What the CBI's 2026 AI Supervisory Focus Means for Your Organisation

The Central Bank of Ireland (CBI) has made its position clear: artificial intelligence is no longer a future concern for regulated financial services organisation, it is a present-day supervisory priority. The publication of the CBI's Regulatory & Supervisory Outlook for 2026 moves AI governance from a theoretical discussion to a concrete agenda item for boards and senior management across the Irish financial sector.

For organisations that have been monitoring the regulatory landscape, this is not a surprise. The EU AI Act, which entered into force in August 2024, laid the groundwork for a new era of AI accountability. What the CBI's 2026 Outlook does is translate that European framework into a direct Irish supervisory mandate. The message is unambiguous: the time to prepare is now.

The Core Supervisory Expectation: From Principles to Practice
The CBI's approach is not about stifling innovation. It is about ensuring that as firms adopt AI to drive efficiency and improve customer outcomes, they do so within a robust governance framework that manages the associated risks. The core principles are not new, they are the same principles of good governance that have always applied in regulated finance but their application to AI systems requires a new level of rigour.

"A focus on the core principles of explainability, accountability, good governance and strong risk management is essential. Technical competence and ethical behaviour are required from those using the tools and vigilance by those whose wellbeing will be positively or negatively affected by their deployment."— Central Bank of Ireland, Regulatory & Supervisory Outlook 2026

This means firms must be able to demonstrate to the CBI not just that their AI models work, but that they are fair, transparent, robust, and subject to meaningful human oversight. The era of "black box" AI in regulated processes is over.

Key Areas of Supervisory Focus for 2026
Based on the CBI's Outlook and the broader EU regulatory direction, we expect supervisory engagement in 2026 to concentrate on three key areas:

1. Governance & Accountability

2. Model Risk Management

3. Third-Party & Vendor Risk

The Deadline is Closer Than It Appears
While the EU AI Act's requirements for high-risk systems do not fully apply until December 2027, the CBI's 2026 supervisory focus means that firms need to be able to demonstrate progress well before that date. Building a compliant and effective AI governance framework takes time typically 6–9 months for a moderately complex firm. The work needs to start now.

The firms that act in 2026 will not only meet their regulatory obligations but will also build a foundation of trust with their customers, their board, and their regulator. They will be the ones who can scale the use of AI with confidence, turning a compliance necessity into a genuine competitive advantage.

References
1. Central Bank of Ireland. (2026, February). Regulatory & Supervisory Outlook 2026. centralbank.ie
2. European Commission. (2024, August). The EU Artificial Intelligence (AI) Act. gov.ie

Liz Bancroft-Turner
Founder & Managing Director, Tolt Innovations
With over 25 years of experience leading technology and transformation programmes across the UK, US, Europe, and Asia for organisations including Credit Suisse, HSBC, Barclaycard, AIB, EY, Accenture, and Microsoft ,Liz founded Tolt Innovations to help Irish regulated financial services firms achieve CBI supervisory readiness.