1. Legacy system modernisation: Core banking systems from the 1990s were not designed for real-time AI integration. Technical debt blocks scaling. Every AI use case requires bespoke integration with legacy architecture.
2. Explainability vs. precision: Every AI decision in credit assessment must be legally substantiated and auditable. Probabilistic models clash with the auditable decision-making that DNB and AFM expect.
3. DORA operational resilience: Mandatory since 17 January 2025: ICT risk management, incident reporting within 4 hours, AI vendor register and resilience testing. Fines of up to 2% of global annual turnover. Every AI vendor must be on the register.
4. Customer relationship erosion: AI agents without human supervision threaten customer trust. Human-in-the-loop is a requirement, not an option. The balance between automation and personal contact determines customer retention.