Prudential / Capital Requirements Regulations in Germany

October 29th 2026

Trust and credibility - and the role of financial supervision in deposit insurance in Germany

Speech by Bafin President Mark Branson delivered at the IADI 25th Annual General Meeting and Conference in Berlin, 29 October 2026.

Why this matters

The document is a speech by BaFin President Mark Branson at the IADI AGM, so content type is speech. It addresses deposit guarantee schemes, moral hazard, resolution, and EU harmonisation (CMDI, DGSD, EDIS), which fall under banking and deposit protection and, for topics, the prudential/stability framing.

Sectors:

Banking & Credit

Topics:

Prudential / Capital Requirements

BankCredit Union

View Original

🇩🇪 BaFin Report

September 24th 2026

2026 LSI stress test: Banks’ and savings banks’ capital buffers robust

Germany’s small and medium-sized banks and savings banks remain highly resilient. Despite a tense economic situation, heightened geopolitical risks and rising burdens, especially in corporate and commercial real estate business, institutions have, on the whole, a sound capital base which is sufficient to cope with…

Why this matters

This is a press release announcing the 2026 LSI stress test results conducted by BaFin and the Bundesbank. The content is informational rather than prescriptive, reporting outcomes of a completed exercise covering ~90% of German credit institutions.

Sectors:

Banking & Credit

Topics:

Prudential / Capital Requirements

BankCredit Union

View Original

🇩🇪 BaFin Warning

March 3rd 2026

CapitalFM: BaFin warns against offers on the website capitalfm(.)io

The Federal Financial Supervisory Authority BaFin warns against offers on the website capitalfm(.)io. According to information available to BaFin, the operator is providing financial and investment services without the required authorisation.

Why this matters

This regulatory update from BaFin warns against unauthorized financial and investment services being offered on the website capitalfm.io. It is relevant for banks, fintechs, and all firms operating in the banking, investment management, and wealth management sectors, as it highlights the importance of proper...

Sectors:

Banking & Credit Investment Management Wealth & Private Banking

Topics:

Authorisation & Licensing Consumer Protection / Conduct Prudential / Capital Requirements

BankFintech

View Original

🇩🇪 BaFin Guidance

January 30th 2026

Artificial intelligence: BaFin publishes guidance on ICT risks

The Federal Financial Supervisory Authority (BaFin) has issued its “Guidance on ICT Risks in the Use of Artificial Intelligence at Financial Entities”. The guidance will help entities manage ICT risks in accordance with the requirements under DORA.

AI Analysis

BaFin's "Guidance on ICT Risks in the Use of Artificial Intelligence at Financial Entities," published December 18, 2025, provides non-mandatory advice to help financial entities manage ICT risks from AI under DORA across the AI lifecycle. It matters because it integrates AI explicitly into existing ICT risk frameworks, emphasizing security, resilience, and third-party risks for supervised institutions, aligning with RTS on ICT risk management (EU 2024/1774) and subcontracting (EU 2025/532). This clarifies supervisory expectations amid growing AI adoption in finance, reducing ambiguity in DORA compliance.

Key dates

01 February 2024: - Related BaFin/Bundesbank supervisory notice on cloud outsourcing (contextual reference)
18 December 2025: - Guidance issuance date

Suggested considerations

Develop and approve AI strategy integrated with ICT roadmap and governance.
Embed AI in existing ICT risk framework, ensuring lifecycle coverage with safeguards (e.g., testing, monitoring, decommissioning).
Conduct third-party due diligence and contractual reviews for AI/cloud providers, including exit/portability testing.
Implement AI-specific testing, documentation, and incident processes proportionate to criticality.
Ensure management accountability for oversight, training, and interdisciplinary controls.

What changed

The guidance does not introduce new binding rules but clarifies AI as ICT systems requiring DORA-compliant treatment, including:
AI strategy: Management-approved, aligned with overall strategy, defining responsibilities, competencies, and interdisciplinary collaboration for critical functions.
ICT risk management integration: Cover identification, protection, detection, response, recovery, training; apply to AI lifecycle (data acquisition, development, operation, retirement).
Development and testing: Robust standards, documentation, testing proportionate to criticality; special focus on generative AI/LLMs, open-source, and code generation risks.
Operational processes: Asset classification, monitoring, access controls, logging, anomaly detection, business continuity, secure decommissioning.

Compliance impact

Urgency: High – DORA is live (effective Jan 17, 2025), and AI use is widespread; this guidance operationalizes ICT requirements for AI, exposing non-compliant firms to supervisory scrutiny, fines, or remediation orders under CRR/Solvency II. It heightens focus on third-party/cloud risks amid EU AI Act rollout, demanding immediate gap assessments to avoid operational resilience failures.

References

AI-generated analysis. May contain errors or omissions — verify with the original BaFin source before acting. Full disclaimer.

Sectors:

Banking & Credit Insurance & Pensions

Topics:

Prudential / Capital Requirements Operational Resilience / Outsourcing Technology & Cyber

BankInsurance

View Original

🇩🇪 BaFin Speech

January 27th 2026

Press Conference “Risks in BaFin’s Focus”, 28 January 2026

Opening Statement by Mark Branson

Sectors:

Banking & Credit Investment Management Crypto & Digital Assets

Topics:

Consumer Protection / Conduct Prudential / Capital Requirements Technology & Cyber

BankFintechCrypto Exchange

View Original

🇩🇪 BaFin Warning

January 22nd 2026

Rostock24 Limited: BaFin warns consumers about the website Rostock24(.)com

The Federal Financial Supervisory Authority (BaFin) warns consumers about the company Rostock24 Limited and the services it is offering. BaFin suspects the unknown operators of the website rostock24(.)com of offering consumers financial, investment and cryptoasset services without the required authorisation. Rostock24…

Why this matters

This regulatory update from BaFin warns consumers about the unauthorized financial, investment and cryptoasset services offered by the website Rostock24.com, which is operated by an unknown company called Rostock24 Limited.

Sectors:

Banking & Credit Investment Management Crypto & Digital Assets

Topics:

Authorisation & Licensing Consumer Protection / Conduct Prudential / Capital Requirements

BankFintechCrypto Exchange

View Original

🇩🇪 BaFin Warning

January 16th 2026

Two-five-management.com: BaFin warns about website and identity fraud

The German Financial Supervisory Authority (BaFin) warns about offers from the website two-five-management(.)com. According to information available to BaFin, the unknown operators of the website are offering banking services, in particular fixed-term deposits, and financial services without the required…

Why this matters

This regulatory update from BaFin warns about a website offering unauthorized banking and financial services, potentially impersonating a registered AIF asset management company. This poses risks to consumers and requires prompt action by the relevant firms and regulators.

Sectors:

Banking & Credit Investment Management Wealth & Private Banking

Topics:

Authorisation & Licensing Consumer Protection / Conduct Prudential / Capital Requirements

BankAsset ManagerWealth Manager

View Original