AI Regulation Tracker · EBA · Report

What does EBA follow-up report on machine learning for IRB models (EBA/REP/2023/28) say about AI in banking?

Published Aug 4, 2023 · Last reviewed Aug 26, 2026

The EBA's follow-up report on machine learning for IRB models (EBA/REP/2023/28), published August 4, 2023, closed out the 2021 consultation. It confirmed that respondents broadly supported the EBA's principle-based recommendations for prudent ML use in IRB models and reiterated them, mapped the ML use cases banks actually report — ML in core modelling steps, ML challenger models in validation, and collateral valuation — and flagged interactions with GDPR and the then-draft AI Act, asking for clarifications to reduce legal uncertainty for capital models.

DocumentEBA follow-up report on machine learning for IRB models (EBA/REP/2023/28)Machine Learning for IRB Models — Follow-up report from the consultation on the Discussion paper on machine learning for IRB models
Issued byEuropean Banking Authority
TypeReport
StatusFinal
PublishedAug 4, 2023
Applies toEU credit institutions using machine learning in IRB credit-risk models; relevant to ECB and national supervisors approving such models
SupersedesEBA discussion paper on machine learning for IRB models
Official sourceeba.europa.eu
Use casesModel risk management · Credit scoring & underwriting

What are the key points of EBA follow-up report on machine learning for IRB models (EBA/REP/2023/28)?

  • Published August 4, 2023 as EBA/REP/2023/28.
  • Current use is selective: ML in core IRB modelling steps, ML as challenger models for validation, and collateral valuation, rather than fully ML-based rating systems.
  • Complexity issues addressed: overfitting, human-skill requirements, and explainability of individual outputs.
  • Reiterates the discussion paper's recommendations on understanding, documentation, validation and stability, which respondents broadly supported.
  • Discusses interaction with GDPR (automated decision-making) and the AI Act, calling for clarification to avoid unintended consequences for IRB models.
  • No new guidelines were issued; the report is the standing statement of EBA expectations for ML in capital models.

What did EBA follow-up report on machine learning for IRB models (EBA/REP/2023/28) change for banks?

The follow-up turned a discussion into a settled position: ML in IRB models is acceptable within existing CRR requirements, and banks should expect supervisors to test explainability, understanding and stability rather than prohibit the technique. It also put on record, a year before the AI Act was adopted, that credit-scoring models used for capital purposes could be caught by the Act — an issue the EBA's 2025 mapping exercise later addressed.

What did the EBA conclude on ML in IRB models in 2023?

In EBA/REP/2023/28 (August 4, 2023) the EBA reiterated its 2021 recommendations for prudent use — management understanding, documentation, explainability, control of overfitting and model stability — noted that current use is mostly in core modelling steps, challenger models and collateral valuation, and asked for clarity on GDPR and AI Act interactions.

Does the EBA ML-for-IRB report change capital rules?

No. It sets expectations on how existing CRR IRB requirements apply when ML is used; it did not amend the CRR or issue new guidelines.

DateDocumentStatus
Nov 11, 2021EBA discussion paper on machine learning for IRB modelsDiscussion Paper on machine learning for IRB modelsSuperseded
Jul 31, 2026ESA Statement on ICT risks from frontier AI models (JC 2026 25)ESA Statement: Toward a consistent and risk-based approach for ICT risks from frontier AI modelsIn force
Nov 21, 2025EBA factsheet: AI Act implications for the EU banking and payments sectorAI Act: implications for the EU banking and payments sectorFinal
Nov 21, 2025EBA Chair letter to the Commission on the AI Act mapping exercise (EBA/2025/D/5384)Outcome of EBA's AI Act mapping exercise — letter to DG FISMA and DG CNECTFinal
Oct 1, 2025EBA Work Programme 2026EBA Work Programme 2026 — AI Act implementation and digital-finance prioritiesIn force
Sep 25, 2025EBA report: Rising application of AI in EU banking and payments (Sep 2025)Rising application of AI in EU banking and payments sectorFinal

Follow every document these regulators publish

6 curated AI stories for banking executives · Every morning · Free

Subscribe to BankingNewsAI →