Skip to content
UNTIL 31 OCTWhich kind of AI user are you?
Take the two-minute check
AIAC AI ASSURANCE COUNCIL™

MAS and AI in financial institutions

What it carries

The penalty attached to each MAS and AI in financial institutions obligation that carries one, stated with the provision that sets it. A ceiling is a maximum available to an authority, not a tariff and not a prediction.

§ 1 — How to read this

3 obligations in this collection carry a stated penalty. Each is given with its basis, because a figure without the provision behind it cannot be checked and should not be relied on. Where an instrument sets a ceiling as the greater of a fixed sum and a share of turnover, both limbs are shown. Nothing here is an assessment of any organisation's exposure: what a supervisor does in a particular case turns on matters no reference page can know.

§ 2 — By obligation

The ceiling, and what sets it

  • MAS Notice 658, paragraphs 2 to 4Management of Outsourced Relevant Services for Banks

    Binding: an incomplete or unsubmitted register contravenes a Notice issued under the Banking Act 1970.

    Notice 658 is issued under section 47A(2), (4), (6), (7) and (12) of the Banking Act 1970. MAS states that Notices primarily impose legally binding requirements on a specified class of financial institutions or persons, and that Directions have legal effect, meaning MAS could specify whether a contravention of a direction is a criminal offence. No monetary figure appears here: the statutory provision text could not be read from a primary source, and an unverified number is not published in this collection.

  • MAS Notice FSM-N05, paragraphs 4 to 6Notice on Technology Risk Management

    A legally binding requirement under a Notice. No monetary figure is stated on this page.

    The Notice records that it is issued pursuant to section 29(1) of the Financial Services and Markets Act 2022. MAS states that Notices primarily impose legally binding requirements on a specified class of financial institutions or persons, and that Directions have legal effect, meaning MAS could specify whether a contravention of a direction is a criminal offence. The quantum is deliberately absent: the statutory provision text could not be read from a primary source, and an unverified figure will not be published here.

  • Notice FSM-N05, paragraph 9Notice on Technology Risk Management

    A legally binding requirement. Contravention is an enforcement matter rather than a supervisory observation, and no monetary figure is stated here.

    FSM-N05 is issued pursuant to section 29(1) of the Financial Services and Markets Act 2022. MAS describes Directions, of which Notices are a kind, as instruments that have legal effect, meaning that MAS could specify whether a contravention of a direction is a criminal offence; and Notices as instruments that primarily impose legally binding requirements on a specified class of financial institutions or persons. The provision text setting out the consequence of contravention could not be retrieved from a primary source, so no ceiling is asserted. Separately, unauthorised disclosure of customer information engages banking-secrecy obligations under the Banking Act — a distinct exposure with its own route, and one this page does not quantify either.

Certification

Assessed on the same standard of evidence

Every Council credential is examined on applied judgement against a published anchor, set out the way the obligations on this page are. The Certified Applied AI Associate, the Council’s flagship, is open to any adult today, its fee waived by a coupon code from the AI-Readiness Check, and the register lists what is open for enrolment.