The UAE is taking a closer look at how artificial intelligence is used across its financial sector, with new guidance setting out clearer expectations for banks, insurers and other licensed financial institutions.

The Central Bank of the UAE (CBUAE) has issued guidance on the responsible use of artificial intelligence (AI) and machine learning, placing particular emphasis on consumer protection. The framework addresses transparency, accountability, bias, explainability and data privacy, outlining principles that financial institutions are expected to incorporate into their policies and day-to-day operations.

The move comes as financial companies rely more heavily on AI to handle customer enquiries, assess risks, analyse financial data, detect suspicious transactions and support decisions. These tools can make services faster and more efficient, but they also raise concerns when decisions are difficult to explain, information is inaccurate or customers are treated unfairly.

For the UAE, the challenge is to support financial innovation without compromising the trust on which the industry depends.

The guidance does not replace the country's existing financial regulations. Instead, it adds a more focused set of expectations for responsible AI use, building on the broader technology guidelines already developed by the UAE's financial regulators.

The message to financial institutions is clear: introducing AI is not just a technology decision. Firms must understand the risks, remain accountable for the systems they use and make sure customers have meaningful protection when automated decisions affect their financial lives.

WHAT HAS CHANGED IN THE UAE’S FINANCIAL RULEBOOK?

The CBUAE's consumer-protection guidance sets expectations for licensed financial institutions using AI and machine learning, including insurance providers.

The aim is to encourage responsible technology adoption while ensuring customers are treated fairly and can obtain meaningful information about decisions that affect them.

Several principles sit at the heart of the guidance.

Transparency: Customers should receive appropriate information about AI-driven decisions and their potential impact.

Accountability: Financial institutions remain responsible for the systems they deploy and the outcomes those systems produce.

Fair treatment: AI should not lead to unjustified discrimination or encourage customers to choose financial products that do not suit their needs.

Explainability: Institutions should be able to explain important decisions, particularly when those decisions have significant consequences for consumers.

Data privacy: Personal and financial information must be handled responsibly and in accordance with applicable requirements.

These safeguards matter because AI can influence access to financial products, customer service, risk assessments and other decisions that affect people's financial circumstances.

A system may analyse thousands of records in seconds, but that does not automatically make its conclusions accurate or fair.

Financial institutions must therefore look beyond what their AI systems can do. They also need to understand how the systems behave, identify potential problems and monitor their impact over time.

BANKS AND INSURERS REMAIN ACCOUNTABLE

A key principle in the CBUAE's broader AI governance framework is that financial institutions cannot simply hand responsibility to the technology companies supplying their software.

The regulator's governance guidance calls for documented frameworks covering AI and machine learning, with controls proportionate to the size, nature and complexity of each institution. Boards and senior management are expected to remain accountable for model selection, development, deployment, oversight and ongoing risk management.

This has practical implications for banks and insurers buying AI products from external vendors.

A bank cannot assume a system is reliable simply because a technology provider has supplied it. The institution must have enough understanding and oversight to determine whether the model is suitable for its intended purpose.

That could mean assigning clear responsibilities, documenting how systems are used, reviewing their performance and monitoring risks after deployment.

Insurers face similar considerations when AI is used in customer interactions, risk assessments and other business operations. The level of scrutiny should reflect the potential consequences for customers.

The intention is not to discourage financial institutions from adopting advanced technology. It is to ensure that the people responsible for regulated financial services retain meaningful control over the systems they use.

HUMAN OVERSIGHT TAKES CENTRE STAGE

AI can process large amounts of information quickly, but not every financial decision is suitable for fully automated handling.

The CBUAE's guidance on human oversight distinguishes between systems where a person approves or rejects an AI recommendation, systems that operate autonomously under human monitoring, and systems that function without direct human involvement. Fully autonomous use is intended only for low-risk, non-material processes with appropriate safeguards.

That distinction becomes particularly important when a decision could significantly affect a customer.

For example, AI might help a bank flag unusual transactions or organise information for a customer-service team. These applications are different from systems that influence access to credit or help determine how a serious customer complaint is handled.

The greater the potential harm, the more important meaningful human oversight becomes.

The guidance also addresses customers' ability to seek human review or an explanation of AI-generated decisions. Financial institutions should maintain accessible complaint procedures and provide ways for customers to challenge decisions or correct inaccurate information that may have affected an outcome.

In other words, customers should not be left without a practical route to challenge a decision simply because a computer system made the initial assessment.

Human oversight is intended to provide a way to review questionable outcomes, correct errors and establish accountability when automated processes fall short.

TACKLING BIAS AND UNFAIR FINANCIAL DECISIONS

AI systems learn patterns from data. When that data is incomplete, inaccurate or unrepresentative, the resulting decisions can be unreliable.

In financial services, the consequences can be serious.

An automated system might misunderstand a customer's circumstances, rely on incorrect information or produce unfair outcomes for people who should be assessed on an equitable basis.

The CBUAE's guidance highlights the need to address bias, ethical concerns and explainability when using AI and machine learning. Its human-oversight provisions also emphasise fair treatment and protection against using AI to promote unsuitable products, pressure customers into purchases or deliver misleading marketing.

For financial institutions, responsible AI governance must go beyond checking whether a model performs well technically.

Firms also need to examine the outcomes it produces, consider whether certain customers may be disadvantaged and ensure that people have ways to challenge mistakes.

Regular testing and monitoring will be important because a model that performs well today may become less reliable as customer behaviour, economic conditions or underlying data changes.

The goal is to identify problems early and prevent them from developing into wider consumer-protection issues.

WHY THE RULES MATTER AS FINANCE BECOMES MORE AUTOMATED

Financial institutions are finding more uses for AI, from customer support and document processing to fraud detection, risk analysis and personalised services.

Automation can reduce repetitive work, help employees focus on complex cases and uncover patterns that might otherwise go unnoticed.

But those benefits come with risks.

A poorly managed system could misclassify a transaction, provide inaccurate information, recommend an unsuitable product or give a customer an incomplete explanation of an important decision.

When the outcome affects someone's money, insurance coverage or access to financial services, even a single error can damage confidence.

The CBUAE's approach puts consumer protection at the centre of AI adoption rather than treating it as an issue to address only after a system has been deployed.

For financial institutions, the task is to introduce new tools while maintaining the reliability, fairness and accountability customers expect from regulated service providers.

For consumers, the real value of the framework will depend on whether these principles translate into better service and more effective protection in practice.

FOUR REGULATORS, A BROADER TECHNOLOGY FRAMEWORK

The CBUAE's AI guidance is part of a wider effort to establish responsible technology practices across the UAE's financial sector.

The Central Bank, the Securities and Commodities Authority (SCA), the Dubai Financial Services Authority (DFSA) and the Financial Services Regulatory Authority (FSRA) of Abu Dhabi Global Market have jointly developed guidelines for financial institutions adopting emerging technologies.

These guidelines cover areas such as artificial intelligence, big data analytics, cloud computing, biometrics, application programming interfaces and distributed ledger technology.

The broader framework is designed to support innovation while helping financial institutions manage the risks associated with new business models and technology-enabled services.

Coordination matters because the UAE's financial sector operates across several regulatory jurisdictions. The Central Bank supervises institutions within its remit, while the DFSA and FSRA oversee financial services within the Dubai International Financial Centre and Abu Dhabi Global Market, respectively. The SCA has responsibilities relating to securities and markets.

Although the regulators share a broader interest in responsible technology adoption, financial institutions must still follow the specific rules and supervisory requirements that apply to their activities.

The AI-focused consumer guidance adds another layer by addressing how automated systems can affect customers directly.

It is more accurately understood as a targeted set of responsible-use expectations than as a single AI law replacing the UAE's existing financial regulations.

DUBAI’S AI AMBITIONS ADD TO THE MOMENTUM

The regulatory push comes as the UAE steps up its efforts to establish itself as a global centre for AI-driven finance.

In April 2026, the Dubai International Financial Centre announced plans to become an AI-native financial centre, with artificial intelligence intended to play a larger role in its legal frameworks, business environment, infrastructure and workforce development.

DIFC said the initiative could generate $3.5 billion in economic benefits and create 25,000 jobs. These figures represent projected benefits, not results that have already been achieved.

The ambition reflects Dubai's intention to move beyond isolated AI experiments and integrate the technology more deeply into financial businesses.

That creates a close link between innovation and regulation.

Financial centres looking to attract AI companies need an environment where businesses can develop and deploy new services. They also need clear expectations for handling sensitive information, managing risks and protecting customers.

Regulatory clarity can help businesses understand their responsibilities before rolling out AI at scale. However, its effectiveness will depend on how consistently the rules are applied and how well regulators supervise compliance.

For the UAE, the opportunity is to build a financial ecosystem in which technological progress and responsible governance develop together.

THE COST OF COMPLIANCE AND IMPLEMENTATION

Meeting the new expectations may require financial institutions to review their existing AI systems, internal policies and risk controls.

Some firms may already have established model-governance processes, performance monitoring and procedures for human review. Others may need to improve documentation, assign clearer responsibilities or strengthen their oversight of third-party technology.

Practical steps could include maintaining an inventory of AI systems, assessing risks before deployment, testing models for bias, monitoring performance and making it easier for customers to challenge decisions.

Staff training will also matter. Employees need to understand when AI-generated recommendations can be relied upon and when a decision requires closer scrutiny.

These measures can involve additional spending on technology, compliance expertise and training. Smaller institutions may face different resource constraints from large banks with established risk-management teams.

The CBUAE's governance framework recognises these differences by calling for controls proportionate to the size, nature and complexity of each institution.

Not every AI application carries the same level of risk. A tool that sorts internal documents does not necessarily require the same safeguards as a system that significantly influences a customer's access to a financial product.

The challenge will be to put appropriate protections in place without making responsible innovation unnecessarily difficult.

WHAT THIS MEANS FOR CUSTOMERS

For consumers, the key question is straightforward: will these expectations make a difference when a financial institution uses AI?

Customers should receive appropriate information about AI-driven decisions, have ways to challenge errors and be able to seek human review where relevant.

They should also be protected against unfair treatment and the use of AI to promote unsuitable products or misleading claims.

Privacy is another important part of the picture. Financial institutions must handle customer information responsibly and consider how personal data is collected, used and protected within AI systems.

The guidance does not mean that every AI-supported decision must be made by a human, nor does it guarantee that automated systems will never make mistakes. Instead, it recognises that different applications carry different levels of risk and require appropriate safeguards.

Ultimately, the framework will be judged by what customers experience. Clearer explanations, fairer treatment and practical ways to resolve problems will be important signs that the rules are working as intended.

FACT CHECK METER

FACT METER: 98%

STATUS: AI CONSUMER-PROTECTION GUIDANCE CONFIRMED — RESPONSIBLE-USE EXPECTATIONS CLARIFIED

CONFIRMED: The CBUAE has issued guidance on consumer protection and the responsible use of AI and machine learning by licensed financial institutions, including insurers.

CONFIRMED: The guidance addresses transparency, bias, accountability, explainability, ethical considerations and data privacy.

CONFIRMED: The CBUAE's governance framework calls for documented AI governance arrangements and continuing accountability from senior management and boards.

CONFIRMED: The human-oversight provisions address customer review, explanations, complaints, fair treatment and safeguards against unsuitable products or misleading AI-driven marketing.

IMPORTANT DISTINCTION: The guidance adds targeted expectations for responsible AI use. It does not replace the UAE's entire financial regulatory framework.

IMPORTANT DISTINCTION: DIFC's AI-native financial-centre initiative is a separate programme. Its projected economic benefits and job creation figures should not be presented as realised results.

AWX VERDICT: The UAE is making consumer protection and governance a more explicit part of AI adoption in financial services. The real impact will depend on how financial institutions apply the guidance and how effectively regulators oversee their systems.

WHAT TO WATCH NEXT

1. Financial-institution compliance: Watch for changes to AI governance policies, model testing, board reporting and internal oversight across banks and insurers.

2. Consumer complaints and human review: The effectiveness of review procedures and complaint channels will show whether customers can challenge AI-driven decisions in practice.

3. AI risk management: Financial institutions will need to identify bias, monitor model performance and respond when systems produce unreliable results.

4. Regulatory coordination: Further guidance from the CBUAE, SCA, DFSA and FSRA could provide greater clarity across different parts of the UAE's financial sector.

5. Wider AI adoption: The growing use of automation, generative AI and data analytics will test whether governance arrangements can keep pace with technological change.

6. DIFC's AI-native plans: Progress on infrastructure, workforce development and regulatory integration will help determine whether Dubai can turn its AI ambitions into measurable economic results.

THE AWX BOTTOM LINE

The UAE is moving towards a clearer framework for responsible AI use in financial services, with consumer protection, transparency and human accountability taking a more prominent role.

The CBUAE's guidance gives banks, insurers and other licensed institutions clearer expectations for managing AI-related risks. It reinforces a basic principle: financial firms remain responsible for the systems they use, and customers need meaningful ways to question decisions that affect them.

The wider regulatory effort also supports the UAE's ambition to become a leading centre for AI-driven finance. But attracting investment and deploying advanced technology will not be enough on their own. Long-term success will depend on whether innovation goes hand in hand with reliable safeguards.

For the financial industry, the message is clear. AI can make services faster and more efficient, but trust remains essential. The UAE's next challenge is to turn responsible-AI principles into everyday practices that protect customers while allowing financial innovation to move forward.

ATTLAS WIRE | AWX WORLD NEWS

Real Stories. Lasting Impact.