Skip to main content
AI Fin Hub

Benchmarks, in AI in Markets

AI Governance and Regulation in Finance Statistics

The EU AI Act entered into force on 1 August 2024, with fines reaching up to 35 million euros or 7% of global annual turnover for prohibited practices. That is the regulatory ceiling the figures below fill in. Each datapoint comes from primary sources: the EU AI Act text, the FSB, the ECB, and the BIS, with source and year named for each. Timelines can be amended after publication; dates reflect what the cited source stated. No figure was generated by this site.

6 figures. Published May 26, 2026. By AI Fin Hub Research.

Statistics

The numbers worth quoting

1

The EU AI Act entered into force on 1 August 2024, with prohibited-practice rules applying from 2 February 2025 and general-purpose-AI obligations from 2 August 2025

The Act is phased: the full framework was set to be largely applicable two years after entry into force, with separate timelines for prohibitions, GPAI obligations, and high-risk systems.

Source European Commission, Regulatory framework for AI (Regulation (EU) 2024/1689)
2

EU AI Act fines reach up to 35 million euros or 7% of total worldwide annual turnover for prohibited AI practices

Lower tiers apply to other breaches: up to 15 million euros or 3% of turnover for high-risk non-compliance, and up to 7.5 million euros or 1% for supplying incorrect information. The top ceiling exceeds the GDPR maximum.

Source EU Artificial Intelligence Act, Article 99 (Penalties)
3

The EU AI Act classifies AI used to evaluate the creditworthiness of natural persons or set their credit score as high-risk

Credit scoring is named in Annex III as a high-risk use case subject to risk-management, data-governance, transparency, and human-oversight obligations, with an exception for fraud detection.

Source EU Artificial Intelligence Act, Annex III
4

The Financial Stability Board identified third-party dependency and service-provider concentration, market correlations, cyber risk, and model risk as the AI vulnerabilities most likely to raise systemic risk

The FSB's November 2024 report named these four channels and called on authorities to close information gaps for monitoring AI use in the financial sector.

Source Financial Stability Board, The Financial Stability Implications of Artificial Intelligence
5

Just over half of investment in AI firms was concentrated in four companies, the ECB noted in flagging supplier-concentration risk

The ECB tied this concentration to operational, too-big-to-fail, and herding risks if AI tools are widely adopted and suppliers remain few.

Source European Central Bank, Financial Stability Review (May 2024)
6

About 71% of surveyed central banks were already using generative AI, but only about 19% reported having a concrete strategy for adopting it

A further 26% planned to adopt generative AI within one to two years and 23% reported no strategy, illustrating that use is outrunning formal governance even among regulators.

Source Bank for International Settlements, governance of AI adoption in central banks

Key takeaways

The EU AI Act is the binding reference point, with prohibited-practice fines up to 35m euros or 7% of global turnover.
Credit scoring is explicitly high-risk under the Act; fraud detection is carved out as an exception.
The FSB and ECB converge on vendor concentration and herding as the core systemic AI risks in finance.
Even central banks show adoption outpacing strategy: most use generative AI, few have a formal plan.
Regulatory timelines are phased and amendable; check the primary source for the current applicable date.

Methodology

Figures are drawn from primary regulatory and supervisory sources: the EU AI Act text and official Commission timeline, the Financial Stability Board, the European Central Bank, and the Bank for International Settlements, each reported with its source and year. Regulatory dates reflect the cited source at publication and may be amended. No statistic on this page is derived from data collected by this site.

Run the numbers next

  • Comparators FTC vs FCA vs MiCA+DORA Regulatory Cost

    Compare US (FTC), UK (FCA), and EU (MiCA + DORA) compliance cost for an AI-finance product. Snapshot data with as-of date — not legal advice.

  • Comparators Model Selector for Finance

    Input task, latency budget, cost budget, context size, and quality sensitivity; get ranked model recommendations with rationale — grounded in published.

  • Playgrounds Structured Schema Validator for Finance

    Paste LLM JSON output and validate against four pre-built finance schemas — research output, trade decision, risk snapshot, peer comparison — with sanity.

Sources

  1. Regulatory framework for AI (Regulation (EU) 2024/1689) , European Commission (2024)
  2. Article 99: Penalties; Annex III: High-Risk AI Systems , EU Artificial Intelligence Act (2024)
  3. The Financial Stability Implications of Artificial Intelligence , Financial Stability Board (2024)
  4. Governance of AI adoption in central banks , Bank for International Settlements (2025)

Keep the topic connected

  • Learn Regulatory Cost of AI in Finance

    Regulatory cost as a function of jurisdiction, model class, and end-use: the FTC vs NLT distinction and the documentation burden by regime.

  • Statistics AI in Finance Adoption Statistics

    Sourced statistics on AI and generative-AI adoption across financial services: deployment rates, use cases, governance gaps, and where the money is going.

  • Statistics AI Fraud Detection in Finance Statistics

    AI fraud detection statistics for payments and finance: fraud value blocked, detection-rate gains, false-positive reductions, reported as vendor claims.