AI Use in Policy and Regulation Examined in BIS Report Submitted to G20 Finance Ministers
Source
Bank for International Settlements
What happened
The Bank for International Settlements published a report on October 10, 2025 examining the use of artificial intelligence for policy purposes and formally submitted it to G20 Finance Ministers and Central Bank Governors. The report focuses on how AI tools are being applied within policy and regulatory functions at central banks and financial regulators, representing one of the most senior-level multilateral reviews of AI in financial governance to date. Although no specific binding obligations or numerical thresholds are attached to the report, its submission to the G20 places AI governance on the agenda of the world's most consequential economic coordination forum. The report addresses governance gaps and consistency challenges arising from G20 member states independently piloting AI tools for functions such as market surveillance, systemic risk monitoring, and regulatory reporting analysis. Its publication signals that multilateral coordination bodies view AI policy use as a systemic-level concern rather than a purely operational one.
Why it matters
- ·Financial institutions operating across G20 jurisdictions face growing regulatory exposure as member states are expected to translate BIS guidance into domestic supervisory frameworks within one to two years, potentially extending existing model risk management regimes such as SR 11-7 to cover policy-adjacent AI applications.
- ·The report creates operational pressure on compliance teams to map and document AI use in regulatory reporting, risk modeling, and policy interpretation processes before supervisory expectations formally crystallize, meaning firms that delay inventory efforts risk retroactive remediation at higher cost.
- ·The multilateral framing of the report raises organizational risk around fragmented internal governance structures, as firms with inconsistent AI oversight across jurisdictions may find themselves out of alignment with whichever domestic standards their prudential supervisors ultimately adopt from the BIS framework.
Stay ahead of stories like this
Get every Global AI governance development like this one, plus the rest of the week's developments. Every Thursday.
Recent issues
- State-linked attackers and criminal operators are actively weaponizing AI tools as entry points into enterprise systems, turning internal platforms and open-source frameworks into live attack vectors.5 Nov
- Three separate incidents this week each created a new compliance action item: verify your AI vendors' data sourcing, demand agent monitoring coverage guarantees, and audit trusted app identities in your cloud environment.29 Oct
Free every Thursday. Unsubscribe anytime.
Governance controls affected
What to do now
- ☐Conduct an inventory of all AI tools currently used in processes touching regulatory reporting, risk modeling, and policy interpretation across every G20 jurisdiction in which the firm operates.
- ☐Review existing model risk management policies, including SR 11-7 or equivalent domestic frameworks, to assess whether their scope explicitly covers policy-adjacent AI applications and document any gaps.
- ☐Engage prudential supervisors proactively to determine whether current AI governance structures will satisfy anticipated extensions of supervisory expectations stemming from BIS guidance.
- ☐Establish or update model documentation and model cards for AI tools used in policy-relevant functions to ensure audit-ready governance records are in place before domestic guidance is finalized.
- ☐Assign ownership to a senior compliance officer for monitoring how each G20 member jurisdiction in which the firm operates incorporates BIS recommendations into national supervisory frameworks.
What to watch next
Compliance teams should monitor official communications from central banks and financial regulators in each relevant G20 jurisdiction for consultation papers, supervisory letters, or guidance documents that reference or incorporate the BIS report's findings, with particular attention to any proposed extensions of model risk management frameworks to policy-adjacent AI use cases. The period of one to two years flagged in the report as likely for domestic translation means that initial supervisory signals could emerge as early as mid-2026. Teams should also track whether the Financial Stability Board or other multilateral bodies issue complementary guidance that coordinates with the BIS report, as convergent signals from multiple international bodies would accelerate the timeline for mandatory compliance action.