilities-2025) — Monitoring Adoption of Artificial Intelligence and Related Vulnerabilities in the Financial Sector (Final)
- [FSB next steps on AI monitoring (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-next-steps-authorities-ai-monitoring-2025) — FSB outlines next steps for authorities on AI monitoring (Final)
- [FSB AI financial stability report (Nov 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-financial-stability-implications-of-ai-2024) — The Financial Stability Implications of Artificial Intelligence (Final)
- [FSB third-party risk toolkit (2023)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-third-party-risk-toolkit-2023) — Final Report on Enhancing Third-party Risk Management and Oversight: A toolkit for financial institutions and financial authorities (Final)
- [FSB 2017 AI/ML report](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-ml-financial-services-2017) — Artificial intelligence and machine learning in financial services: Market developments and financial stability implications (Final)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS Third-Party Risk Principles (Dec 2025)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-third-party-risk-principles-2025) — Principles for the sound management of third-party risk (In force)
- [BCBS Work Programme 2025–26](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-work-programme-2025-26) — Basel Committee work programme and strategic priorities for 2025/26 (In force)
- [BCBS Digitalisation of finance report (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-digitalisation-of-finance-2024) — Digitalisation of finance (Final)
- [BCBS AI/ML Newsletter (March 2022)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-newsletter-ai-ml-2022) — Newsletter on artificial intelligence and machine learning (Final)
- [BCBS Principles for Operational Resilience (2021)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-principles-operational-resilience-2021) — Principles for Operational Resilience (In force)

**[IOSCO](https://www.bankingnewsai.com/ai-regulation/iosco)**

- [IOSCO FR/02/2026](https://www.bankingnewsai.com/ai-regulation/documents/iosco-ai-capital-markets-fr02-2026) — Supervisory Toolkit for AI Use in Capital Markets: Final Report (In force)
- [IOSCO FR06/2021](https://www.bankingnewsai.com/ai-regulation/documents/iosco-fr06-2021-ai-ml-guidance) — The use of artificial intelligence and machine learning by market intermediaries and asset managers: Final Report (In force)

## Which rules address AI-related cybersecurity risk for banks?

AI as an attack vector (deepfakes, AI-enhanced phishing) and AI as a target (model theft, data poisoning) both fall under existing cyber rules.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [Cook: Opportunities and Risks of AI (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-cook-speech-ai-economy-financial-system-2026) — The Opportunities and Risks AI Presents for the Economy and Financial System — Governor Lisa D. Cook (Final)
- [Bowman: AI in the Financial System (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-bowman-speech-ai-financial-system-2026) — Artificial Intelligence in the Financial System — Vice Chair for Supervision Michelle W. Bowman (Final)
- [SR 23-4](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-23-4) — Interagency Guidance on Third-Party Relationships: Risk Management (In force)

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [OCC Semiannual Risk Perspective, Spring 2026](https://www.bankingnewsai.com/ai-regulation/documents/occ-semiannual-risk-perspective-spring-2026) — Semiannual Risk Perspective from the National Risk Committee, Spring 2026 (Final)
- [OCC Bulletin 2023-17](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2023-17) — Third-Party Relationships: Interagency Guidance on Risk Management (In force)

**[FDIC](https://www.bankingnewsai.com/ai-regulation/fdic)**

- [FDIC 2025 Report on Cybersecurity and Resilience](https://www.bankingnewsai.com/ai-regulation/documents/fdic-cybersecurity-resilience-report-2025) — 2025 Report on Cybersecurity and Resilience (Final)
- [FDIC 2024 Risk Review](https://www.bankingnewsai.com/ai-regulation/documents/fdic-risk-review-2024) — 2024 Risk Review — Section 5: Operational and Cyber Risks (Final)

**[NCUA](https://www.bankingnewsai.com/ai-regulation/ncua)**

- [NCUA Letter 26-CU-01](https://www.bankingnewsai.com/ai-regulation/documents/ncua-letter-26-cu-01) — NCUA's 2026 Supervisory Priorities (In force)
- [NCUA Credit Union AI Resource Center](https://www.bankingnewsai.com/ai-regulation/documents/ncua-credit-union-ai-resource-center) — Artificial Intelligence (AI) — Credit Union AI Resource Center and AI Resources page (In force)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [Division of Examinations FY2026 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2026) — Examination Priorities: Fiscal Year 2026 — Division of Examinations (In force)

**[CFTC](https://www.bankingnewsai.com/ai-regulation/cftc)**

- [CFTC Staff Advisory 24-17 on AI](https://www.bankingnewsai.com/ai-regulation/documents/cftc-staff-advisory-24-17) — Staff Advisory on the Use of Artificial Intelligence in CFTC-Regulated Markets (CFTC Letter No. 24-17) (In force)
- [CFTC AI Request for Comment (2024)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-ai-request-for-comment-2024) — Request for Comment on the Use of Artificial Intelligence in CFTC-Regulated Markets (Final)

**[FinCEN](https://www.bankingnewsai.com/ai-regulation/fincen)**

- [FIN-2024-Alert004 (Deepfake Media)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2024-deepfake-media) — FinCEN Alert on Fraud Schemes Involving Deepfake Media Targeting Financial Institutions (In force)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [FSOC AI Innovation Series (Mar–May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fsoc-ai-innovation-series-2026) — Artificial Intelligence Innovation Series — FSOC and Treasury AI Transformation Office roundtables (Final)
- [Treasury FS AI RMF and AI Lexicon (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fs-ai-rmf-and-ai-lexicon-2026) — Financial Services AI Risk Management Framework (FS AI RMF) and Artificial Intelligence Lexicon (Final)
- [FSOC 2025 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2025) — Financial Stability Oversight Council 2025 Annual Report — Section 3.4, Harnessing Artificial Intelligence to Promote Financial Stability (Final)
- [Treasury AI cybersecurity risks report (Mar 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-cybersecurity-risks-report-2024) — Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector (Final)
- [FSOC 2023 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2023) — Financial Stability Oversight Council 2023 Annual Report — Section 3.3.3, The Use of Artificial Intelligence in Financial Services (Superseded)

**[White House](https://www.bankingnewsai.com/ai-regulation/white-house)**

- [America's AI Action Plan](https://www.bankingnewsai.com/ai-regulation/documents/americas-ai-action-plan-2025) — America's AI Action Plan (In force)

**[FINRA](https://www.bankingnewsai.com/ai-regulation/finra)**

- [2026 FINRA Annual Regulatory Oversight Report](https://www.bankingnewsai.com/ai-regulation/documents/finra-annual-regulatory-oversight-report-2026) — 2026 FINRA Annual Regulatory Oversight Report: GenAI: Continuing and Emerging Trends (In force)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [DFS Frontier AI Models Industry Letter (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-frontier-ai-models) — Heightened Cybersecurity Risks Associated with Frontier AI Models (In force)
- [DFS Heightened Threat Environment Guidance (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-heightened-threat-environment) — Guidance on Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment (In force)
- [New York RAISE Act](https://www.bankingnewsai.com/ai-regulation/documents/ny-raise-act) — Responsible AI Safety and Education (RAISE) Act, General Business Law Article 44-B (Chapter 699 of the Laws of 2025, as amended by Chapter 96 of the Laws of 2026) (Final · applies from Jan 1, 2027)
- [Asrow Assembly Statement on AI in Insurance (Dec 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-asrow-assembly-statement-2025-12-16-ai-insurance) — Statement by DFS Acting Superintendent Kaitlin Asrow at the NYS Assembly Hearing on the Use of Artificial Intelligence Systems in Insurance Underwriting and Pricing (Final)
- [DFS AI Cybersecurity Industry Letter (Oct 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2024-10-16-ai-cyber-risks) — Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks (In force)
- [23 NYCRR Part 500](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-23-nycrr-part-500) — Cybersecurity Requirements for Financial Services Companies (Second Amendment) (In force)

**[California CPPA](https://www.bankingnewsai.com/ai-regulation/california)**

- [California SB 53 (Transparency in Frontier AI Act)](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-53-2025) — Senate Bill 53: Artificial intelligence models: large developers (Transparency in Frontier Artificial Intelligence Act), Chapter 138, Statutes of 2025 (In force)
- [CPPA ADMT, risk-assessment and cybersecurity-audit regulations](https://www.bankingnewsai.com/ai-regulation/documents/ca-cppa-admt-risk-cyber-regulations-2025) — CCPA Updates, Cybersecurity Audits, Risk Assessments, Automated Decisionmaking Technology, and Insurance Companies — approved regulation text (11 CCR Division 6) (In force)

**[NIST](https://www.bankingnewsai.com/ai-regulation/nist)**

- [AI RMF critical-infrastructure profile (concept note)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-rmf-critical-infrastructure-profile-concept-note) — Concept Note: AI RMF Profile on Trustworthy AI in Critical Infrastructure (Proposed)
- [CAISI RFI on AI agent security (2026)](https://www.bankingnewsai.com/ai-regulation/documents/nist-caisi-rfi-ai-agent-security-2026) — Request for Information: Security Considerations for Artificial Intelligence Agents (Proposed · comment period closed)
- [NIST IR 8596 (Cyber AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ir-8596) — Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile), NIST IR 8596 — preliminary draft (Proposed · comment period closed)
- [NIST COSAiS control overlays](https://www.bankingnewsai.com/ai-regulation/documents/nist-cosais-control-overlays) — Control Overlays for Securing AI Systems (COSAiS): SP 800-53 overlays for generative, predictive and agentic AI (Proposed)
- [NIST AI 100-2e2025 (Adversarial ML)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-2e2025) — Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST AI 100-2e2025) (Final)
- [NIST AI 600-1 (Generative AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-600-1) — Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) (In force)
- [NIST SP 800-218A (SSDF profile for generative AI)](https://www.bankingnewsai.com/ai-regulation/documents/nist-sp-800-218a) — Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile (NIST SP 800-218A) (In force)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [DORA (Regulation (EU) 2022/2554)](https://www.bankingnewsai.com/ai-regulation/documents/eu-dora-regulation-2022-2554) — Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act, DORA) (In force)

**[ECB](https://www.bankingnewsai.com/ai-regulation/ecb)**

- [ECB 'Dear CEO' letter on AI-enabled cybersecurity threats (SSM-2026-0301)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-letter-ai-enabled-cybersecurity-threats-2026) — Addressing AI-enabled cybersecurity threats — letter from the Chair of the Supervisory Board to CEOs of significant institutions (In force)
- [Elderson speech: 'Strengthening operational resilience for the age of AI' (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-elderson-operational-resilience-age-of-ai-speech-2026) — Strengthening operational resilience for the age of AI — speech by Frank Elderson (Final)
- [SSM supervisory priorities 2026–28](https://www.bankingnewsai.com/ai-regulation/documents/ecb-ssm-supervisory-priorities-2026-28) — ECB Banking Supervision: SSM supervisory priorities for 2026–28 (In force)
- [ECB Guide on outsourcing cloud services](https://www.bankingnewsai.com/ai-regulation/documents/ecb-guide-outsourcing-cloud-services-2025) — ECB Guide on outsourcing cloud services to cloud service providers (In force)
- [ECB FSR May 2024 AI special feature](https://www.bankingnewsai.com/ai-regulation/documents/ecb-fsr-may-2024-ai-special-feature) — The rise of artificial intelligence: benefits and risks for financial stability (Financial Stability Review, May 2024) (Final)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [ESA Statement on ICT risks from frontier AI models (JC 2026 25)](https://www.bankingnewsai.com/ai-regulation/documents/esas-jc-2026-25-frontier-ai-statement) — ESA Statement: Toward a consistent and risk-based approach for ICT risks from frontier AI models (In force)
- [EBA factsheet: AI Act implications for the EU banking and payments sector](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-2025) — AI Act: implications for the EU banking and payments sector (Final)
- [EBA Chair letter to the Commission on the AI Act mapping exercise (EBA/2025/D/5384)](https://www.bankingnewsai.com/ai-regulation/documents/eba-2025-d-5384-ai-act-mapping-letter) — Outcome of EBA's AI Act mapping exercise — letter to DG FISMA and DG CNECT (Final)
- [EBA/GL/2022/15 (remote customer onboarding)](https://www.bankingnewsai.com/ai-regulation/documents/eba-gl-2022-15-remote-customer-onboarding) — EBA/GL/2022/15 Guidelines on the use of Remote Customer Onboarding Solutions under Article 13(1) of Directive (EU) 2015/849 (In force)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [Bailey: Frontier AI and the Question of Governance (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-bailey-frontier-ai-governance-2026) — Frontier AI and the Question of Governance — Governor Andrew Bailey (Final)
- [FCA multi-firm review: Frontier AI and cyber resilience (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fca-frontier-ai-cyber-resilience-2026) — Frontier AI and Cyber Resilience (In force)
- [BoE/FCA/HMT joint statement on frontier AI and cyber resilience (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/uk-joint-statement-frontier-ai-cyber-resilience-2026) — The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience (In force)
- [BoE response to Treasury Committee AI inquiry (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-response-tsc-ai-inquiry-2026) — Response to TSC inquiry report on AI in financial services (Final)
- [FPC Financial Stability in Focus: AI (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/boe-fpc-fsif-ai-financial-system-2025) — Financial Stability in Focus: Artificial intelligence in the financial system (Final)
- [2024 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2024) — Artificial intelligence in UK financial services – 2024 (Final)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin guidance on ICT risks in the use of AI](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-ict-risk-guidance-2025) — Guidance on ICT Risks in the Use of AI at Financial Entities (Final)

**[OSFI](https://www.bankingnewsai.com/ai-regulation/osfi)**

- [OSFI FIFAI II report (AGILE framework)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fifai-report-2026) — FIFAI II: AI Risks and Opportunities: Adopting an AGILE Framework in Canadian Financial Services (Final)
- [OSFI-FCAC AI Risk Report (2024)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fcac-ai-risk-report-2024) — OSFI-FCAC Risk Report - AI Uses and Risks at Federally Regulated Financial Institutions (Final)
- [OSFI Guideline B-10](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-b-10) — Third-Party Risk Management Guideline (In force)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS Circular MAS/TCRS/2025/06](https://www.bankingnewsai.com/ai-regulation/documents/mas-circular-cyber-risks-deepfakes-2025) — Cyber Risks Associated with Deepfakes (Information Paper) (In force)
- [MAS Circular MAS/TCRS/2024/05](https://www.bankingnewsai.com/ai-regulation/documents/mas-circular-cyber-risks-generative-ai-2024) — Cyber Risks Associated with Generative Artificial Intelligence (Information Paper) (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA High-level Principles on Artificial Intelligence](https://www.bankingnewsai.com/ai-regulation/documents/hkma-high-level-principles-ai-2019) — High-level Principles on Artificial Intelligence (HKMA circular to all Authorized Institutions, 1 November 2019) (In force)

**[Hong Kong SFC](https://www.bankingnewsai.com/ai-regulation/sfc)**

- [SFC Circular 26EC32 (AI-enabled cyberattacks)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-ai-enabled-cyberattacks-2026) — Circular to licensed corporations, SFC-licensed virtual asset service providers and associated entities - Enhanced cybersecurity measures to address evolving risks arising from artificial intelligence-enabled cyberattacks (In force)
- [SFC Circular 24EC55 (generative AI language models)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-genai-language-models-2024) — Circular to licensed corporations - Use of generative AI language models (In force)

**[Japan FSA](https://www.bankingnewsai.com/ai-regulation/japan-fsa)**

- [Japan FSA/BOJ frontier AI request](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-boj-frontier-ai-request-2026) — Request regarding 'Short-term Responses by Financial Institutions in Light of Threat Changes from Frontier AI' (「フロンティアAIによる脅威変化を踏まえた金融機関等の短期的な対応」に係る要請について) (In force)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [APRA AI Letter to Industry (April 2026)](https://www.bankingnewsai.com/ai-regulation/documents/apra-letter-industry-ai-2026) — APRA Letter to Industry on Artificial Intelligence (AI) (Final)
- [APRA CPS 230](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-230) — Prudential Standard CPS 230 Operational Risk Management (In force)
- [APRA CPS 234](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-234) — Prudential Standard CPS 234 Information Security (In force)

**[RBI](https://www.bankingnewsai.com/ai-regulation/rbi)**

- [RBI FREE-AI framework](https://www.bankingnewsai.com/ai-regulation/documents/rbi-free-ai-framework-2025) — Framework for Responsible and Ethical Enablement of Artificial Intelligence (FREE-AI) Committee Report (Final)

**[FSB](https://www.bankingnewsai.com/ai-regulation/fsb)**

- [FSB Chair's letter to G20 (Aug 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-chair-letter-g20-august-2026) — FSB Chair's letter to G20 Finance Ministers and Central Bank Governors: August 2026 — risks arising from frontier artificial intelligence models (Final)
- [FSB AI sound practices consultation (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-consultation-2026) — Sound Practices for Responsible Adoption of Artificial Intelligence (AI): Consultation report (Proposed · comment period closed)
- [FSB AI monitoring report (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-monitoring-ai-adoption-vulnerabilities-2025) — Monitoring Adoption of Artificial Intelligence and Related Vulnerabilities in the Financial Sector (Final)
- [FSB AI financial stability report (Nov 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-financial-stability-implications-of-ai-2024) — The Financial Stability Implications of Artificial Intelligence (Final)
- [FSB third-party risk toolkit (2023)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-third-party-risk-toolkit-2023) — Final Report on Enhancing Third-party Risk Management and Oversight: A toolkit for financial institutions and financial authorities (Final)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS ICT Risk Management Report (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-ict-risk-management-range-of-practices-2026) — Information and communication technology risk management: range of practices (Final)
- [BCBS Third-Party Risk Principles (Dec 2025)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-third-party-risk-principles-2025) — Principles for the sound management of third-party risk (In force)
- [BCBS Work Programme 2025–26](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-work-programme-2025-26) — Basel Committee work programme and strategic priorities for 2025/26 (In force)
- [BCBS Principles for Operational Resilience (2021)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-principles-operational-resilience-2021) — Principles for Operational Resilience (In force)

## Which data-protection rules constrain bank AI?

Automated-decision rights, data-governance duties and training-data provenance requirements that sit underneath every AI deployment.

**[NCUA](https://www.bankingnewsai.com/ai-regulation/ncua)**

- [NCUA Credit Union AI Resource Center](https://www.bankingnewsai.com/ai-regulation/documents/ncua-credit-union-ai-resource-center) — Artificial Intelligence (AI) — Credit Union AI Resource Center and AI Resources page (In force)

**[CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb)**

- [CFPB Circular 2023-03](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-circular-2023-03) — Adverse action notification requirements and the proper use of the CFPB's sample forms provided in Regulation B (Withdrawn)
- [FCRA adverse action and credit-score disclosures (15 U.S.C. 1681m, 1681g(f))](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-fcra-adverse-action-key-factors) — Fair Credit Reporting Act — adverse-action notices based on consumer reports and disclosure of key factors affecting credit scores (In force)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [Division of Examinations FY2025 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2025) — Examination Priorities: Fiscal Year 2025 — Division of Examinations (Superseded)

**[CFTC](https://www.bankingnewsai.com/ai-regulation/cftc)**

- [Johnson RegHub Summit Remarks (Jun 2025)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-johnson-reghub-london-2025) — Keynote Remarks of Commissioner Kristin N. Johnson at RegHub Summit London 2025: Enabling AI Tools To Enhance Compliance and Surveillance (Final)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [Treasury AI in Financial Services report (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-report-2024) — Artificial Intelligence in Financial Services — Report on the Uses, Opportunities, and Risks of AI in the Financial Services Sector (Final)
- [Treasury AI RFI (June 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-rfi-2024) — Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)

**[White House](https://www.bankingnewsai.com/ai-regulation/white-house)**

- [EO 14365](https://www.bankingnewsai.com/ai-regulation/documents/eo-14365) — Ensuring a National Policy Framework for Artificial Intelligence (In force)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [DFS AI Cybersecurity Industry Letter (Oct 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2024-10-16-ai-cyber-risks) — Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks (In force)
- [23 NYCRR Part 500](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-23-nycrr-part-500) — Cybersecurity Requirements for Financial Services Companies (Second Amendment) (In force)

**[Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act)**

- [Colorado SB 21-169 and Regulation 10-1-1](https://www.bankingnewsai.com/ai-regulation/documents/co-sb21-169) — Protecting Consumers from Unfair Discrimination in Insurance Practices (SB21-169, C.R.S. § 10-3-1104.9) and Colorado Insurance Regulation 10-1-1 (3 CCR 702-10) (In force)

**[California CPPA](https://www.bankingnewsai.com/ai-regulation/california)**

- [SB 947](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-947-2026) — Employment: Automated Decision Systems (No Robo Bosses Act) (Final · applies from Jul 1, 2027)
- [CPPA ADMT, risk-assessment and cybersecurity-audit regulations](https://www.bankingnewsai.com/ai-regulation/documents/ca-cppa-admt-risk-cyber-regulations-2025) — CCPA Updates, Cybersecurity Audits, Risk Assessments, Automated Decisionmaking Technology, and Insurance Companies — approved regulation text (11 CCR Division 6) (In force)
- [Civil Rights Council ADS employment regulations](https://www.bankingnewsai.com/ai-regulation/documents/ca-crc-ads-employment-regulations-2025) — Modifications to Employment Regulations Regarding Automated-Decision Systems (Fair Employment and Housing Act regulations, 2 CCR) (In force)
- [California AG legal advisory on AI (Jan 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ca-ag-legal-advisory-ai-2025) — Legal Advisory: Application of Existing California Laws to Artificial Intelligence (Final)
- [Cal. Civ. Code §1798.145 (CCPA exemptions, incl. GLBA data)](https://www.bankingnewsai.com/ai-regulation/documents/ca-civil-code-1798-145) — California Consumer Privacy Act — exemptions, including the data-level exemption for information subject to the Gramm-Leach-Bliley Act and the California Financial Information Privacy Act (Civil Code §1798.145) (In force)

**[Texas AG](https://www.bankingnewsai.com/ai-regulation/texas)**

- [Texas TRAIGA (HB 149)](https://www.bankingnewsai.com/ai-regulation/documents/tx-hb-149-traiga) — Texas Responsible Artificial Intelligence Governance Act (H.B. 149, 89th Legislature) (In force)

**[Utah Division of Consumer Protection](https://www.bankingnewsai.com/ai-regulation/utah)**

- [Utah SB 226 (2025)](https://www.bankingnewsai.com/ai-regulation/documents/ut-sb-226-2025) — S.B. 226 Artificial Intelligence Consumer Protection Amendments (In force)

**[Illinois IDHR](https://www.bankingnewsai.com/ai-regulation/illinois)**

- [Illinois AI Video Interview Act (820 ILCS 42)](https://www.bankingnewsai.com/ai-regulation/documents/il-ai-video-interview-act) — Artificial Intelligence Video Interview Act (820 ILCS 42) (In force)

**[Massachusetts AG](https://www.bankingnewsai.com/ai-regulation/massachusetts)**

- [Massachusetts AG AI Advisory (April 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-ai-advisory-2024) — Attorney General Advisory on the Application of the Commonwealth's Consumer Protection, Civil Rights, and Data Privacy Laws to Artificial Intelligence (In force)

**[NIST](https://www.bankingnewsai.com/ai-regulation/nist)**

- [NIST AI 600-1 (Generative AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-600-1) — Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) (In force)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [Consumer Credit Directive (EU) 2023/2225](https://www.bankingnewsai.com/ai-regulation/documents/eu-consumer-credit-directive-2023-2225) — Directive (EU) 2023/2225 on credit agreements for consumers (CCD2) — automated creditworthiness assessment provisions (Final · applies from Nov 20, 2026)
- [GDPR Article 22](https://www.bankingnewsai.com/ai-regulation/documents/eu-gdpr-article-22-automated-decision-making) — Regulation (EU) 2016/679 (GDPR), Article 22 — Automated individual decision-making, including profiling (In force)

**[ECB](https://www.bankingnewsai.com/ai-regulation/ecb)**

- [ECB Guide on outsourcing cloud services](https://www.bankingnewsai.com/ai-regulation/documents/ecb-guide-outsourcing-cloud-services-2025) — ECB Guide on outsourcing cloud services to cloud service providers (In force)
- [ECB digitalisation sound practices report (July 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-digitalisation-key-assessment-criteria-2024) — Digitalisation: key assessment criteria and collection of sound practices (In force)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [EBA/GL/2022/15 (remote customer onboarding)](https://www.bankingnewsai.com/ai-regulation/documents/eba-gl-2022-15-remote-customer-onboarding) — EBA/GL/2022/15 Guidelines on the use of Remote Customer Onboarding Solutions under Article 13(1) of Directive (EU) 2015/849 (In force)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [Data (Use and Access) Act 2025](https://www.bankingnewsai.com/ai-regulation/documents/uk-data-use-and-access-act-2025) — Data (Use and Access) Act 2025 (2025 c. 18) — automated decision-making reform, section 80 and new UK GDPR Articles 22A to 22D (In force)
- [ICO Guidance on AI and data protection](https://www.bankingnewsai.com/ai-regulation/documents/ico-guidance-ai-data-protection) — Guidance on AI and data protection (ICO) (In force)
- [DP5/22](https://www.bankingnewsai.com/ai-regulation/documents/uk-dp5-22-ai-and-machine-learning) — Discussion Paper 5/22: Artificial Intelligence and Machine Learning (Final)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin guidance on ICT risks in the use of AI](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-ict-risk-guidance-2025) — Guidance on ICT Risks in the Use of AI at Financial Entities (Final)
- [BaFin BDAI principles paper](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-principles-2021) — Big data and artificial intelligence: Principles for the use of algorithms in decision-making processes (Final)

**[FINMA](https://www.bankingnewsai.com/ai-regulation/finma)**

- [FINMA Guidance 08/2024](https://www.bankingnewsai.com/ai-regulation/documents/finma-guidance-08-2024) — FINMA Guidance 08/2024: Governance and risk management when using artificial intelligence (Final)

**[OSFI](https://www.bankingnewsai.com/ai-regulation/osfi)**

- [OSFI-FCAC AI Risk Report (2024)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fcac-ai-risk-report-2024) — OSFI-FCAC Risk Report - AI Uses and Risks at Federally Regulated Financial Institutions (Final)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS Circular MAS/TCRS/2024/05](https://www.bankingnewsai.com/ai-regulation/documents/mas-circular-cyber-risks-generative-ai-2024) — Cyber Risks Associated with Generative Artificial Intelligence (Information Paper) (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA GenAI consumer protection circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-consumer-protection-2024) — Consumer Protection in respect of Use of Generative Artificial Intelligence (HKMA circular, 19 August 2024) (In force)
- [HKMA BDAI consumer protection principles](https://www.bankingnewsai.com/ai-regulation/documents/hkma-bdai-consumer-protection-2019) — Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence by Authorized Institutions (HKMA circular, 5 November 2019) (In force)
- [HKMA High-level Principles on Artificial Intelligence](https://www.bankingnewsai.com/ai-regulation/documents/hkma-high-level-principles-ai-2019) — High-level Principles on Artificial Intelligence (HKMA circular to all Authorized Institutions, 1 November 2019) (In force)

**[Japan FSA](https://www.bankingnewsai.com/ai-regulation/japan-fsa)**

- [Japan FSA AI Discussion Paper v1.1](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-v1-1-2026) — AI Discussion Paper (Version 1.1): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Final)
- [Japan FSA AI Discussion Paper v1.0](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-2025) — AI Discussion Paper (Version 1.0): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Superseded)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [APRA CPS 234](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-234) — Prudential Standard CPS 234 Information Security (In force)

**[RBI](https://www.bankingnewsai.com/ai-regulation/rbi)**

- [RBI FREE-AI framework](https://www.bankingnewsai.com/ai-regulation/documents/rbi-free-ai-framework-2025) — Framework for Responsible and Ethical Enablement of Artificial Intelligence (FREE-AI) Committee Report (Final)

**[FSB](https://www.bankingnewsai.com/ai-regulation/fsb)**

- [FSB AI sound practices consultation (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-consultation-2026) — Sound Practices for Responsible Adoption of Artificial Intelligence (AI): Consultation report (Proposed · comment period closed)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS 239](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-239) — Principles for effective risk data aggregation and risk reporting (In force)

**[IOSCO](https://www.bankingnewsai.com/ai-regulation/iosco)**

- [IOSCO FR06/2021](https://www.bankingnewsai.com/ai-regulation/documents/iosco-fr06-2021-ai-ml-guidance) — The use of artificial intelligence and machine learning by market intermediaries and asset managers: Final Report (In force)

## Which rules govern AI in trading, broker-dealer and derivatives businesses?

Market regulators focus on conflicts of interest, AI-washing, and the systemic risk of many firms using the same models.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [Cook: Opportunities and Risks of AI (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-cook-speech-ai-economy-financial-system-2026) — The Opportunities and Risks AI Presents for the Economy and Financial System — Governor Lisa D. Cook (Final)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [Division of Examinations FY2026 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2026) — Examination Priorities: Fiscal Year 2026 — Division of Examinations (In force)
- [Division of Examinations FY2025 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2025) — Examination Priorities: Fiscal Year 2025 — Division of Examinations (Superseded)
- [SEC Predictive Data Analytics proposal (34-97990)](https://www.bankingnewsai.com/ai-regulation/documents/sec-pda-conflicts-proposal-34-97990) — Conflicts of Interest Associated with the Use of Predictive Data Analytics by Broker-Dealers and Investment Advisers — proposed rule (Withdrawn)

**[CFTC](https://www.bankingnewsai.com/ai-regulation/cftc)**

- [CFTC Compute Derivatives RFC](https://www.bankingnewsai.com/ai-regulation/documents/cftc-compute-derivatives-rfc-2026) — Request for Comment on the Listing of Compute Derivatives Contracts (Comment period open)
- [CFTC Innovation Task Force](https://www.bankingnewsai.com/ai-regulation/documents/cftc-innovation-task-force-2026) — Chairman Selig Announces Formation of New Innovation Task Force (In force)
- [Johnson RegHub Summit Remarks (Jun 2025)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-johnson-reghub-london-2025) — Keynote Remarks of Commissioner Kristin N. Johnson at RegHub Summit London 2025: Enabling AI Tools To Enhance Compliance and Surveillance (Final)
- [CFTC Staff Advisory 24-17 on AI](https://www.bankingnewsai.com/ai-regulation/documents/cftc-staff-advisory-24-17) — Staff Advisory on the Use of Artificial Intelligence in CFTC-Regulated Markets (CFTC Letter No. 24-17) (In force)
- [Johnson Statement on AI in Derivatives Markets (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-johnson-statement-2024-12-05) — Statement of Commissioner Kristin N. Johnson on Future-Proofing Financial Markets: Assessing the Integration of Artificial Intelligence in Global Derivatives Markets (Final)
- [CFTC TAC Responsible AI Report](https://www.bankingnewsai.com/ai-regulation/documents/cftc-tac-responsible-ai-report-2024) — Responsible Artificial Intelligence in Financial Markets: Opportunities, Risks & Recommendations (Final)
- [CFTC AI Scams Customer Advisory](https://www.bankingnewsai.com/ai-regulation/documents/cftc-ai-scams-customer-advisory-2024) — Customer Advisory: AI Won't Turn Trading Bots into Money Machines (In force)
- [CFTC AI Request for Comment (2024)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-ai-request-for-comment-2024) — Request for Comment on the Use of Artificial Intelligence in CFTC-Regulated Markets (Final)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [FSOC AI Innovation Series (Mar–May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fsoc-ai-innovation-series-2026) — Artificial Intelligence Innovation Series — FSOC and Treasury AI Transformation Office roundtables (Final)
- [FSOC 2025 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2025) — Financial Stability Oversight Council 2025 Annual Report — Section 3.4, Harnessing Artificial Intelligence to Promote Financial Stability (Final)

**[ECB](https://www.bankingnewsai.com/ai-regulation/ecb)**

- [Cipollone speech: 'Artificial intelligence: a central bank's view' (July 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-cipollone-ai-central-bank-view-2024) — Artificial intelligence: a central bank's view — speech by Piero Cipollone (Final)
- [ECB FSR May 2024 AI special feature](https://www.bankingnewsai.com/ai-regulation/documents/ecb-fsr-may-2024-ai-special-feature) — The rise of artificial intelligence: benefits and risks for financial stability (Financial Stability Review, May 2024) (Final)

**[ESMA](https://www.bankingnewsai.com/ai-regulation/esma)**

- [ESMA AI statement ESMA35-335435667-5924](https://www.bankingnewsai.com/ai-regulation/documents/esma-public-statement-ai-investment-services-2024) — Public Statement on the use of Artificial Intelligence (AI) in the provision of retail investment services (Final)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [Bailey: Frontier AI and the Question of Governance (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-bailey-frontier-ai-governance-2026) — Frontier AI and the Question of Governance — Governor Andrew Bailey (Final)
- [BoE response to Treasury Committee AI inquiry (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-response-tsc-ai-inquiry-2026) — Response to TSC inquiry report on AI in financial services (Final)
- [FPC Financial Stability in Focus: AI (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/boe-fpc-fsif-ai-financial-system-2025) — Financial Stability in Focus: Artificial intelligence in the financial system (Final)

**[DNB / AFM](https://www.bankingnewsai.com/ai-regulation/dnb)**

- [AFM and DNB report on the impact of AI](https://www.bankingnewsai.com/ai-regulation/documents/afm-dnb-ai-impact-report-2024) — The impact of AI on the financial sector and supervision (Final)

**[Hong Kong SFC](https://www.bankingnewsai.com/ai-regulation/sfc)**

- [SFC Circular 24EC55 (generative AI language models)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-genai-language-models-2024) — Circular to licensed corporations - Use of generative AI language models (In force)

**[FSB](https://www.bankingnewsai.com/ai-regulation/fsb)**

- [FSB AI monitoring report (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-monitoring-ai-adoption-vulnerabilities-2025) — Monitoring Adoption of Artificial Intelligence and Related Vulnerabilities in the Financial Sector (Final)
- [FSB AI financial stability report (Nov 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-financial-stability-implications-of-ai-2024) — The Financial Stability Implications of Artificial Intelligence (Final)
- [FSB 2017 AI/ML report](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-ml-financial-services-2017) — Artificial intelligence and machine learning in financial services: Market developments and financial stability implications (Final)

**[IOSCO](https://www.bankingnewsai.com/ai-regulation/iosco)**

- [IOSCO FR/02/2026](https://www.bankingnewsai.com/ai-regulation/documents/iosco-ai-capital-markets-fr02-2026) — Supervisory Toolkit for AI Use in Capital Markets: Final Report (In force)
- [IOSCO FR06/2021](https://www.bankingnewsai.com/ai-regulation/documents/iosco-fr06-2021-ai-ml-guidance) — The use of artificial intelligence and machine learning by market intermediaries and asset managers: Final Report (In force)

## Which frameworks set overall AI governance expectations for banks?

Cross-cutting principles, sound practices and voluntary frameworks that supervisors reference when they examine a bank's overall AI program.

**[Federal Reserve](https://www.bankingnewsai.com/ai-regulation/federal-reserve)**

- [Cook: Opportunities and Risks of AI (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-cook-speech-ai-economy-financial-system-2026) — The Opportunities and Risks AI Presents for the Economy and Financial System — Governor Lisa D. Cook (Final)
- [Bowman: AI in the Financial System (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fed-bowman-speech-ai-financial-system-2026) — Artificial Intelligence in the Financial System — Vice Chair for Supervision Michelle W. Bowman (Final)
- [SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2) — Revised Guidance on Model Risk Management (In force)
- [SR 23-4](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-23-4) — Interagency Guidance on Third-Party Relationships: Risk Management (In force)
- [2021 BSA/AML Model Risk Statement](https://www.bankingnewsai.com/ai-regulation/documents/fed-bsa-aml-model-risk-statement-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML Compliance (Superseded)
- [2021 Interagency AI RFI](https://www.bankingnewsai.com/ai-regulation/documents/fed-interagency-ai-rfi-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [SR 11-7](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-11-7) — Supervisory Guidance on Model Risk Management (Superseded)

**[OCC](https://www.bankingnewsai.com/ai-regulation/occ)**

- [OCC Semiannual Risk Perspective, Spring 2026](https://www.bankingnewsai.com/ai-regulation/documents/occ-semiannual-risk-perspective-spring-2026) — Semiannual Risk Perspective from the National Risk Committee, Spring 2026 (Final)
- [OCC Bulletin 2026-13](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2026-13) — Model Risk Management: Revised Guidance (In force)
- [Acting Comptroller Hood, 'AI in Financial Services' (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/occ-hood-responsible-ai-speech-2025) — Remarks by Acting Comptroller Rodney E. Hood at the National Fair Housing Alliance's Responsible AI Symposium: 'AI in Financial Services' (Final)
- [OCC Bulletin 2023-17](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2023-17) — Third-Party Relationships: Interagency Guidance on Risk Management (In force)
- [OCC Bulletin 2021-19](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-19) — Bank Secrecy Act/Anti-Money Laundering: Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML Compliance and Request for Information (Superseded)
- [2021 Interagency AI RFI (OCC Bulletin 2021-17)](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2021-17-ai-rfi) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)
- [OCC Bulletin 2011-12](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2011-12) — Sound Practices for Model Risk Management: Supervisory Guidance on Model Risk Management (Superseded)

**[FDIC](https://www.bankingnewsai.com/ai-regulation/fdic)**

- [Hill House oversight testimony (Jun 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-oversight-prudential-regulators-2026) — Statement of Chairman Travis Hill: Oversight of Prudential Regulators (Final)
- [Hill 'Charting a New Course' speech](https://www.bankingnewsai.com/ai-regulation/documents/fdic-charting-new-course-speech-2025) — Charting a New Course: Preliminary Thoughts on FDIC Policy Issues (Final)
- [FDIC FIL-29-2023](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-29-2023) — Interagency Guidance on Third-Party Relationships: Risk Management (In force)
- [FDIC FIL-20-2021](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-20-2021) — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning (Final)

**[NCUA](https://www.bankingnewsai.com/ai-regulation/ncua)**

- [Hauptman Senate testimony (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-hauptman-senate-testimony-2026) — Written Testimony of NCUA Chairman Kyle S. Hauptman before the U.S. Senate Committee on Banking, Housing, and Urban Affairs (Final)
- [NCUA Letter 26-CU-01](https://www.bankingnewsai.com/ai-regulation/documents/ncua-letter-26-cu-01) — NCUA's 2026 Supervisory Priorities (In force)
- [NCUA AI Compliance Plan (2025)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-ai-compliance-plan-2025) — NCUA Artificial Intelligence Compliance Plan (Final)
- [NCUA Credit Union AI Resource Center](https://www.bankingnewsai.com/ai-regulation/documents/ncua-credit-union-ai-resource-center) — Artificial Intelligence (AI) — Credit Union AI Resource Center and AI Resources page (In force)
- [NCUA Board AI briefing (Jul 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-ai-board-briefing-2025) — Board Briefing: Artificial Intelligence and Its Use Within the Credit Union Industry and the NCUA (Final)
- [NCUA testimony to House AI Task Force (2022)](https://www.bankingnewsai.com/ai-regulation/documents/ncua-ai-task-force-testimony-2022) — Written Testimony of Kelly Lay, Director of the Office of Examination and Insurance, before the House Financial Services Task Force on Artificial Intelligence (Final)
- [NCUA Letter 07-CU-13](https://www.bankingnewsai.com/ai-regulation/documents/ncua-letter-07-cu-13) — Evaluating Third Party Relationships (In force)

**[CFPB](https://www.bankingnewsai.com/ai-regulation/cfpb)**

- [CFPB withdrawal of 67 guidance documents (May 2025)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-guidance-withdrawal-2025) — Interpretive Rules, Policy Statements, and Advisory Opinions; Withdrawal (In force)
- [CFPB comment to Treasury on AI in financial services (2024)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-comment-treasury-ai-rfi-2024) — CFPB Comment on Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)
- [Joint Statement on Automated Systems (CFPB, DOJ, EEOC, FTC)](https://www.bankingnewsai.com/ai-regulation/documents/cfpb-joint-statement-automated-systems-2023) — Joint Statement on Enforcement Efforts Against Discrimination and Bias in Automated Systems (Final)

**[SEC](https://www.bankingnewsai.com/ai-regulation/sec)**

- [Atkins remarks at Investor Advisory Committee (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/sec-atkins-iac-ai-disclosure-remarks-2026-09) — Remarks at the SEC Investor Advisory Committee Meeting on AI Technologies and the Public Markets Information Ecosystem (Final)
- [Atkins remarks at FSOC AI roundtable (Mar 2026)](https://www.bankingnewsai.com/ai-regulation/documents/sec-atkins-fsoc-ai-roundtable-2026) — Remarks at Financial Stability Oversight Council Artificial Intelligence Innovation Series Roundtable on Strategy and Governance Principles (Final)
- [Investor Advisory Committee AI disclosure recommendation](https://www.bankingnewsai.com/ai-regulation/documents/sec-iac-ai-disclosure-recommendation-2025) — Recommendation of the SEC Investor Advisory Committee Regarding the Disclosure of Artificial Intelligence's Impact on Operations (Final)
- [Division of Examinations FY2026 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2026) — Examination Priorities: Fiscal Year 2026 — Division of Examinations (In force)
- [SEC withdrawal of proposed rules (33-11377)](https://www.bankingnewsai.com/ai-regulation/documents/sec-pda-proposal-withdrawal-33-11377) — Withdrawal of Proposed Regulatory Actions — including the predictive data analytics conflicts proposal (Final)
- [SEC v. Saniger (Nate, Inc.)](https://www.bankingnewsai.com/ai-regulation/documents/sec-nate-saniger-ai-washing-2025) — SEC Charges Founder of Nate, Inc. with Fraud Over False Claims About the Company's Use of Artificial Intelligence (Final)
- [Presto Automation AI-washing order](https://www.bankingnewsai.com/ai-regulation/documents/sec-presto-automation-ai-washing-2025) — SEC Charges Restaurant-Technology Company Presto Automation for Misleading Statements About AI Product (Final)
- [Division of Examinations FY2025 Priorities](https://www.bankingnewsai.com/ai-regulation/documents/sec-exam-priorities-fy2025) — Examination Priorities: Fiscal Year 2025 — Division of Examinations (Superseded)
- [Delphia / Global Predictions AI-washing settlements](https://www.bankingnewsai.com/ai-regulation/documents/sec-delphia-global-predictions-ai-washing-2024) — SEC Charges Two Investment Advisers with Making False and Misleading Statements About Their Use of Artificial Intelligence (Final)
- [Gensler 'AI washing' remarks at Yale (Feb 2024)](https://www.bankingnewsai.com/ai-regulation/documents/sec-gensler-ai-washing-speech-2024) — AI, Finance, Movies, and the Law — Prepared Remarks Before the Yale Law School (Final)
- [SEC Predictive Data Analytics proposal (34-97990)](https://www.bankingnewsai.com/ai-regulation/documents/sec-pda-conflicts-proposal-34-97990) — Conflicts of Interest Associated with the Use of Predictive Data Analytics by Broker-Dealers and Investment Advisers — proposed rule (Withdrawn)

**[CFTC](https://www.bankingnewsai.com/ai-regulation/cftc)**

- [CFTC Innovation Task Force](https://www.bankingnewsai.com/ai-regulation/documents/cftc-innovation-task-force-2026) — Chairman Selig Announces Formation of New Innovation Task Force (In force)
- [CFTC Staff Advisory 24-17 on AI](https://www.bankingnewsai.com/ai-regulation/documents/cftc-staff-advisory-24-17) — Staff Advisory on the Use of Artificial Intelligence in CFTC-Regulated Markets (CFTC Letter No. 24-17) (In force)
- [Johnson Statement on AI in Derivatives Markets (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-johnson-statement-2024-12-05) — Statement of Commissioner Kristin N. Johnson on Future-Proofing Financial Markets: Assessing the Integration of Artificial Intelligence in Global Derivatives Markets (Final)
- [CFTC TAC Responsible AI Report](https://www.bankingnewsai.com/ai-regulation/documents/cftc-tac-responsible-ai-report-2024) — Responsible Artificial Intelligence in Financial Markets: Opportunities, Risks & Recommendations (Final)
- [CFTC AI Request for Comment (2024)](https://www.bankingnewsai.com/ai-regulation/documents/cftc-ai-request-for-comment-2024) — Request for Comment on the Use of Artificial Intelligence in CFTC-Regulated Markets (Final)

**[FinCEN](https://www.bankingnewsai.com/ai-regulation/fincen)**

- [2026 AML/CFT Program Proposed Rule](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-cft-program-nprm-2026) — Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2026) (Proposed · comment period closed)
- [2024 AML/CFT Program Proposed Rule (withdrawn)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-cft-program-nprm-2024) — Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2024) (Withdrawn)
- [Anti-Money Laundering Act of 2020](https://www.bankingnewsai.com/ai-regulation/documents/fincen-aml-act-2020) — Anti-Money Laundering Act of 2020 (Division F of the National Defense Authorization Act for Fiscal Year 2021) (In force)
- [FinCEN Innovation Hours](https://www.bankingnewsai.com/ai-regulation/documents/fincen-innovation-hours-2019) — FinCEN's Innovation Initiative: Implementation of FinCEN Innovation Hours; Invitation to Request Innovation Hours Meeting (In force)
- [2018 Joint Statement on BSA/AML Innovation](https://www.bankingnewsai.com/ai-regulation/documents/fincen-joint-statement-innovation-2018) — Joint Statement on Innovative Efforts to Combat Money Laundering and Terrorist Financing (In force)

**[U.S. Treasury](https://www.bankingnewsai.com/ai-regulation/treasury)**

- [FSOC AI Innovation Series (Mar–May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fsoc-ai-innovation-series-2026) — Artificial Intelligence Innovation Series — FSOC and Treasury AI Transformation Office roundtables (Final)
- [Treasury FS AI RMF and AI Lexicon (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-fs-ai-rmf-and-ai-lexicon-2026) — Financial Services AI Risk Management Framework (FS AI RMF) and Artificial Intelligence Lexicon (Final)
- [FSOC 2025 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2025) — Financial Stability Oversight Council 2025 Annual Report — Section 3.4, Harnessing Artificial Intelligence to Promote Financial Stability (Final)
- [Treasury AI in Financial Services report (Dec 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-report-2024) — Artificial Intelligence in Financial Services — Report on the Uses, Opportunities, and Risks of AI in the Financial Services Sector (Final)
- [FSOC 2024 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2024) — Financial Stability Oversight Council 2024 Annual Report — Section 3.3.3, The Use of Artificial Intelligence in Financial Services (Superseded)
- [Treasury AI RFI (June 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-financial-services-rfi-2024) — Request for Information on Uses, Opportunities, and Risks of Artificial Intelligence in the Financial Services Sector (Final)
- [Treasury AI cybersecurity risks report (Mar 2024)](https://www.bankingnewsai.com/ai-regulation/documents/treasury-ai-cybersecurity-risks-report-2024) — Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector (Final)
- [FSOC 2023 Annual Report](https://www.bankingnewsai.com/ai-regulation/documents/fsoc-annual-report-2023) — Financial Stability Oversight Council 2023 Annual Report — Section 3.3.3, The Use of Artificial Intelligence in Financial Services (Superseded)

**[White House](https://www.bankingnewsai.com/ai-regulation/white-house)**

- [EO 14365](https://www.bankingnewsai.com/ai-regulation/documents/eo-14365) — Ensuring a National Policy Framework for Artificial Intelligence (In force)
- [America's AI Action Plan](https://www.bankingnewsai.com/ai-regulation/documents/americas-ai-action-plan-2025) — America's AI Action Plan (In force)
- [EO 14179](https://www.bankingnewsai.com/ai-regulation/documents/eo-14179) — Removing Barriers to American Leadership in Artificial Intelligence (In force)

**[FINRA](https://www.bankingnewsai.com/ai-regulation/finra)**

- [2026 FINRA Annual Regulatory Oversight Report](https://www.bankingnewsai.com/ai-regulation/documents/finra-annual-regulatory-oversight-report-2026) — 2026 FINRA Annual Regulatory Oversight Report: GenAI: Continuing and Emerging Trends (In force)
- [FINRA Regulatory Notice 24-09](https://www.bankingnewsai.com/ai-regulation/documents/finra-regulatory-notice-24-09) — FINRA Reminds Members of Regulatory Obligations When Using Generative Artificial Intelligence and Large Language Models (In force)

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [DFS Heightened Threat Environment Guidance (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-heightened-threat-environment) — Guidance on Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment (In force)
- [New York RAISE Act](https://www.bankingnewsai.com/ai-regulation/documents/ny-raise-act) — Responsible AI Safety and Education (RAISE) Act, General Business Law Article 44-B (Chapter 699 of the Laws of 2025, as amended by Chapter 96 of the Laws of 2026) (Final · applies from Jan 1, 2027)
- [Asrow Assembly Statement on AI in Insurance (Dec 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-asrow-assembly-statement-2025-12-16-ai-insurance) — Statement by DFS Acting Superintendent Kaitlin Asrow at the NYS Assembly Hearing on the Use of Artificial Intelligence Systems in Insurance Underwriting and Pricing (Final)
- [Insurance Circular Letter No. 7 (2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-insurance-circular-letter-2024-07) — Use of Artificial Intelligence Systems and External Consumer Data and Information Sources in Insurance Underwriting and Pricing (In force)
- [DFS Virtual Currency Customer Service Guidance (May 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2024-05-30-vce-customer-service) — Guidance Regarding Customer Service Requests and Complaints (Virtual Currency Entities) (In force)
- [DFS Proposed AI Insurance Circular Letter (Jan 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-proposed-insurance-circular-letter-2024-01) — Proposed Insurance Circular Letter on the Use of Artificial Intelligence Systems and External Consumer Data and Information Sources in Insurance Underwriting and Pricing (Superseded)
- [23 NYCRR Part 500](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-23-nycrr-part-500) — Cybersecurity Requirements for Financial Services Companies (Second Amendment) (In force)

**[NYC DCWP](https://www.bankingnewsai.com/ai-regulation/new-york-city)**

- [NYC Local Law 144 (AEDT)](https://www.bankingnewsai.com/ai-regulation/documents/nyc-local-law-144) — A Local Law to amend the administrative code of the city of New York, in relation to automated employment decision tools (Local Law 144 of 2021) and DCWP final rule (In force)

**[Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act)**

- [Colorado AG proposed ADMT rules](https://www.bankingnewsai.com/ai-regulation/documents/co-ag-admt-proposed-rules-2026) — Proposed Automated Decision-Making Technology and Conversational AI Service Rules (Notice of Rulemaking Hearing) (Comment period open)
- [HB 26-1263](https://www.bankingnewsai.com/ai-regulation/documents/co-hb26-1263) — Conversational Artificial Intelligence Service Operator Requirements (Chatbot Safety Act) (Final · applies from Jan 1, 2027)
- [SB 26-189](https://www.bankingnewsai.com/ai-regulation/documents/co-sb26-189) — Automated Decision-Making Technology Act (repeal and reenactment of the Colorado AI Act) (Final · applies from Jan 1, 2027)
- [SB 25B-004](https://www.bankingnewsai.com/ai-regulation/documents/co-sb25b-004) — Artificial Intelligence Consumer Protections — delay of effective date to June 30, 2026 (Superseded)
- [SB 24-205](https://www.bankingnewsai.com/ai-regulation/documents/co-sb24-205) — Consumer Protections for Artificial Intelligence (Colorado Artificial Intelligence Act) (Superseded)
- [Colorado SB 21-169 and Regulation 10-1-1](https://www.bankingnewsai.com/ai-regulation/documents/co-sb21-169) — Protecting Consumers from Unfair Discrimination in Insurance Practices (SB21-169, C.R.S. § 10-3-1104.9) and Colorado Insurance Regulation 10-1-1 (3 CCR 702-10) (In force)

**[California CPPA](https://www.bankingnewsai.com/ai-regulation/california)**

- [SB 947](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-947-2026) — Employment: Automated Decision Systems (No Robo Bosses Act) (Final · applies from Jul 1, 2027)
- [AB 1609](https://www.bankingnewsai.com/ai-regulation/documents/ca-ab-1609-2026) — Customer Service Chatbots (Right to Human Customer Service Act) (Final · applies from Jan 1, 2027)
- [California SB 53 (Transparency in Frontier AI Act)](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-53-2025) — Senate Bill 53: Artificial intelligence models: large developers (Transparency in Frontier Artificial Intelligence Act), Chapter 138, Statutes of 2025 (In force)
- [CPPA ADMT, risk-assessment and cybersecurity-audit regulations](https://www.bankingnewsai.com/ai-regulation/documents/ca-cppa-admt-risk-cyber-regulations-2025) — CCPA Updates, Cybersecurity Audits, Risk Assessments, Automated Decisionmaking Technology, and Insurance Companies — approved regulation text (11 CCR Division 6) (In force)
- [Civil Rights Council ADS employment regulations](https://www.bankingnewsai.com/ai-regulation/documents/ca-crc-ads-employment-regulations-2025) — Modifications to Employment Regulations Regarding Automated-Decision Systems (Fair Employment and Housing Act regulations, 2 CCR) (In force)
- [California AG legal advisory on AI (Jan 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ca-ag-legal-advisory-ai-2025) — Legal Advisory: Application of Existing California Laws to Artificial Intelligence (Final)
- [Cal. Civ. Code §1798.145 (CCPA exemptions, incl. GLBA data)](https://www.bankingnewsai.com/ai-regulation/documents/ca-civil-code-1798-145) — California Consumer Privacy Act — exemptions, including the data-level exemption for information subject to the Gramm-Leach-Bliley Act and the California Financial Information Privacy Act (Civil Code §1798.145) (In force)

**[Texas AG](https://www.bankingnewsai.com/ai-regulation/texas)**

- [Texas TRAIGA (HB 149)](https://www.bankingnewsai.com/ai-regulation/documents/tx-hb-149-traiga) — Texas Responsible Artificial Intelligence Governance Act (H.B. 149, 89th Legislature) (In force)

**[Utah Division of Consumer Protection](https://www.bankingnewsai.com/ai-regulation/utah)**

- [Utah SB 226 (2025)](https://www.bankingnewsai.com/ai-regulation/documents/ut-sb-226-2025) — S.B. 226 Artificial Intelligence Consumer Protection Amendments (In force)
- [Utah AI Policy Act (SB 149)](https://www.bankingnewsai.com/ai-regulation/documents/ut-sb-149-ai-policy-act) — S.B. 149 Artificial Intelligence Amendments (creating the Utah Artificial Intelligence Policy Act) (In force)

**[Illinois IDHR](https://www.bankingnewsai.com/ai-regulation/illinois)**

- [Illinois HB 3773 (P.A. 103-0804)](https://www.bankingnewsai.com/ai-regulation/documents/il-hb-3773) — Illinois Human Rights Act amendments on artificial intelligence in employment (H.B. 3773, Public Act 103-0804) (In force)
- [Illinois AI Video Interview Act (820 ILCS 42)](https://www.bankingnewsai.com/ai-regulation/documents/il-ai-video-interview-act) — Artificial Intelligence Video Interview Act (820 ILCS 42) (In force)

**[Massachusetts AG](https://www.bankingnewsai.com/ai-regulation/massachusetts)**

- [Massachusetts AG Earnest Operations settlement (July 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-earnest-settlement-2025) — Assurance of Discontinuance: In the matter of Earnest Operations LLC (Massachusetts Attorney General, announced July 10, 2025) (In force)
- [Massachusetts AG AI Advisory (April 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ma-ag-ai-advisory-2024) — Attorney General Advisory on the Application of the Commonwealth's Consumer Protection, Civil Rights, and Data Privacy Laws to Artificial Intelligence (In force)

**[New Jersey DCR](https://www.bankingnewsai.com/ai-regulation/new-jersey)**

- [NJ DCR Algorithmic Discrimination Guidance (January 2025)](https://www.bankingnewsai.com/ai-regulation/documents/nj-dcr-algorithmic-discrimination-guidance-2025) — Guidance on Algorithmic Discrimination and the New Jersey Law Against Discrimination (In force)

**[NIST](https://www.bankingnewsai.com/ai-regulation/nist)**

- [AI RMF critical-infrastructure profile (concept note)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-rmf-critical-infrastructure-profile-concept-note) — Concept Note: AI RMF Profile on Trustworthy AI in Critical Infrastructure (Proposed)
- [CAISI RFI on AI agent security (2026)](https://www.bankingnewsai.com/ai-regulation/documents/nist-caisi-rfi-ai-agent-security-2026) — Request for Information: Security Considerations for Artificial Intelligence Agents (Proposed · comment period closed)
- [NIST IR 8596 (Cyber AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ir-8596) — Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile), NIST IR 8596 — preliminary draft (Proposed · comment period closed)
- [NIST COSAiS control overlays](https://www.bankingnewsai.com/ai-regulation/documents/nist-cosais-control-overlays) — Control Overlays for Securing AI Systems (COSAiS): SP 800-53 overlays for generative, predictive and agentic AI (Proposed)
- [NIST AI RMF 1.0](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-1) — Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 (In force)
- [NIST AI RMF Playbook](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-rmf-playbook) — AI Risk Management Framework Playbook (In force)

**[EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act)**

- [Regulation (EU) 2026/1744 (Digital Omnibus on AI)](https://www.bankingnewsai.com/ai-regulation/documents/eu-digital-omnibus-ai-regulation-2026-1744) — Regulation (EU) 2026/1744 amending Regulation (EU) 2024/1689 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) (In force)
- [Commission guidelines on AI Act Article 50 transparency](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-act-article-50-transparency-2026) — Commission Guidelines on the implementation of the transparency obligations for certain AI systems under Article 50 of Regulation (EU) 2024/1689 (AI Act) (In force)
- [Draft Commission guidelines on high-risk classification](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-draft-guidelines-high-risk-classification-2026) — Draft Commission Guidelines on the classification of high-risk AI systems under Article 6 of the AI Act (Proposed · comment period closed)
- [EBA factsheet on the AI Act](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-banking-payments-2025) — AI Act: implications for the EU banking and payments sector (EBA factsheet) (Final)
- [Commission GPAI model guidelines](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-gpai-obligations-2025) — Commission Guidelines on the scope of the obligations for general-purpose AI models established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [Commission guidelines on the AI system definition](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-system-definition-2025) — Commission Guidelines on the definition of an artificial intelligence system established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [Commission guidelines on prohibited AI practices](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-prohibited-ai-practices-2025) — Commission Guidelines on prohibited artificial intelligence practices established by Regulation (EU) 2024/1689 (AI Act) (In force)
- [Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689) — Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) (In force)
- [DORA (Regulation (EU) 2022/2554)](https://www.bankingnewsai.com/ai-regulation/documents/eu-dora-regulation-2022-2554) — Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act, DORA) (In force)

**[ECB](https://www.bankingnewsai.com/ai-regulation/ecb)**

- [ECB 'Dear CEO' letter on AI-enabled cybersecurity threats (SSM-2026-0301)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-letter-ai-enabled-cybersecurity-threats-2026) — Addressing AI-enabled cybersecurity threats — letter from the Chair of the Supervisory Board to CEOs of significant institutions (In force)
- [Machado speech: 'Technology is neutral, governance is not' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-technology-neutral-governance-speech-2026) — Technology is neutral, governance is not: AI adoption in the banking sector — speech by Pedro Machado (Final)
- [Montagner speech: 'Encouraging innovation, managing risks' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-montagner-digital-transformation-speech-2026) — Encouraging innovation, managing risks: the ECB's approach to digital transformation — speech by Patrick Montagner (Final)
- [Supervision Newsletter: AI use cases for credit scoring and fraud detection (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-supervision-newsletter-ai-credit-scoring-fraud-2025) — AI's impact on banking: use cases for credit scoring and fraud detection (Supervision Newsletter, November 2025) (Final)
- [SSM supervisory priorities 2026–28](https://www.bankingnewsai.com/ai-regulation/documents/ecb-ssm-supervisory-priorities-2026-28) — ECB Banking Supervision: SSM supervisory priorities for 2026–28 (In force)
- [Machado speech: 'Artificial intelligence and supervision: innovation with caution' (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-ai-and-supervision-speech-2025) — Artificial intelligence and supervision: innovation with caution — speech by Pedro Machado (Final)
- [ECB Guide on outsourcing cloud services](https://www.bankingnewsai.com/ai-regulation/documents/ecb-guide-outsourcing-cloud-services-2025) — ECB Guide on outsourcing cloud services to cloud service providers (In force)
- [Supervision Newsletter: suptech infrastructure (May 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-supervision-newsletter-suptech-may-2025) — Benefits from advanced technology infrastructure in supervision (Supervision Newsletter, May 2025) (Final)
- [ECB digitalisation sound practices report (July 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-digitalisation-key-assessment-criteria-2024) — Digitalisation: key assessment criteria and collection of sound practices (In force)
- [Cipollone speech: 'Artificial intelligence: a central bank's view' (July 2024)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-cipollone-ai-central-bank-view-2024) — Artificial intelligence: a central bank's view — speech by Piero Cipollone (Final)
- [ECB FSR May 2024 AI special feature](https://www.bankingnewsai.com/ai-regulation/documents/ecb-fsr-may-2024-ai-special-feature) — The rise of artificial intelligence: benefits and risks for financial stability (Financial Stability Review, May 2024) (Final)

**[EBA](https://www.bankingnewsai.com/ai-regulation/eba)**

- [ESA Statement on ICT risks from frontier AI models (JC 2026 25)](https://www.bankingnewsai.com/ai-regulation/documents/esas-jc-2026-25-frontier-ai-statement) — ESA Statement: Toward a consistent and risk-based approach for ICT risks from frontier AI models (In force)
- [EBA factsheet: AI Act implications for the EU banking and payments sector](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-2025) — AI Act: implications for the EU banking and payments sector (Final)
- [EBA Chair letter to the Commission on the AI Act mapping exercise (EBA/2025/D/5384)](https://www.bankingnewsai.com/ai-regulation/documents/eba-2025-d-5384-ai-act-mapping-letter) — Outcome of EBA's AI Act mapping exercise — letter to DG FISMA and DG CNECT (Final)
- [EBA Work Programme 2026](https://www.bankingnewsai.com/ai-regulation/documents/eba-work-programme-2026) — EBA Work Programme 2026 — AI Act implementation and digital-finance priorities (In force)
- [EBA report: Rising application of AI in EU banking and payments (Sep 2025)](https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-adoption-report-2025) — Rising application of AI in EU banking and payments sector (Final)
- [EBA Guidelines on loan origination and monitoring (EBA/GL/2020/06)](https://www.bankingnewsai.com/ai-regulation/documents/eba-gl-2020-06-loan-origination-monitoring) — Guidelines on loan origination and monitoring (In force)
- [EBA Report on Big Data and Advanced Analytics (EBA/REP/2020/01)](https://www.bankingnewsai.com/ai-regulation/documents/eba-rep-2020-01-big-data-advanced-analytics) — Report on Big Data and Advanced Analytics (Final)

**[ESMA](https://www.bankingnewsai.com/ai-regulation/esma)**

- [ESMA AI statement ESMA35-335435667-5924](https://www.bankingnewsai.com/ai-regulation/documents/esma-public-statement-ai-investment-services-2024) — Public Statement on the use of Artificial Intelligence (AI) in the provision of retail investment services (Final)

**[EIOPA](https://www.bankingnewsai.com/ai-regulation/eiopa)**

- [EIOPA Opinion on AI governance and risk management (EIOPA-BoS-25-360)](https://www.bankingnewsai.com/ai-regulation/documents/eiopa-opinion-ai-governance-2025) — EIOPA-BoS-25-360 Opinion on AI governance and risk management (In force)

**[UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk)**

- [Bailey: Frontier AI and the Question of Governance (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-bailey-frontier-ai-governance-2026) — Frontier AI and the Question of Governance — Governor Andrew Bailey (Final)
- [FCA multi-firm review: Frontier AI and cyber resilience (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fca-frontier-ai-cyber-resilience-2026) — Frontier AI and Cyber Resilience (In force)
- [HM Treasury Financial Services AI Adoption Plan (Jul 2026)](https://www.bankingnewsai.com/ai-regulation/documents/hmt-financial-services-ai-adoption-plan-2026) — Financial Services AI Adoption Plan (Final)
- [2026 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2026) — The Bank of England and FCA's 2026 AI Survey (Final)
- [BoE/FCA/HMT joint statement on frontier AI and cyber resilience (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/uk-joint-statement-frontier-ai-cyber-resilience-2026) — The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience (In force)
- [BoE response to Treasury Committee AI inquiry (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-response-tsc-ai-inquiry-2026) — Response to TSC inquiry report on AI in financial services (Final)
- [BoE/PRA plan for safe AI innovation (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-safe-ai-innovation-plan-letter-2026) — Letter from Sarah Breeden and Sam Woods to the Chancellor and Secretaries of State on enabling safe AI innovation (Final)
- [DSIT/DBT strategic letters to regulators (Jan 2026)](https://www.bankingnewsai.com/ai-regulation/documents/gov-uk-dsit-dbt-safe-ai-innovation-letter-2026) — How will regulators enable safe AI-powered innovation: joint letter from DSIT Secretary of State and DBT Secretary of State (Final)
- [FCA FS25/5](https://www.bankingnewsai.com/ai-regulation/documents/fca-fs25-5-ai-live-testing) — FS25/5: AI Live Testing (Final)
- [Data (Use and Access) Act 2025](https://www.bankingnewsai.com/ai-regulation/documents/uk-data-use-and-access-act-2025) — Data (Use and Access) Act 2025 (2025 c. 18) — automated decision-making reform, section 80 and new UK GDPR Articles 22A to 22D (In force)
- [FPC Financial Stability in Focus: AI (Apr 2025)](https://www.bankingnewsai.com/ai-regulation/documents/boe-fpc-fsif-ai-financial-system-2025) — Financial Stability in Focus: Artificial intelligence in the financial system (Final)
- [2024 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2024) — Artificial intelligence in UK financial services – 2024 (Final)
- [FCA AI Update (Apr 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fca-ai-update-2024) — Artificial Intelligence (AI) update – further to the Government's response to the AI White Paper (Final)
- [UK AI white paper government response (CP 1019)](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-white-paper-response-2024) — A pro-innovation approach to AI regulation: government response to consultation (CP 1019) (In force)
- [FS2/23](https://www.bankingnewsai.com/ai-regulation/documents/uk-fs2-23-ai-and-machine-learning) — Feedback Statement 2/23: Artificial Intelligence and Machine Learning (Final)
- [PRA SS1/23](https://www.bankingnewsai.com/ai-regulation/documents/pra-ss1-23-model-risk-management) — Supervisory Statement 1/23: Model risk management principles for banks (In force)
- [ICO Guidance on AI and data protection](https://www.bankingnewsai.com/ai-regulation/documents/ico-guidance-ai-data-protection) — Guidance on AI and data protection (ICO) (In force)
- [DP5/22](https://www.bankingnewsai.com/ai-regulation/documents/uk-dp5-22-ai-and-machine-learning) — Discussion Paper 5/22: Artificial Intelligence and Machine Learning (Final)
- [2022 BoE/FCA ML survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ml-in-financial-services-survey-2022) — Machine learning in UK financial services (2022 survey) (Superseded)
- [FCA PS22/9 Consumer Duty](https://www.bankingnewsai.com/ai-regulation/documents/fca-ps22-9-consumer-duty) — PS22/9: A new Consumer Duty — Feedback to CP21/36 and final rules (with FG22/5 guidance) (In force)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin guidance on ICT risks in the use of AI](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-ict-risk-guidance-2025) — Guidance on ICT Risks in the Use of AI at Financial Entities (Final)
- [BaFin/Bundesbank ML in risk models results](https://www.bankingnewsai.com/ai-regulation/documents/bafin-bundesbank-ml-risk-models-2022) — Machine learning in risk models – Characteristics and supervisory priorities: Responses to the consultation paper (Final)
- [BaFin BDAI principles paper](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-principles-2021) — Big data and artificial intelligence: Principles for the use of algorithms in decision-making processes (Final)

**[ACPR](https://www.bankingnewsai.com/ai-regulation/acpr)**

- [ACPR discussion document on AI governance](https://www.bankingnewsai.com/ai-regulation/documents/acpr-governance-ai-finance-2020) — Governance of Artificial Intelligence in Finance (Final)

**[DNB / AFM](https://www.bankingnewsai.com/ai-regulation/dnb)**

- [AFM and DNB report on the impact of AI](https://www.bankingnewsai.com/ai-regulation/documents/afm-dnb-ai-impact-report-2024) — The impact of AI on the financial sector and supervision (Final)
- [DNB SAFEST AI principles](https://www.bankingnewsai.com/ai-regulation/documents/dnb-safest-ai-principles-2019) — General principles for the use of Artificial Intelligence in the financial sector (Final)

**[FINMA](https://www.bankingnewsai.com/ai-regulation/finma)**

- [FINMA Guidance 08/2024](https://www.bankingnewsai.com/ai-regulation/documents/finma-guidance-08-2024) — FINMA Guidance 08/2024: Governance and risk management when using artificial intelligence (Final)

**[OSFI](https://www.bankingnewsai.com/ai-regulation/osfi)**

- [OSFI FIFAI II report (AGILE framework)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fifai-report-2026) — FIFAI II: AI Risks and Opportunities: Adopting an AGILE Framework in Canadian Financial Services (Final)
- [OSFI Guideline E-23](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-e-23) — Guideline E-23 – Model Risk Management (2027) (Final · applies from May 1, 2027)
- [OSFI-FCAC AI Risk Report (2024)](https://www.bankingnewsai.com/ai-regulation/documents/osfi-fcac-ai-risk-report-2024) — OSFI-FCAC Risk Report - AI Uses and Risks at Federally Regulated Financial Institutions (Final)
- [OSFI Guideline B-10](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-b-10) — Third-Party Risk Management Guideline (In force)

**[MAS](https://www.bankingnewsai.com/ai-regulation/mas)**

- [MAS MindForge AI Risk Management Toolkit](https://www.bankingnewsai.com/ai-regulation/documents/mas-mindforge-ai-risk-management-toolkit-2026) — AI Risk Management: Operationalisation Handbook (Project MindForge AI Risk Management Toolkit) (Final)
- [MAS Consultation Paper P017-2025 (AI Risk Management Guidelines)](https://www.bankingnewsai.com/ai-regulation/documents/mas-consultation-ai-risk-management-guidelines-2025) — Consultation Paper on Guidelines on Artificial Intelligence Risk Management (Proposed · comment period closed)
- [MAS AI Model Risk Management information paper](https://www.bankingnewsai.com/ai-regulation/documents/mas-info-paper-ai-model-risk-management-2024) — Artificial Intelligence Model Risk Management: Observations from a Thematic Review (Information Paper) (Final)
- [MAS FEAT Principles](https://www.bankingnewsai.com/ai-regulation/documents/mas-feat-principles-2018) — Principles to Promote Fairness, Ethics, Accountability and Transparency (FEAT) in the Use of Artificial Intelligence and Data Analytics in Singapore's Financial Sector (In force)

**[HKMA](https://www.bankingnewsai.com/ai-regulation/hkma)**

- [HKMA GenA.I. Sandbox++ joint circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-plus-plus-2026) — Joint Circular on the Expansion of Generative Artificial Intelligence Sandbox (HKMA, SFC, Insurance Authority and MPFA, 5 March 2026) (In force)
- [HKMA GenA.I. Sandbox circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-sandbox-2024) — Generative Artificial Intelligence Sandbox (HKMA circular inviting applications to the GenA.I. Sandbox, 20 September 2024) (In force)
- [HKMA circular on AI for monitoring of suspicious activities](https://www.bankingnewsai.com/ai-regulation/documents/hkma-ai-aml-monitoring-2024) — Use of Artificial Intelligence for Monitoring of Suspicious Activities (HKMA circular, 9 September 2024) (In force)
- [HKMA GenAI consumer protection circular](https://www.bankingnewsai.com/ai-regulation/documents/hkma-genai-consumer-protection-2024) — Consumer Protection in respect of Use of Generative Artificial Intelligence (HKMA circular, 19 August 2024) (In force)
- [HKMA BDAI consumer protection principles](https://www.bankingnewsai.com/ai-regulation/documents/hkma-bdai-consumer-protection-2019) — Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence by Authorized Institutions (HKMA circular, 5 November 2019) (In force)
- [HKMA High-level Principles on Artificial Intelligence](https://www.bankingnewsai.com/ai-regulation/documents/hkma-high-level-principles-ai-2019) — High-level Principles on Artificial Intelligence (HKMA circular to all Authorized Institutions, 1 November 2019) (In force)

**[Hong Kong SFC](https://www.bankingnewsai.com/ai-regulation/sfc)**

- [SFC Circular 26EC32 (AI-enabled cyberattacks)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-ai-enabled-cyberattacks-2026) — Circular to licensed corporations, SFC-licensed virtual asset service providers and associated entities - Enhanced cybersecurity measures to address evolving risks arising from artificial intelligence-enabled cyberattacks (In force)

**[Japan FSA](https://www.bankingnewsai.com/ai-regulation/japan-fsa)**

- [Japan FSA/BOJ frontier AI request](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-boj-frontier-ai-request-2026) — Request regarding 'Short-term Responses by Financial Institutions in Light of Threat Changes from Frontier AI' (「フロンティアAIによる脅威変化を踏まえた金融機関等の短期的な対応」に係る要請について) (In force)
- [Japan FSA AI Discussion Paper v1.1](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-v1-1-2026) — AI Discussion Paper (Version 1.1): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Final)
- [Japan FSA AI Discussion Paper v1.0](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-ai-discussion-paper-2025) — AI Discussion Paper (Version 1.0): Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector (Superseded)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [APRA AI Letter to Industry (April 2026)](https://www.bankingnewsai.com/ai-regulation/documents/apra-letter-industry-ai-2026) — APRA Letter to Industry on Artificial Intelligence (AI) (Final)
- [ASIC REP 798](https://www.bankingnewsai.com/ai-regulation/documents/asic-rep-798) — REP 798 Beware the gap: Governance arrangements in the face of AI innovation (Final)
- [APRA CPS 230](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-230) — Prudential Standard CPS 230 Operational Risk Management (In force)

**[RBI](https://www.bankingnewsai.com/ai-regulation/rbi)**

- [RBI draft Guidance on Regulatory Principles for Model Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risk-management-guidance-2026) — Guidance on Regulatory Principles for Model Risk Management, 2026 (draft released for public comments) (Proposed · comment period closed)
- [RBI FREE-AI framework](https://www.bankingnewsai.com/ai-regulation/documents/rbi-free-ai-framework-2025) — Framework for Responsible and Ethical Enablement of Artificial Intelligence (FREE-AI) Committee Report (Final)
- [RBI draft circular on Regulatory Principles for Management of Model Risks in Credit](https://www.bankingnewsai.com/ai-regulation/documents/rbi-model-risks-credit-circular-2024) — Regulatory Principles for Management of Model Risks in Credit (draft circular for comments) (Proposed · comment period closed)

**[FSB](https://www.bankingnewsai.com/ai-regulation/fsb)**

- [FSB Chair's letter to G20 (Aug 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-chair-letter-g20-august-2026) — FSB Chair's letter to G20 Finance Ministers and Central Bank Governors: August 2026 — risks arising from frontier artificial intelligence models (Final)
- [Responses to FSB AI sound practices consultation (Aug 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-consultation-responses-2026) — Public responses to consultation on Sound Practices for Responsible Adoption of Artificial Intelligence (AI) (Final)
- [Bowman remarks at FSB AI outreach (July 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-bowman-remarks-ai-sound-practices-2026) — Opening remarks on sound practices for artificial intelligence (FSB virtual outreach event) (Final)
- [FSB AI sound practices consultation (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-sound-practices-consultation-2026) — Sound Practices for Responsible Adoption of Artificial Intelligence (AI): Consultation report (Proposed · comment period closed)
- [FSB AI monitoring report (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-monitoring-ai-adoption-vulnerabilities-2025) — Monitoring Adoption of Artificial Intelligence and Related Vulnerabilities in the Financial Sector (Final)
- [FSB next steps on AI monitoring (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-next-steps-authorities-ai-monitoring-2025) — FSB outlines next steps for authorities on AI monitoring (Final)
- [FSB AI financial stability report (Nov 2024)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-financial-stability-implications-of-ai-2024) — The Financial Stability Implications of Artificial Intelligence (Final)
- [FSB third-party risk toolkit (2023)](https://www.bankingnewsai.com/ai-regulation/documents/fsb-third-party-risk-toolkit-2023) — Final Report on Enhancing Third-party Risk Management and Oversight: A toolkit for financial institutions and financial authorities (Final)
- [FSB 2017 AI/ML report](https://www.bankingnewsai.com/ai-regulation/documents/fsb-ai-ml-financial-services-2017) — Artificial intelligence and machine learning in financial services: Market developments and financial stability implications (Final)

**[Basel Committee](https://www.bankingnewsai.com/ai-regulation/basel-committee)**

- [BCBS ICT Risk Management Report (June 2026)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-ict-risk-management-range-of-practices-2026) — Information and communication technology risk management: range of practices (Final)
- [BCBS 239 Implementation Newsletter (Jan 2026)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-newsletter-bcbs239-implementation-2026) — Implementation of the Principles for effective risk data aggregation and risk reporting (BCBS 239 Principles) (Final)
- [BCBS Third-Party Risk Principles (Dec 2025)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-third-party-risk-principles-2025) — Principles for the sound management of third-party risk (In force)
- [BCBS Work Programme 2025–26](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-work-programme-2025-26) — Basel Committee work programme and strategic priorities for 2025/26 (In force)
- [BCBS AI/ML Newsletter (March 2022)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-newsletter-ai-ml-2022) — Newsletter on artificial intelligence and machine learning (Final)
- [BCBS Principles for Operational Resilience (2021)](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-principles-operational-resilience-2021) — Principles for Operational Resilience (In force)
- [BCBS 239](https://www.bankingnewsai.com/ai-regulation/documents/bcbs-239) — Principles for effective risk data aggregation and risk reporting (In force)

**[IOSCO](https://www.bankingnewsai.com/ai-regulation/iosco)**

- [IOSCO FR/02/2026](https://www.bankingnewsai.com/ai-regulation/documents/iosco-ai-capital-markets-fr02-2026) — Supervisory Toolkit for AI Use in Capital Markets: Final Report (In force)
- [IOSCO FR06/2021](https://www.bankingnewsai.com/ai-regulation/documents/iosco-fr06-2021-ai-ml-guidance) — The use of artificial intelligence and machine learning by market intermediaries and asset managers: Final Report (In force)

## Which rules apply to AI-generated code and coding agents in a bank?

No regulator has a rule for AI-written software, but New York DFS asks for human review of AI-generated code before deployment, NIST profiles the secure development life cycle for AI, and model-risk and third-party guidance decide what an examiner treats as a model or a vendor.

**[NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs)**

- [DFS Frontier AI Models Industry Letter (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-frontier-ai-models) — Heightened Cybersecurity Risks Associated with Frontier AI Models (In force)

**[NIST](https://www.bankingnewsai.com/ai-regulation/nist)**

- [CAISI RFI on AI agent security (2026)](https://www.bankingnewsai.com/ai-regulation/documents/nist-caisi-rfi-ai-agent-security-2026) — Request for Information: Security Considerations for Artificial Intelligence Agents (Proposed · comment period closed)
- [NIST AI 600-1 (Generative AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-600-1) — Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) (In force)
- [NIST SP 800-218A (SSDF profile for generative AI)](https://www.bankingnewsai.com/ai-regulation/documents/nist-sp-800-218a) — Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile (NIST SP 800-218A) (In force)

**[BaFin](https://www.bankingnewsai.com/ai-regulation/bafin)**

- [BaFin guidance on ICT risks in the use of AI](https://www.bankingnewsai.com/ai-regulation/documents/bafin-ai-ict-risk-guidance-2025) — Guidance on ICT Risks in the Use of AI at Financial Entities (Final)

**[APRA / ASIC](https://www.bankingnewsai.com/ai-regulation/australia)**

- [APRA AI Letter to Industry (April 2026)](https://www.bankingnewsai.com/ai-regulation/documents/apra-letter-industry-ai-2026) — APRA Letter to Industry on Artificial Intelligence (AI) (Final)
- [APRA CPS 234](https://www.bankingnewsai.com/ai-regulation/documents/apra-cps-234) — Prudential Standard CPS 234 Information Security (In force)


---

Canonical page: https://www.bankingnewsai.com/ai-regulation/by-use-case
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (41 authorities, 237 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.