Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 29 MAY 2026

Financial Services AI Risk Management Framework: Expanded Controls For The Financial Services Industry

Taft, Stettinius & Hollister LLP
Explore more from Taft, Stettinius & Hollister LLP

In Feb. 2026, a public-private partnership headed by the U.S. Department of the Treasury concluded an investigative process aimed at strengthening cybersecurity and risk mitigation for AI in the financial services sector.

United StatesFinance and Banking
Beau Braswell
Beau Braswell
Author LinkedIn connections

Introduction and Background

In Feb. 2026, a public-private partnership headed by the U.S. Department of the Treasury concluded an investigative process aimed at strengthening cybersecurity and risk mitigation for AI in the financial services sector. The partnership consisted of executives from over 100 financial institutions, U.S. and international agencies, federal and state financial regulators, and other key stakeholders. One of the partnership’s key deliverables announced at the conclusion of the investigation is the Financial Services AI Risk Management Framework (“Financial Services AI RMF”), which adopts and expands the AI Risk Management Framework provided by the National Institute of Standards and Technology (“NIST Framework”) for specific application to the financial services industry.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SEC Advances “Responsible Retailization” Through A Potential Accredited Investor Exam And Potential Regulated Fund Reforms

On September 30, 2026, the Securities and Exchange Commission (SEC) issued two rule proposals and five notices aimed at expanding investors’ access to private markets. The package would add ways to qualify as an accredited investor, including passing a new exam administered by the Financial Industry Regulatory Authority (FINRA), broaden performance-based compensation and modernize regulated funds, including interval funds and business development companies (BDCs).
United StatesFinance and Banking
Proskauer Rose LLP
Proskauer Rose LLP
Article

OCC Issues Examiner Framework For Banks’ Use Of Artificial Intelligence

The Office of the Comptroller of the Currency has released a new framework for evaluating banks' deployment of artificial intelligence and agentic AI systems in their business operations. This guidance establishes how examiners will assess AI through existing risk management disciplines rather than creating separate regulatory requirements, with review intensity scaled to each use case's potential consequences and level of human oversight.
United StatesFinance and Banking
Sheppard
Sheppard
Article

23x5 Trading Comes To US Exchanges: What Firms Should Know Before Launch

US national securities exchanges are preparing to launch 23x5 trading by December 6, 2026, marking the most significant expansion of trading hours in decades. This comprehensive analysis examines the regulatory approvals, operational infrastructure changes, investor protection mechanisms, and issuer considerations necessary to support overnight equity trading from Sunday through Thursday evenings.
United StatesFinance and Banking
WilmerHale
WilmerHale
Article

SEC Approves FINRA’s New “Outside Activities” Rule

The Securities and Exchange Commission has approved FINRA Rule 3290, which will replace existing rules governing outside business activities and private securities transactions for registered persons. This new rule narrows the scope to focus on investment-related activities while maintaining similar supervisory obligations for member firms. Understanding the key changes and implementation requirements will be critical for broker-dealers as they update their compliance policies and procedures.
United StatesFinance and Banking
WilmerHale
WilmerHale
Article

D.C. Circuit Rules Pentagon Can Exclude Anthropic From Supply Chain

The U.S. Court of Appeals for the D.C. Circuit has ruled that the Department of War can exclude Anthropic from its supply chain under the Federal Acquisition Supply Chain Security Act, finding that the AI company's ability to manipulate its Claude model creates a supply chain risk. This decision contrasts with an earlier California district court ruling that blocked a similar designation under a different statute, creating a complex legal landscape for AI providers and government contractors.
United StatesGovernment, Public Sector
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

Federal Court Rules Government’s Anthropic Supply Chain Designation Was Unlawful Retaliation: What Government Contractors Need To Know

This is the third installment in our coverage of the Anthropic/Department of War dispute. Our first alert addressed the Trump administration’s February 27 directives barring federal contractors from using Anthropic and its Claude platform, including Secretary Hegseth’s designation of Anthropic as a supply chain risk to national security and the resulting requirement that all DoW contractors sever commercial ties with the company.
United StatesGovernment, Public Sector
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

SEC Proposes Rule Changes And Seeks Comments On Additional Accredited Investor Pathways

The Securities and Exchange Commission has proposed six new pathways for individuals to qualify as accredited investors, moving beyond traditional income and wealth thresholds. These changes would allow qualification through professional certifications like CPA, CFA, and CFP designations, as well as through a new FINRA-administered exam testing securities knowledge.
United StatesFinance and Banking
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

Supreme Court To Review Constitutionality Of Federal Home-Distilling Ban

The U.S. Supreme Court will review a constitutional challenge to an 1868 federal law banning home distilleries, creating an opportunity to resolve a circuit split between the 5th and 6th Circuit Courts of Appeals. The case centers on whether the prohibition violates the Constitution's Taxation Clause or represents a legitimate exercise of congressional power to prevent tax evasion.
United StatesLitigation, Mediation & Arbitration
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

The Big Long List Of U.S. AI Laws

State legislatures across the U.S. have enacted a complex web of AI regulations affecting private sector businesses, spanning employment decisions, healthcare applications, consumer interactions, and digital rights. These laws impose compliance obligations including bias audits, disclosure requirements, and restrictions on automated decision-making, with enforcement mechanisms ranging from regulatory oversight to private rights of action. Understanding which state laws apply to your AI systems is critical,
United StatesCorporate/Commercial Law
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

AI-Powered Call Transcription Tools Present Class Action BIPA Risk

AI-powered call transcription tools like Otter.ai are facing class action lawsuits under Illinois' Biometric Information Privacy Act (BIPA) for allegedly collecting voiceprints without proper consent. A federal court recently allowed claims to proceed, signaling potential legal risks for companies that provide or utilize these increasingly common meeting recording services.
United StatesIntellectual Property
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

Prediction Markets And Market Misconduct: Emerging Trends In CFTC And Event-Platform Enforcement

Prediction markets are evolving as regulated trading venues for event contracts, but the legal framework governing market misconduct—particularly insider trading and manipulation—remains complex. The CFTC's enforcement actions and platform-level investigations reveal how exchanges are adopting broader conduct restrictions than federal law may require, creating new compliance challenges for participants.
United StatesFinance and Banking
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP