EU AI Act FAQ
What are the EU AI Act obligations for financial services in Ireland?
Quick answer
Some financial-services AI uses are listed as high-risk, notably natural-person creditworthiness or credit scoring and life or health insurance risk assessment and pricing. Financial-fraud detection is excluded from the credit-scoring category. AML/KYC, investment suitability and other insurance uses are not automatically high-risk merely because they are financial services.
Classify each financial use
Annex III describes particular purposes. Distinguish a model detecting financial fraud from one assessing a person's creditworthiness. Check whether another listed use or the product-safety route applies. A system outside an AI Act high-risk category can still create substantial consumer, discrimination, privacy and operational risks. Existing financial-services governance, GDPR and applicable sector rules continue to matter.
Separate provider and deployer work
A firm buying and using a high-risk system usually needs to plan for deployer duties such as competent oversight, appropriate inputs, monitoring and logs. Provider conformity assessment is a different responsibility unless the firm also becomes a provider. Article 27 fundamental-rights assessment applies to specified deployers and uses, including the relevant credit and insurance categories, subject to its scope. Align preparation with existing model and risk governance. Confirm the competent authority for the precise activity through the current Irish authority directory.
Reviewed 4 October 2026. Sources: Commission AI Act overview and timetable, classification, deployer duties, literacy guidance and AI Office of Ireland.
Acuity AI advises Irish financial services firms on EU AI Act compliance alongside existing Central Bank governance requirements. See our EU AI Act compliance services.