On November 21, 2025 the European Banking Authority published a factsheet mapping the AI Act onto EU banking and payments legislation. Its headline findings: no significant contradictions between the AI Act and the Capital Requirements Regulation, Consumer Credit Directive, Mortgage Credit Directive or PSD2; the AI Act is complementary to a sector framework that already manages model, conduct and operational risk; and no immediate need to issue new or revise existing EBA guidelines. The EBA committed to promoting a common supervisory approach across financial supervisors and market-surveillance authorities in 2026–27.
| Document | EBA factsheet on the AI Act — AI Act: implications for the EU banking and payments sector (EBA factsheet) |
| Issued by | Regulation (EU) 2024/1689 — the EU Artificial Intelligence Act |
| Type | Report |
| Status | Final |
| Published | Nov 21, 2025 |
| Applies to | EU credit institutions, payment institutions and their national competent authorities |
| Official source | eba.europa.eu ↗ |
| Use cases | Credit scoring & underwriting · Model risk management · AI governance (general) · Third-party & vendor AI · Fraud detection |
What are the key points of EBA factsheet on the AI Act?
- Maps AI Act obligations against CRR/CRD, CCD, MCD, PSD2 and DORA, concluding the regimes are complementary rather than conflicting.
- Identifies credit scoring and creditworthiness assessment as the principal Annex III high-risk use in banking, noting the fraud-detection carve-out.
- Confirms that financial supervisors act as market-surveillance authorities for AI systems used by regulated financial entities.
- Finds no immediate need for new EBA guidelines; existing internal-governance and outsourcing/ICT rules already cover much of the AI Act's quality-management expectations.
- Commits the EBA in 2026/2027 to supervisory-convergence work, cooperation between financial supervisors and market-surveillance authorities, and further sector-specific clarification.
- Recalls that credit institutions benefit from Article 74(6) and quality-management alignment provisions built into the AI Act for CRD-regulated entities.
What did EBA factsheet on the AI Act change for banks?
The factsheet told EU banks they can build AI Act compliance onto existing model-governance, outsourcing and DORA programmes rather than a parallel regime, and told supervisors the EBA would not layer new guidelines on top. It is the closest thing to sector guidance on the AI Act that EU banks have.
Will the EBA issue new guidelines for AI Act compliance?
The November 2025 factsheet found no immediate need for new or revised EBA guidelines; instead the EBA is focusing on supervisory convergence and cooperation between financial supervisors and market-surveillance authorities in 2026–27.
Does the AI Act conflict with EU banking law?
The EBA found no significant contradictions with the CRR, Consumer Credit Directive, Mortgage Credit Directive or PSD2, describing the AI Act as complementary to existing banking and payments legislation.
| Date | Document | Status |
|---|---|---|
| Jul 24, 2026 | Regulation (EU) 2026/1744 (Digital Omnibus on AI) — Regulation (EU) 2026/1744 amending Regulation (EU) 2024/1689 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) | In force |
| May 19, 2026 | Draft Commission guidelines on high-risk classification — Draft Commission Guidelines on the classification of high-risk AI systems under Article 6 of the AI Act | Proposed |
| Jul 10, 2025 | General-Purpose AI Code of Practice — General-Purpose AI Code of Practice under the AI Act (Transparency, Copyright, and Safety and Security chapters) | In force |
| Feb 4, 2025 | Commission guidelines on prohibited AI practices — Commission Guidelines on prohibited artificial intelligence practices established by Regulation (EU) 2024/1689 (AI Act) | In force |
| Jul 12, 2024 | Regulation (EU) 2024/1689 — Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) | In force |
| Oct 30, 2023 | Consumer Credit Directive (EU) 2023/2225 — Directive (EU) 2023/2225 on credit agreements for consumers (CCD2) — automated creditworthiness assessment provisions | Final |
Follow every document these regulators publish
6 curated AI stories for banking executives · Every morning · Free
Subscribe to BankingNewsAI →