On December 18, 2025, the German regulator, the Federal Financial Supervisory Authority (BaFin), issued Guidance on managing information and communication technology (ICT) risks when using artificial intelligence (AI) by entities operating in the financial sector.

The Guidance is intended to help financial entities implement the regulatory requirements under the Digital Operational Resilience Act (DORA) and…