What does HKMA "ART" Framework / AI supervisory guidance say about AI in banking?

Published Oct 15, 2026 · Last reviewed Oct 19, 2026

On 15 October 2026 the HKMA announced the "ART" Framework — Accountability, Resilience, Trust — and issued updated supervisory guidance on responsible AI adoption under it, informed by the second GenA.I. Sandbox cohort, where more than 60% of use cases involved AI agents. The guidance calls for clear ownership of each AI use case and an up-to-date inventory of approved applications, and, per Executive Director Carmen Chu's 16 October 2026 remarks, 'recognises a progressive shift from "human-in-the-loop" to "human-on-the-loop" oversight' for agentic AI as systems grow more capable. The HKMA says the guidance aligns with the FSB's AI sound practices and is paired with an insight report sharing GenA.I. Sandbox lessons; a separate discussion paper on agentic-AI governance is still to come.

OFFICIAL TEXT: hkma.gov.hk ↗ · FINAL · HKMA

DocumentHKMA "ART" Framework / AI supervisory guidance — "ART" Framework and Updated Supervisory Guidance for Responsible Adoption of Artificial Intelligence
Issued byHong Kong Monetary Authority — Hong Kong's banking regulator and de facto central bank (circulars to Authorized Institutions under the Banking Ordinance, Cap. 155)
TypeGuidance
StatusFinal
PublishedOct 15, 2026
Applies toAuthorized Institutions under the Banking Ordinance (Cap. 155)
Official sourcehkma.gov.hk ↗
Use casesGenerative & agentic AI · AI governance (general) · Model risk management · Cybersecurity

What are the key points of HKMA "ART" Framework / AI supervisory guidance?

  • Three pillars: Accountability (governance tied to an AI agent's intended purpose, carried through design, data, tools and actions — a 'prerequisite for effective intervention'), Resilience (mapping AI dependencies across models, data, tools, infrastructure and third parties, with response/recovery measures that may include a 'kill-switch'), and Trust (securing the AI agent's operating boundaries, tested under extreme scenarios, resting on data quality).
  • Oversight: the guidance 'recognises a progressive shift from "human-in-the-loop" to "human-on-the-loop" oversight' as AI grows more capable, while still requiring clear accountability and continuous monitoring.
  • Governance basics: clear ownership of each AI use case and an up-to-date inventory of approved AI applications.
  • Evidence base: drawn from the second GenA.I. Sandbox cohort, where more than 60% of use cases involved AI agents and half of those were multi-agent; released alongside an insight report sharing Sandbox good practices and lessons.
  • The HKMA says the guidance aligns with the Financial Stability Board's AI sound practices.
  • The HKMA is exploring a centralised supervisory registry of AI agents and plans a forthcoming discussion paper on a supervisory framework for agentic-AI governance (intent-anchored accountability, a registry of material AI agents, intervention mechanisms) — not yet published.
  • Announced alongside a planned AI training-data-sharing platform built with Cyberport and the University of Hong Kong, and the Finance + A.I. Forum co-hosted with Cyberport on 15–16 October 2026.
  • Several press reports describe the guidance as replacing the HKMA's 1 November 2019 High-level Principles on Artificial Intelligence with nine principles across the three ART pillars; this tracker could not confirm that specific framing from an HKMA primary source and does not assert it — see hkma-high-level-principles-ai-2019, which remains listed as current pending confirmation.

What did HKMA "ART" Framework / AI supervisory guidance change for banks?

This is the HKMA's first dedicated response to agentic AI findings from its own sandbox programme, moving from the 2019 principles' human-in-the-loop baseline toward oversight calibrated to AI agents' autonomy, and toward infrastructure (a possible agent registry, kill-switch expectations) built for a world where AI acts rather than only recommends.

What is the HKMA's "ART" Framework?

Announced 15 October 2026, it organises the HKMA's approach to responsible AI adoption in banking around three pillars: Accountability, Resilience and Trust. It is paired with updated supervisory guidance and an insight report drawing on the GenA.I. Sandbox.

Does the HKMA still expect human-in-the-loop oversight of AI?

Not strictly. The new guidance 'recognises a progressive shift from "human-in-the-loop" to "human-on-the-loop" oversight' as AI systems become more capable — oversight without a person at every step, but with clear accountability and continuous monitoring, per Executive Director Carmen Chu's 16 October 2026 remarks.

Is the HKMA planning further guidance on AI agents?

Yes. It has flagged a forthcoming discussion paper on a supervisory framework for agentic-AI governance, covering intent-anchored accountability, a registry of material AI agents and intervention mechanisms, plus a possible centralised supervisory registry of agents.

DateDocumentStatus
Mar 5, 2026HKMA GenA.I. Sandbox++ joint circular — Joint Circular on the Expansion of Generative Artificial Intelligence Sandbox (HKMA, SFC, Insurance Authority and MPFA, 5 March 2026)In force
Sep 20, 2024HKMA GenA.I. Sandbox circular — Generative Artificial Intelligence Sandbox (HKMA circular inviting applications to the GenA.I. Sandbox, 20 September 2024)In force
Sep 9, 2024HKMA circular on AI for monitoring of suspicious activities — Use of Artificial Intelligence for Monitoring of Suspicious Activities (HKMA circular, 9 September 2024)In force
Aug 19, 2024HKMA GenAI consumer protection circular — Consumer Protection in respect of Use of Generative Artificial Intelligence (HKMA circular, 19 August 2024)In force
Nov 5, 2019HKMA BDAI consumer protection principles — Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence by Authorized Institutions (HKMA circular, 5 November 2019)In force
Nov 1, 2019HKMA High-level Principles on Artificial Intelligence — High-level Principles on Artificial Intelligence (HKMA circular to all Authorized Institutions, 1 November 2019)In force

Follow every document these regulators publish

when one of these regulators moves, the next morning's brief says so · six sourced stories · 7 am PT · free

plus every regulation, bank and agent page update, the morning after · leave any morning