BaFinRegulatory Mandate / Oversight Authoritymedium

Unknown Sponsor Bank

Germany

Germany's financial supervisory authority BaFin announced around July 29, 2026 that it will oversee and enforce compliance around AI usage at banks and insurers, including the authority to issue fines for non-compliance. This supervisory guidance affects any embedded finance or BaaS provider operating under German banking or insurance licences that uses AI for credit decisioning, fraud detection, AML, or customer engagement. AI governance has now become explicitly supervisory territory under BaFin's remit. While not an enforcement action against a specific institution, this guidance establishes a new compliance framework that BaaS platforms and their fintech partners operating in Germany must integrate into their operations.

Verified from source: BaFin received new competencies to oversee AI systems used by financial sector companies including banks and insurers, with authority to enforce compliance with the EU AI Act (KI-Verordnung). The mandate covers transparency obligations, prohibited AI practices, and high-risk AI systems such as those used in creditworthiness assessments.

Implications
  1. BaaS providers operating under German banking licences must now account for BaFin AI compliance requirements
  2. Embedded finance platforms using AI for credit, fraud, or AML in Germany face new supervisory scrutiny
  3. May increase compliance costs for fintechs and their bank partners deploying AI-driven services in the German market
Source
Related
Share