From Internal Standards to the AI Act: Reshaping Financial Processes for the Era of Algorithmic Accountability
DOI:
https://doi.org/10.61823/dpia.2026.2.575Keywords:
EU AI Act, Algorithmic Hygiene, Duty of Care, Financial Regulation, Agentic AIAbstract
This paper looks at how internal governance in financial institutions changes as the sector moves from voluntary standards to the mandatory EU AI Act. It traces the path from the traditional “duty of care” to what could be called “algorithmic accountability”. The argument is that as Agentic AI takes over cognitive workflows such as AML monitoring and risk management, the traditional focus on human behaviour becomes less relevant. The paper proposes the concept of “Algorithmic Hygiene” as a way of describing the continuous oversight of how software is configured and how it performs. The conclusion is that institutional stability now depends ongoing beyond formal “tickthe-box” compliance toward a real technical audit of an institution’s “algorithmic DNA”.
References
Baschuk B., Biggest Losers of AI Boom Are Knowledge Workers, McKinsey Says, Bloomberg News, 14 June 2023, https://www.bloomberg.com/news/articles/2023-06-14/biggest-losers-of-ai-boom-areknowledge-workers-mckinsey-says [accessed on: 01.05.2026].
BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht), Guidance on ICT Risks in the Use of AI at Financial Entities, version of 23 January 2026, https://www.bafin.de/SharedDocs/Veroeffentlichungen/EN/Meldung/2025/neu/meldung_2025_12_18_orientierungshilfe_ikt_risiken_en.html [accessed on: 01.05.2026].
Cazzaniga M., Jaumotte F., Li L., Melina G., Panton J. A., Pizzinelli C., Rockall E., Tavares M.M., Gen-AI: Artificial Intelligence and the Future of Work, IMF Staff Discussion Note SDN/2024/001, International Monetary Fund, January 2024, https://www.imf.org/-/media/files/publications/sdn/2024/english/sdnea2024001.pdf [accessed on: 01.05.2026].
Cherednychenko O.O., Busch C. (eds.), A Bank’s Duty of Care: Perspectives from European and Comparative Law, European Review of Private Law, 2017, https://pure.eur.nl/en/publications/a-banks-duty-of-care-perspectives-from-european-and-comparative-l-2/ [accessed on: 01.05.2026].
Constantino J., Exploring Article 14 of the EU AI proposal: accountability challenges of the human in the loop when supervising high-risk AI systems in public administration, SSRN, 2022, https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4254940 [accessed on: 01.05.2026].
European Commission, Commission proposes Digital Omnibus to simplify EU digital rules, IP/25/2718, Brussels, November 2025.
Fernández M., Charnay N., AI and banking: Leaders will soon pull away from the pack, S&P Global Ratings, 28 October 2024, https://www.spglobal.com/ratings/en/research/articles/241028-aiand-banking-leaders-will-soon-pull-away-from-the-pack-13354388 [accessed on: 01.05.2026].
Financial Services Consumer Panel, Incorporating a Duty of Care into the Financial Services & Markets Act, FSCP Position Paper, June 2015, https://www.fca.org.uk/panels-assets/consumer-panel/publication/fscp_position_paper_on_duty_of_care_2015.pdf [accessed on: 01.05.2026].
Knight W., The Dark Secret at the Heart of AI, MIT Technology Review, 11 April 2017, https://www.technologyreview.com/2017/04/11/5113/the-dark-secret-at-the-heart-of-ai/ [accessed on: 01.05.2026].
McKinsey Global Institute, The economic potential of generative AI: The next productivity frontier, McKinsey & Company, June 2023, https://www.mckinsey.com/capabilities/mckinsey-digital/our-insights/the-economic-potential-of-generative-ai-the-next-productivity-frontier [accessed on: 01.05.2026].
Shneiderman B., Human-Centered Artificial Intelligence: Reliable, Safe & Trustworthy, arXiv:2002.04087 [cs.HC], 2020, https://doi.org/10.48550/arXiv.2002.04087.
Technologické centrum Praha, Policy Brief: Dopady generativní umělé inteligence na společnost v ČR, Policy Brief M2, 2024, https://stratin.tc.cas.cz/vystupy/2024/M2/Policy%20Brief_DopadyGenAI_2024_final.pdf [accessed on: 01.05.2026].
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), OJ L 119, 4 May 2016.
Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector (DORA), OJ L 333, 27 December 2022.
Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 (Artificial Intelligence Act), OJ L, 12 July 2024.
The author used an artificial intelligence language model to assist with linguistic editing, translation refinement, and the structural organisation of this paper. While the AI was employed to enhance the clarity and stylistic quality of the text, all conceptual ideas, legal analyses, original terminology (including the concept of “Algorithmic Hygiene”), and final conclusions remain the sole responsibility of the author.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Johan Schweigl

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

