PrivacySignal
AI Governance

AI in the Financial Sector: BaFin Takes Over Market Surveillance Under the EU AI Act

McDermott Will & Schulte · · International · AI Governance

Germany's financial regulator BaFin has assumed responsibility for overseeing AI systems used in financial markets under the EU AI Act. The move designates BaFin as the national market surveillance authority for AI applications in its sector.

Why this matters: This matters because it names a specific regulator as the person responsible when AI in finance goes wrong. That clarity is not small. Financial AI touches credit decisions, trading, fraud detection, and investment advice. Without a clear authority, accountability disappears into arguments between agencies. BaFin taking this role means there is now someone to answer to. The next test is whether it actually has the tools and will to use that power.

Who should care: AI governance · Lawyers · Administrators · Privacy officers · Cybersecurity · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

AI Governance
T The National Law Review · · International

From AI Policy to AI Control: Building Governance That Works

A piece in the National Law Review argues that AI governance needs to move beyond policy documents toward actual operational controls that shape how AI systems behave in practice.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

#ai-governance#ai Read original →
News
Schneier on Security · · International

Detailed Timeline of OpenAI’s Cyberattack on Hugging Face

OpenAI presented details of its AI’s model’s cyberattack on Hugging Face at Black Hat last week. Simon Willison details the timeline. It’s really interesting to read through—and really impressive cyberoffense work.

Who should care: General readers · AI governance · Policy