EU Financial Regulators Push for Stronger AI Governance and Oversight

Europe's main financial supervisory authorities have jointly issued a statement calling for coordinated and risk-focused oversight to address cybersecurity threats posed by advanced artificial intelligence systems in the financial sector.

The European Banking Authority (EBA), European Insurance and Occupational Pensions Authority (EIOPA), and European Securities and Markets Authority (ESMA) released the statement after reviewing guidance from the European Commission, the European Systemic Risk Board, the EU's cybersecurity agency, and other oversight bodies.

The authorities identified key measures that financial organizations should implement to strengthen their ability to withstand cyber attacks linked to frontier AI models, with particular focus on:

• Preventing such attacks before they occur
• Detecting threats quickly when they emerge
• Managing and containing incidents effectively

The statement emphasizes that financial institutions must establish strong governance structures and comprehensive risk management systems to handle the challenges posed by advanced AI technologies. The authorities also noted their intention to continue monitoring how critical technology service providers serving the financial sector manage these emerging risks under the Digital Operational Resilience Act (DORA).

The supervisory authorities have invited both financial firms and national regulators to use the statement as a foundation for ongoing oversight discussions. This coordinated approach is intended to help maintain the stability and security of Europe's financial system as artificial intelligence technologies continue to advance.