From the journal

FSB Issues Consultation on Sound Practices for Responsible AI Adoption in Finance, June 2026

On 10 June 2026, the Financial Stability Board published a consultation report identifying 12 sound practices for responsible AI adoption by financial institutions. The practices cover organisation-wide AI governance and AI lifecycle management at the use-case level. The FSB explicitly acknowledges the limits of human oversight of agentic AI systems and recommends AI-monitoring-AI architectures. Comments are due 22 July 2026, with a final report expected in October 2026.

3 min read

The Financial Stability Board published its consultation report 'Sound Practices for Responsible Adoption of Artificial Intelligence' on 10 June 2026. The report identifies 12 practices to assist financial institutions of all types in managing the benefits and risks of AI adoption at the organisational and use-case level. The report is at the consultation stage: the FSB invites written responses by 22 July 2026 and will publish a final report in October 2026. The 12 practices are non-binding guidance and do not constitute FSB standards.

Practices 1 through 4 address organisation-wide AI governance, covering the internal structures and processes that should govern decisions about whether and how to adopt AI at scale. Practices 5 through 10 address lifecycle management of individual AI use cases, requiring that deployments be supported by proportionate guardrails at each development and deployment stage. Practices 11 and 12 address ongoing monitoring and escalation. The FSB grounds the report in existing guidance from the Basel Committee on Banking Supervision, IOSCO, the International Association of Insurance Supervisors, and G20 member regulators, without creating binding standards of its own.

Banks, investment managers, insurers, and systemically important financial institutions are the primary audience. The FSB explicitly acknowledges that continuous human monitoring of individual AI agent decisions becomes impractical as agentic AI systems multiply inside financial institutions, and recommends supplementing human oversight with AI systems that monitor other AI systems. Compliance teams, model risk officers, and AI governance functions at financial institutions should review the consultation text and assess whether current governance arrangements meet the 12 practices before responding.

The consultation is a non-binding soft-law document, and the October 2026 final report will carry the same status. National regulators are not required to implement the FSB's sound practices into binding prudential rules or supervisory expectations. Whether member jurisdictions incorporate the practices into enforceable guidance will depend on each regulator's own legislative programme. The FSB's acceptance of AI-monitoring-AI architectures as legitimate risk management signals that future binding guidance from national regulators may adopt similar positions.

Licentium advises financial institutions and their counsel on AI governance requirements across EU, UK, and international regulatory regimes. Our team and partner network are available to assist with FSB sound practice gap analyses, model risk management policy updates, and regulatory consultation responses. Work we undertake includes AI governance reviews for regulated financial entities, prudential compliance assessments for AI systems, regulatory consultation submissions, and cross-border AI deployment advice for banks, asset managers, and insurers.

Source: Financial Stability Board, Sound Practices for Responsible Adoption of Artificial Intelligence: Consultation Report, 10 June 2026

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.