AI and digital rules for the financial sector — overview
Adopted 2026-06-28 · ≈ 1 min read · 
edited by Dirk Baaijen
One entry point for banks, insurers and fintech: which AI and digital rules affect your institution — from DORA and the AI Act to credit scoring, AML and insurance — each with a source-traceable file and the financial scan.
Short answer: Financial institutions face more digital rules than any other sector: besides the AI Act (credit scoring and insurance are high-risk), there is DORA (digital resilience), the GDPR, and sectoral rules. This page bundles the files that affect your bank, insurer or fintech.
Digital resilience (DORA)
- DORA guide — does it apply to you + the five pillars.
- Does my firm fall under DORA? — scope + proportionality.
- DORA register of information — what it must contain.
- DORA readiness roadmap — how to prepare.
- AI Act and DORA interplay — how the frameworks interact.
AI in financial processes
- AI credit scoring — high-risk under the AI Act.
- AI in insurance: pricing.
- AI financial fraud detection.
- AI robo-advice and MiFID.
- AI and anti-money-laundering (AML).
Supervision
Where do you stand?
Want to see in a few minutes which rules affect your institution and where the gaps are? Take the financial sector scan — source-traceable, no sales talk.
Sources
- https://eur-lex.europa.eu/eli/reg/2024/1689/oj
Regulation (EU) 2024/1689 (AI Act) — creditworthiness and insurance as high-risk (Annex III). - https://eur-lex.europa.eu/eli/reg/2022/2554/oj
Regulation (EU) 2022/2554 (DORA) — digital operational resilience for financial entities.
Read next
The interplay of the AI Act and DORA: one AI system, two supervisory frameworks
Financial institutions deploying AI fall under DORA (since January 2025) and the AI Act at the same time. This analysis maps where the frameworks meet, where the AI Act explicitly defers to financial services law, and where duplicate work looms.
How the ECB supervises AI in eurozone banks: technology-neutral, existing frameworks, a generative-AI focus
For the 2026-2028 cycle the ECB places AI under its operational-resilience priority, and in February 2026 two Supervisory Board members set out the stance: with 85%+ of supervised banks using AI, govern it within existing frameworks rather than new rules, with a sharper focus on generative AI.
CBAM obligations for importers
What EU importers of carbon-intensive goods must do to comply with the Carbon Border Adjustment Mechanism in the definitive phase from 2026 onwards.