The Basel Committee's 46-page 'Digitalisation of finance' report of 16 May 2024 assesses APIs, AI/ML, distributed ledger technology, and cloud computing, updating its 2018 fintech work, and sets out eight implications for banks and supervisors. It records bank AI/ML use in credit underwriting, trading, pricing, capital and liquidity planning, fraud detection, AML/CFT, chatbots, and marketing, and includes a dedicated assessment of generative AI risks: hallucinations, opacity, data governance, inadequate governance and skills, and reliance on third-party model providers.
| Document | BCBS Digitalisation of finance report (May 2024) — Digitalisation of finance |
| Issued by | Basel Committee on Banking Supervision (BCBS) |
| Type | Report |
| Status | Final |
| Published | May 16, 2024 |
| Applies to | Banks and supervisors in Basel member jurisdictions; analytical report, no new standards |
| Official source | bis.org ↗ |
| Use cases | Generative & agentic AI · Model risk management · Third-party & vendor AI · Credit scoring & underwriting · Fraud detection · AML / KYC · Customer-facing chatbots |
What are the key points of BCBS Digitalisation of finance report (May 2024)?
- Technologies assessed: application programming interfaces, artificial intelligence and machine learning, distributed ledger technology, and cloud computing, plus new technology-enabled suppliers.
- Lists AI/ML use cases observed at banks: credit underwriting, trading, pricing, regulatory capital and liquidity planning, fraud detection, AML/CFT, chatbots, and marketing.
- Finds banks' use of generative AI 'remains limited at present, especially for customer-facing services and higher-risk activities', with pilots in lower-risk internal tasks.
- Generative AI risk list: model risk (reasoning errors, hallucinations, inconsistent outputs), explainability, data governance and bias, governance and accountability, and third-party risk including unclear allocation of liability with vendors.
- Financial-stability angle: broad GenAI adoption may increase interconnectivity, amplify procyclical behaviour, and raise third-party concentration risk, 'particularly where the model vendors are also providing cloud services to banks'.
- Table 2 catalogues bank mitigants for GenAI: firm-wide AI policies, human review of outputs, employee training, enhanced validation even for lower-risk uses, and formal approval by IT and model-risk functions.
- Eight implications for banks and supervisors across macro-structural elements, specific digitalisation themes, and capacity building and coordination.
What did BCBS Digitalisation of finance report (May 2024) change for banks?
This is the Committee's most detailed statement on AI and the first to address generative AI. It confirmed that Basel expects GenAI to be governed inside existing model-risk frameworks with graduated, risk-based controls, and it named vendor-plus-cloud concentration as a systemic concern, a theme later carried into the December 2025 third-party principles and the FSB's 2025–26 AI work.
What does the Basel Committee say about generative AI in banks?
Its May 2024 report says GenAI shares the risks of other AI but presents them differently: hallucinations and inconsistent outputs, weaker explainability, harder data governance, governance and skills gaps, and dependence on third-party model providers. It notes banks are applying graduated controls built on existing model risk management.
Did the 2024 digitalisation report create new Basel requirements?
No. It is an analytical report with implications for banks and supervisors; any requirements flow through existing standards on operational risk, resilience, and third-party risk.
| Date | Document | Status |
|---|---|---|
| Jun 2, 2026 | BCBS ICT Risk Management Report (June 2026) — Information and communication technology risk management: range of practices | Final |
| Jan 6, 2026 | BCBS 239 Implementation Newsletter (Jan 2026) — Implementation of the Principles for effective risk data aggregation and risk reporting (BCBS 239 Principles) | Final |
| Dec 10, 2025 | BCBS Third-Party Risk Principles (Dec 2025) — Principles for the sound management of third-party risk | In force |
| Feb 4, 2025 | BCBS Work Programme 2025–26 — Basel Committee work programme and strategic priorities for 2025/26 | In force |
| Mar 16, 2022 | BCBS AI/ML Newsletter (March 2022) — Newsletter on artificial intelligence and machine learning | Final |
| Mar 31, 2021 | BCBS Principles for Operational Resilience (2021) — Principles for Operational Resilience | In force |
Follow every document these regulators publish
6 curated AI stories for banking executives · Every morning · Free
Subscribe to BankingNewsAI →