BaFin Steps Up Oversight of Financial Firms’ AI Use

The European Union’s AI Act entered into force on Aug. 1, 2024, with most provisions applying from Aug. 2, 2026. It treats some financial applications, including creditworthiness assessments, as high-risk systems. The framework gives Germany’s Federal Financial Supervisory Authority, known as BaFin, a clearer role in overseeing how regulated banks and insurers deploy AI in business-critical operations.

BaFin said on July 30, 2026, it would intensify scrutiny of AI systems tied directly to regulated financial activities. Supervisors will focus on whether firms meet transparency, risk-management and compliance requirements as the technology becomes more deeply embedded in core services. The regulator did not disclose a target number of institutions, inspection timetable or potential monetary penalties.