Germany's BaFin said on July 29 that it had begun monitoring AI use by banks, insurers and other financial firms after new national legislation assigned it responsibilities under the EU AI Act. The regulator's initial work covers transparency duties and prohibited practices, while oversight of high-risk systems—including certain creditworthiness uses—is scheduled to begin in December 2027.
Germany's Federal Financial Supervisory Authority, BaFin, said on July 29 that it had taken on a new role monitoring how supervised financial firms use artificial intelligence. The responsibility follows German legislation assigning market-surveillance duties under the European Union's AI Act.
The change puts AI oversight alongside BaFin's existing supervision of banks, insurers and other regulated financial entities. In a BaFin interview, AI specialist Jens Obermöller said the regulator's first phase covers requirements that already apply, including transparency obligations and prohibited AI practices. BaFin can use supervisory measures and administrative fines where the applicable rules are breached.
What BaFin will examine
BaFin plans a risk-based, sample-oriented approach rather than reviewing every AI system in the market. Firms remain responsible for identifying where AI is used, classifying systems under the AI Act and maintaining the governance needed to demonstrate compliance.
The regulator's remit matters because financial AI can affect consequential decisions. Certain systems used to assess an individual's creditworthiness are classified as high risk under the EU framework. AI used in insurance and other customer-facing processes can also raise questions about transparency, data quality, human oversight and whether a practice is prohibited.
BaFin's current guidance also points firms toward AI literacy: staff need enough understanding of the systems they operate or oversee to recognize limitations and escalate problems. That expectation applies before the final high-risk-system timetable arrives.
High-risk oversight starts later
Obermöller said BaFin's monitoring of high-risk AI systems is scheduled to begin in December 2027. That later date does not postpone rules that are already in force.
For data and AI teams in regulated finance, the practical implication is that model governance must connect technical documentation with accountable business ownership. An inventory should identify the use case, decision impact, data dependencies, validation evidence and human controls for each system. That is LDS analysis of the operational consequence; BaFin's announcement establishes the supervisory role and timeline, not a new model-development standard.
Key Points #
- 1BaFin now monitors regulated financial AI use under Germany's implementation of EU AI Act market-surveillance responsibilities.
- 2Its initial work covers transparency duties and prohibited practices, using a risk-based and sample-oriented approach.
- 3BaFin says monitoring of high-risk systems, including certain creditworthiness uses, begins in December 2027.
Scoring Rationale #
The announcement activates a sector-specific AI Act monitoring role for Germany's banks and insurers, including potential fines. It is directly relevant to firms operating regulated financial AI systems, although its immediate jurisdiction is national and sector-specific.
Sources #
Primary source and supporting public references used for this report.
Practice interview problems based on real data
1,625 SQL & Python problems across 15 industry datasets — the exact type of data you work with.