# EBA factsheet on the AI Act: AI Act: implications for the EU banking and payments sector (EBA factsheet)

Source: https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-banking-payments-2025
Last updated: Aug 26, 2026

On November 21, 2025 the European Banking Authority published a factsheet mapping the AI Act onto EU banking and payments legislation. Its headline findings: no significant contradictions between the AI Act and the Capital Requirements Regulation, Consumer Credit Directive, Mortgage Credit Directive or PSD2; the AI Act is complementary to a sector framework that already manages model, conduct and operational risk; and no immediate need to issue new or revise existing EBA guidelines. The EBA committed to promoting a common supervisory approach across financial supervisors and market-surveillance authorities in 2026–27.

## At a glance

| Field | Value |
| --- | --- |
| Authority | [EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act) |
| Type | Report |
| Status | Final |
| Published | Nov 21, 2025 |
| Applies to | EU credit institutions, payment institutions and their national competent authorities |
| Official text | https://www.eba.europa.eu/sites/default/files/2025-11/d8b999ce-a1d9-4964-9606-971bbc2aaf89/AI%20Act%20implications%20for%20the%20EU%20banking%20sector.pdf |

## Key points

- Maps AI Act obligations against CRR/CRD, CCD, MCD, PSD2 and DORA, concluding the regimes are complementary rather than conflicting.
- Identifies credit scoring and creditworthiness assessment as the principal Annex III high-risk use in banking, noting the fraud-detection carve-out.
- Confirms that financial supervisors act as market-surveillance authorities for AI systems used by regulated financial entities.
- Finds no immediate need for new EBA guidelines; existing internal-governance and outsourcing/ICT rules already cover much of the AI Act's quality-management expectations.
- Commits the EBA in 2026/2027 to supervisory-convergence work, cooperation between financial supervisors and market-surveillance authorities, and further sector-specific clarification.
- Recalls that credit institutions benefit from Article 74(6) and quality-management alignment provisions built into the AI Act for CRD-regulated entities.

## What changed for banks

The factsheet told EU banks they can build AI Act compliance onto existing model-governance, outsourcing and DORA programmes rather than a parallel regime, and told supervisors the EBA would not layer new guidelines on top. It is the closest thing to sector guidance on the AI Act that EU banks have.

## Use cases it governs

- [Credit scoring & underwriting](https://www.bankingnewsai.com/ai-regulation/by-use-case#credit-underwriting)
- [Model risk management](https://www.bankingnewsai.com/ai-regulation/by-use-case#model-risk)
- [AI governance (general)](https://www.bankingnewsai.com/ai-regulation/by-use-case#governance-general)
- [Third-party & vendor AI](https://www.bankingnewsai.com/ai-regulation/by-use-case#third-party-vendors)
- [Fraud detection](https://www.bankingnewsai.com/ai-regulation/by-use-case#fraud)

## FAQ

### Will the EBA issue new guidelines for AI Act compliance?

The November 2025 factsheet found no immediate need for new or revised EBA guidelines; instead the EBA is focusing on supervisory convergence and cooperation between financial supervisors and market-surveillance authorities in 2026–27.

### Does the AI Act conflict with EU banking law?

The EBA found no significant contradictions with the CRR, Consumer Credit Directive, Mortgage Credit Directive or PSD2, describing the AI Act as complementary to existing banking and payments legislation.

## Related documents

- [Regulation (EU) 2026/1744 (Digital Omnibus on AI)](https://www.bankingnewsai.com/ai-regulation/documents/eu-digital-omnibus-ai-regulation-2026-1744) — Regulation (EU) 2026/1744 amending Regulation (EU) 2024/1689 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) (Jul 24, 2026)
- [Commission guidelines on AI Act Article 50 transparency](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-act-article-50-transparency-2026) — Commission Guidelines on the implementation of the transparency obligations for certain AI systems under Article 50 of Regulation (EU) 2024/1689 (AI Act) (Jul 20, 2026)
- [Draft Commission guidelines on high-risk classification](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-draft-guidelines-high-risk-classification-2026) — Draft Commission Guidelines on the classification of high-risk AI systems under Article 6 of the AI Act (May 19, 2026)
- [Commission GPAI model guidelines](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-gpai-obligations-2025) — Commission Guidelines on the scope of the obligations for general-purpose AI models established by Regulation (EU) 2024/1689 (AI Act) (Jul 18, 2025)
- [General-Purpose AI Code of Practice](https://www.bankingnewsai.com/ai-regulation/documents/eu-gpai-code-of-practice-2025) — General-Purpose AI Code of Practice under the AI Act (Transparency, Copyright, and Safety and Security chapters) (Jul 10, 2025)
- [Commission guidelines on the AI system definition](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-system-definition-2025) — Commission Guidelines on the definition of an artificial intelligence system established by Regulation (EU) 2024/1689 (AI Act) (Feb 6, 2025)
- [Commission guidelines on prohibited AI practices](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-prohibited-ai-practices-2025) — Commission Guidelines on prohibited artificial intelligence practices established by Regulation (EU) 2024/1689 (AI Act) (Feb 4, 2025)
- [Regulation (EU) 2024/1689](https://www.bankingnewsai.com/ai-regulation/documents/eu-ai-act-regulation-2024-1689) — Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) (Jul 12, 2024)

Last reviewed Aug 26, 2026. Cite the official text (https://www.eba.europa.eu/sites/default/files/2025-11/d8b999ce-a1d9-4964-9606-971bbc2aaf89/AI%20Act%20implications%20for%20the%20EU%20banking%20sector.pdf) for the rule and this page for the summary and dates.

---

Canonical page: https://www.bankingnewsai.com/ai-regulation/documents/eba-ai-act-factsheet-banking-payments-2025
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (41 authorities, 237 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.