Bank Regulators Probe Industry Use of AI

§ 01 Executive Snapshot

• What: Banking regulators are probing the industry regarding the use of artificial intelligence during routine examinations.
• Who: Office of the Comptroller of the Currency (OCC), Federal Reserve, Government Accountability Office (GAO), various banks.
• Why it matters: This scrutiny reflects growing regulatory attention on AI risks within the banking sector, aiming to ensure robust governance and risk management.

§ 02 Key Developments

• Supervisors are inquiring about banks’ controls, protections for client data, governance frameworks, third-party risk, vendor oversight, and contingency plans for AI failures.
• Key concerns include unauthorized data access by AI systems and the ability of banks to shut down AI systems when necessary.
• The OCC, Federal Reserve, and FDIC plan to issue a request for information focused on model risk management and AI usage in the near future.

§ 03 Strategic Context

• The GAO reported that federal financial regulators are using existing laws to oversee AI, with some issuing AI-specific guidance, indicating a shift towards more tailored regulations.
• The increasing integration of AI in banking operations necessitates a comprehensive understanding of the associated risks, driving regulators to enhance their oversight frameworks.

§ 04 Strategic Implications

• Immediate implications include potential increased compliance costs for banks as they adapt to more stringent regulatory expectations around AI governance.
• Long-term, this regulatory focus may lead to the development of more rigorous standards for AI use in banking, impacting how financial institutions deploy AI technologies.

§ 05 Risks & Constraints

• A potential risk includes the challenge of ensuring that third-party vendors and subcontractors adhere to the same governance and security standards as banks, which could complicate compliance efforts.
• Another risk is the rapid evolution of AI technology, which may outpace regulatory frameworks, leading to gaps in oversight and increased vulnerabilities.

§ 06 Watchlist / Forward Signals

• The upcoming request for information from the OCC, Federal Reserve, and FDIC regarding AI model risk management will be a critical signal of regulatory intent and focus.
• Monitoring the responses and compliance adjustments from banks in light of these inquiries will indicate the effectiveness of regulatory measures on AI governance and risk management.