Does MiFID II apply to AI used in a wealth-management firm?

Yes. ESMA's position is that a firm using AI must still meet its existing MiFID II obligations on organisational arrangements, conduct of business, and acting in the client's best interest (ESMA35-335435667-5924, 30 May 2024). The technology creates no carve-out; an AI-drafted client communication must meet the same fair, clear and not misleading standard as a human-drafted one.

Can an EU wealth firm put client data into a general-purpose AI tool?

Not safely. The moment client personal data enters a prompt, the GDPR applies to that processing, and pasting it into a tool never scoped for confidential financial data is a decision the firm must justify (Regulation (EU) 2016/679, Article 22). The baseline discipline is to keep live client data out of general-purpose AI tools and contain any real-data work in a covered environment.

Is typical wealth-management AI high-risk under the EU AI Act?

Usually not. The only financial-services use the AI Act lists as high-risk is evaluating a person's creditworthiness or credit score (Annex III point 5(b), Regulation (EU) 2024/1689). Drafting memos, summarising calls, and screening deals fall under the lighter Article 50 transparency obligations instead. Only a firm scoring individual clients' creditworthiness enters the high-risk regime.

When do the EU AI Act transparency rules start applying?

The Article 50 transparency obligations apply from 2 August 2026 (European Commission, digital-strategy.ec.europa.eu). Machine-readable marking of AI-generated content under Article 50(2) applies from 2 December 2026 for systems already on the market, and the high-risk regime for standalone Annex III systems was deferred to 2 December 2027 following the Digital Omnibus package adopted 29 June 2026.

What is the single most important AI compliance step for an EU wealth firm?

Governance around the model, not the choice of model. Put a named human between AI output and the client, contain client data in a covered environment, disclose client-facing AI use, and keep a reconstructable record of what the model was asked and who signed off. None of the five applicable rule-sets regulates which model you pick; they all regulate the workflow around it. --- Serra Education provides process and tooling consulting only, never Serra Wealth investment advice. This article is general information on AI-adoption process and governance. It is not investment, legal, or compliance advice. Each firm remains responsible for its own regulatory compliance and for validating AI output. No live client data should be placed in any AI workflow. Regulatory positions and timelines can change; confirm current obligations with qualified counsel and against the primary sources before you rely on them.

The AI Rules Every EU Wealth-Management Firm Must Follow (2026)