Lane’s speech of 30 October addresses AI’s economic impact and use in banks. Among other matters, it highlights cyber and IT risks and their potential effects on banks’ liquidity and funding. The speech is an analysis, not a new binding requirement. ECB speech “AI adoption in Europe”.
The authority granted to the solution is decisive
Using AI to assist with drafting text and connecting it to client data or transaction systems create different risks.
For example, a solution may initially draft a response for an employee. If it is later authorised to change data or send a response to a client itself, the need for controls changes as well. The same tool name no longer means the same use case.
Before approving deployment, we recommend documenting:
- which data and systems the solution can access;
- which actions require human approval;
- how errors are detected and corrected;
- how work continues if the service is interrupted;
- who decides to suspend use.
These are practical governance recommendations, not new obligations announced in the speech. The management board’s decision should describe the permitted use and its limits precisely enough for compliance to be checked later.