OCC
A U.S. federal bank regulatory agency responsible for supervising national banks and federal savings associations, and for issuing bank supervisory guidance.
Timeline (last 90 days)
The guidance specifies six areas in which banks must demonstrate 'active controls': AI model risk management, data governance, explainability, third-party AI dependency, operational resilience, and consumer protection.
This regulatory shift requires banks to move from detective controls to preventive controls, with controls needing to take effect at the moment the AI takes action.
The OCC's inclusion of AI in active-control requirements this time means the cadence of MRM needs to shift from periodic review to real-time or near-real-time intervention, and the objects of validation expand from static models to AI components that continuously learn or run within composite workflows.
The U.S. Office of the Comptroller of the Currency (OCC) has issued new supervisory expectations for banks' deployment of AI, significantly raising the compliance bar.
The OCC used the wording 'active controls' rather than 'monitoring' or 'logging,' so passive audit trails no longer meet the standard.
The OCC's requirements on capital adequacy, consumer protection, and anti-money laundering are especially strict.
The embedded evaluation model has precedent in the banking industry, where regulators sometimes reside among employees; institutions such as the Federal Reserve and the OCC have long stationed resident examiners at major banks.
All Facts (8)
美国OCC（货币监理署）和SEC对算法决策系统均有明确的人工监督要求
70%UnverifiedThe guidance specifies six areas in which banks must demonstrate 'active controls': AI model risk management, data governance, explainability, third-party AI dependency, operational resilience, and consumer protection.
50%UnverifiedThe OCC used the wording 'active controls' rather than 'monitoring' or 'logging,' so passive audit trails no longer meet the standard.
50%UnverifiedThis regulatory shift requires banks to move from detective controls to preventive controls, with controls needing to take effect at the moment the AI takes action.
50%UnverifiedThe OCC's requirements on capital adequacy, consumer protection, and anti-money laundering are especially strict.
50%UnverifiedThe embedded evaluation model has precedent in the banking industry, where regulators sometimes reside among employees; institutions such as the Federal Reserve and the OCC have long stationed resident examiners at major banks.
50%UnverifiedThe OCC's inclusion of AI in active-control requirements this time means the cadence of MRM needs to shift from periodic review to real-time or near-real-time intervention, and the objects of validation expand from static models to AI components that continuously learn or run within composite workflows.
50%UnverifiedThe U.S. Office of the Comptroller of the Currency (OCC) has issued new supervisory expectations for banks' deployment of AI, significantly raising the compliance bar.
50%