EU-regulated financial services organizations face three new AI Act obligations for communications surveillance systems starting August 2026. Risk and compliance teams must audit existing AI monitoring tools for bias, transparency, and human oversight requirements.
Single source — verify before acting. Most firms assumed existing surveillance vendors would handle compliance automatically, but the obligations require internal audit trails that many haven't built.
Chief Risk Officers and compliance heads should inventory all AI-powered surveillance tools by next week. Schedule vendor calls to confirm which obligations they cover versus what requires internal controls.