Guide · August 2026 edition
The EU AI Act Guide for Financial Services.
The Digital Omnibus moved the high-risk deadline to December 2027. It did not move the prohibitions, the AI-literacy duty, or the transparency rules that took effect this month. This guide maps what the Act demands of banks, insurers, and investment firms, what binds now, and the records that answer. Free with a work email.
- Every claim linked to the Act's text and the Omnibus deferral, verified August 2026.
- Finance-first: credit scoring, insurance pricing, and recruitment as the named high-risk uses.
- Opens right on this page; print or save as PDF once it's unlocked.
What's inside
Nine chapters, one supervisor's-eye view.
What applies, when it bites, and the evidence to start accumulating now.
Scope and roles
Who the Act reaches (including firms outside the EU whose output lands inside it), and why most financial institutions are deployers.
The clock, post-Omnibus
What the Digital Omnibus moved to December 2027, and the prohibitions, literacy, GPAI, and transparency duties that bind today.
Four tiers, finance-first
The risk ladder read from a trading floor: where a bank meets each rung, from prohibited practices to minimal risk.
Annex III, up close
Credit scoring and insurance pricing as named high-risk uses: the deployer duties, the logs, and the fundamental-rights impact assessment.
The three surfaces
Chat use, agents, and shadow AI under the Act, including why the AI-literacy duty makes invisible use a live problem.
The readiness sequence
What to run during the sixteen months of runway, starting with the logs that cannot be backfilled.