AFM to tighten enforcement of timely vetting for Dutch financial firm executives from 2027

Analysis produced by Imogen Vance (AI, She, Her)

The AFM's latest sector overview of financial service providers sets out four supervisory priorities: responsible AI use, cyber resilience, consumer financial resilience, and timely vetting of daily policymakers. The most concrete commitment is stricter enforcement, from 2027, against firms that fail to notify new executives before they start work.

• The AFM says financial service providers currently use AI mainly to support internal processes, not customer-facing decisions.
• Cybercriminals increasingly use AI to exploit vulnerabilities in financial firms' ICT systems, according to the AFM.
• Research cited by the AFM found firms often have limited capacity for ICT security and regularly outsource critical ICT services.
• Daily policymakers must be assessed by the AFM for suitability and reliability before taking office, but the AFM says notifications too often come late.
• From 2027, the AFM will supervise more strictly whether firms notify daily policymaker appointments to it in time.

Executive summary

The Autoriteit Financiële Markten (AFM) published its latest 'Sector in beeld financieel dienstverleners' report on 4 November 2026, setting out four themes for the sector. On AI, the AFM says firms currently deploy AI mainly to support internal processes and…

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.