New Deloitte report explores risks of Generative AI use in Asia Pacific’s Financial Services Sector

BANGKOK, 31 January 2024 - A new report released by Deloitte’s Asia Pacific Centre for Regulatory Strategy (ACRS), ‘Generative AI: Application and Regulation in Asia Pacific’ explores the risks associated with the use of Generative AI in the Financial Services (FS) sector, the current regulatory landscape in Asia Pacific and also provides guidance for FS firms in preparing for upcoming legislation and regulation in this rapidly evolving area.

ACRS interviewed 12 Deloitte experts, both technology and regulatory specialists, across Asia Pacific (AP), to understand how, as Generative AI (“GenAI”) technology advances, policymakers, and regulators are re-evaluating existing AI frameworks to mitigate new technological risks brought about by GenAI and ensure they remain fit-for-purpose across financial services.

With significant breakthroughs in the development of artificial intelligence (AI) technology in the past twelve months, such as the popularisation of GenAI technologies through tools such as OpenAI’s Chat GPT and Google’s Bard AI, common risks addressed by Asia Pacific regulators in their principles of AI regulation have evolved rapidly. While transparency, accountability, fairness, robustness, privacy and data security are still considerations, concerns with potential biases and intellectual property now require regulators to balance the interest of technological innovation with ensuring the safety of consumers.

The financial services industry is going through a period of profound change and disruption. GenAI is transforming the way in which their services are delivered, but as with any change, regulatory interest and scrutiny of AI is growing. Financial firms are now facing new and exacerbated risks such as bias, governance, accountability and data protection across the AI lifecycle, as well as regulatory risk and strategic risk. Deloitte’s latest report provides recommendations for financial services firms to become future-ready and establish their own AI governance framework as early as possible and take action to understand, identify and manage AI related risks.

The report highlights several key findings:

• FS firms should prepare for GenAI regulation, this is looming on the horizon.
• FS firms that have adopted or are considering adopting AI applications should start developing an AI governance framework to support better risk management, as well as for future regulatory compliance in this space. FS firms should be accountable and responsible for the outputs that GenAI applications produce.
• FS firms should evaluate factors contributing to the vulnerability of customers such as educational background, income, or age and ensure that the adoption of Generative applications does not result in bias or discrimination against vulnerable customers as an intended or unintended result of adopting GenAI applications.
• FS firms should identify the parties involved in collecting, storing and processing customers’ personal data and ensure the compliance of data protection requirements by the corresponding parties or functions.
• As copyright protection for input and output of GenAI remains unclear, FS firms should assume that any data or queries entered into GenAI applications may become public. The recommendation is for the establishment of controls to prevent inadvertent exposure of intellectual property or breaches of copyright.
• FS firms adopting or planning to adopt GenAI applications should invest in talent acquisition and provide training on AI technologies to existing staff, including the Board and Senior Management, to enhance their understanding of key risks and their responsibility in mitigating those risks.

Commenting on the report, Akihiro Matsuyama, Risk Advisory Leader at Deloitte Asia Pacific said, "Although AI regulation and legislation is still in the initial stages of development or implementation in most jurisdictions, it is crucial for financial services firms to take a measured approach by establishing their own AI governance framework as early as possible and by taking action to understand, identify and manage AI related risks. It’s essential for the private sector to engage in active dialogues with regulators and legislators to share industry knowledge and experience to help facilitate the rule-making process and drive a consensus on the future pathway of AI.”

Mr Wong Nai Seng, Regulatory Strategy Leader at Deloitte Southeast Asia, added: “AI technologies such as GenAI offer significant potential to increase efficiency and digitalisation within the financial services sector. However, the risks associated with the use of such technologies should remain top of mind. As the regulatory landscape surrounding AI technologies continues to evolve, both globally and within Southeast Asia, it would be prudent for financial services firms considering the adoption of AI technologies to consider how AI related risks fit within their existing risk appetite and their overall risk management framework.”

To access the full report and learn more about the findings, please visit Generative AI: Application and Regulation in Asia Pacific | Deloitte SEA | Financial Services.

About Deloitte

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities (collectively, the “Deloitte organization”). DTTL (also referred to as “Deloitte Global”) and each of its member firms and related entities are legally separate and independent entities, which cannot obligate or bind each other in respect of third parties. DTTL and each DTTL member firm and related entity is liable only for its own acts and omissions, and not those of each other. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.

Deloitte Asia Pacific Limited is a company limited by guarantee and a member firm of DTTL. Members of Deloitte Asia Pacific Limited and their related entities, each of which is a separate and independent legal entity, provide services from more than 100 cities across the region, including Auckland, Bangkok, Beijing, Bengaluru, Hanoi, Hong Kong, Jakarta, Kuala Lumpur, Manila, Melbourne, Mumbai, New Delhi, Osaka, Seoul, Shanghai, Singapore, Sydney, Taipei and Tokyo.

This communication contains general information only, and none of DTTL, its global network of member firms or their related entities is, by means of this communication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser.

No representations, warranties or undertakings (express or implied) are given as to the accuracy or completeness of the information in this communication, and none of DTTL, its member firms, related entities, employees or agents shall be liable or responsible for any loss or damage whatsoever arising directly or indirectly in connection with any person relying on this communication.

© 2024 Deloitte Southeast Asia Ltd.