As artificial intelligence (AI) integrates increasingly into financial services, companies are encountering complex regulatory challenges related to recordkeeping. Financial institutions strive to balance the innovative potential of AI with stringent compliance requirements. The pressing question is how firms should maintain records to evidence compliance in a landscape where AI rules have not been fully defined. This dilemma necessitates companies to navigate pre-existing regulations that were not crafted with AI in mind.
AI’s incorporation has drawn comparisons to previous technological advancements such as emails and messaging apps. In both scenarios, existing rules were stretched to accommodate new technologies, prompting firms to adapt their recordkeeping strategies. Historical cases demonstrate regulators’ focus on accurately assessing AI’s impact and application within companies, highlighting a need for precise and verifiable adherence to current regulatory expectations.
What Are the Current Regulatory Expectations?
The Securities and Exchange Commission (SEC) and Financial Industry Regulatory Authority (FINRA) have not yet introduced AI-specific recordkeeping mandates, but existing laws still apply. Experts stress that regulatory expectations for supervision, communications, and conflict resolution are applicable irrespective of whether decisions are human or AI-driven. Regulators like FINRA have emphasized the necessity for transparency with technology governance and data privacy.
How Should Firms Prepare for Recordkeeping?
Companies must meticulously document and validate how AI tools are utilized within their operations. Brian Rubin, a partner at Eversheds Sutherland, points out that firms need to demonstrate clear accountability for decisions influenced by AI.
“Firms remain responsible for outcomes generated by technology they choose to use,” Rubin stated.
This proactive stance ensures compliance even in the absence of explicit AI guidelines.
There is a push for firms to involve compliance teams early in the AI integration process. Experts like Derek Stern from Manulife Wealth & Asset Management suggest examining where data is stored and ensuring AI-derived conclusions are defensible.
“Due diligence should look at how vendors manage updates and changes in AI models,” noted Stern.
This strategic alignment of compliance during design stages could minimize unforeseen compliance disruptions later.
Despite its challenges, AI presents enhancements in compliance processes. New AI capabilities potentially reduce false positives in communication review, focusing instead on company-specific policy interpretation. Caution remains vital, as firms must question any AI systems that claim to fully automate compliance, according to Jamie Hoyle from MirrorWeb.
Financial firms are urged by Red Oak to remember that AI does not absolve them of their accountability responsibilities. Comprehensive documentation, human oversight, and clear explainability within AI operations form the essential compass points for financial companies steering through these evolving regulatory waters.

USDT
AAPL