Banking and finance

Regulation

The dated rules that bear on banking, with a link to each rule’s page in the Regulation section.

Why now

The rules already have dates.

  • December 2026

    Ley 21.719, Chile

    Chile updates its personal data protection law, published on 13 December 2024: automated decisions, the right to an explanation, and portability. It applies from December 2026, unless the pending postponement passes. An agent that decides about a customer will have to prove what it did and why.

  • 2 December 2027

    The EU AI Act

    From 2 December 2027 the obligations for high-risk systems apply, credit scoring among them: event logging, human oversight and explanation. A European group’s policies extend them to its subsidiaries outside Europe.

  • Two supervisors

    International banking

    A subsidiary answers to the supervisor of its country, and its parent to the home supervisor and, from 2 December 2027, to the AI Act. Today, each signed record stays in the bank’s own cloud. With the verifiable evidence package, as a service in 2027 and as a product in 2028, one signed record will be able to serve both supervisors, instead of two evidence systems, and each will verify it on its own machine.

Dates are projections of the current development plan, not commitments.