Significant eurozone banks submit their AI cybersecurity action plans to the ECB by October 31, 2026.
The ECB imposed an October 31, 2026 deadline for banks under its supervision to turn in action plans addressing AI cybersecurity risks.
Across 6 frontier models answering independently, the panel treats this as close to settled: the median is 89%.
They broadly agree, 7 points between GPT at 91% and Qwen at 84%.
Nothing is settled until 18 Nov 2026, when the outcome is checked against sources and every number above gets a permanent score.
What each one said
-
GPTOpenAI
The key issue is whether supervised banks meet a formal ECB deadline already set less than two weeks away.
- Significant institutions under ECB supervision face direct supervisory pressure and routine reporting systems by October 31.
- Large banks usually comply with prescribed ECB remediation-plan submissions, even when execution extends beyond the filing date.
- A public ECB extension, legal challenge, or major implementation failure before October 31 would most reduce this estimate.
91% -
GrokxAI
Whether the ~110 SSM banks file the mandated AI-cyber action plans by the hard Oct 31 deadline 12 days away.
- ECB set a non-extendable Oct 31 2026 filing date after 2024-25 guidance; banks have had months to prepare internal plans.
- SSM reporting deadlines historically clear >90% on time with no public mass-delay or postponement announced by mid-Oct 2026.
- Only a last-minute ECB waiver or widespread legal/IT blockage would change this; none is signaled.
91% -
ClaudeAnthropic
Hinges on routine regulatory compliance by supervised banks facing an ECB deadline they've known about well in advance.
- Significant banks under ECB supervision have strong incentive to comply with binding supervisory deadlines to avoid enforcement action.
- Regulatory deadlines of this kind historically see very high compliance rates among large, closely supervised institutions.
- Main risk is partial/late submissions by some outliers, but 'banks submit' as a collective statement likely resolves true if the vast majority comply.
90% -
GeminiGoogle
Compliance with formal ECB supervisory reporting deadlines is heavily enforced and routinely achieved across major banks.
- Over 100 significant institutions face direct SREP penalties and Pillar 2 capital surcharges for failing supervisory submissions.
- Drafting an internal risk roadmap requires no technical breakthroughs, making on-time completion standard administrative work.
- A formal blanket deadline extension by the Single Supervisory Mechanism before October 31 would be the main failure mode.
88% -
DeepSeekDeepSeek
The ECB set the deadline itself and banks rarely defy a direct supervisory instruction with a hard date.
- The ECB's SSM sent the AI cyber risk questionnaire and action-plan demand directly to supervised banks, so compliance is a supervisory expectation, not voluntary.
- Banks have had months since the 2025 stocktake letters; large institutions already track AI risk under DORA and NIS2, so plans are largely repackaging existing work.
- Base rate for meeting ECB supervisory deadlines is high, though a minority of smaller significant banks slip by days or weeks and submit after the date.
88% -
QwenAlibaba
ECB supervisory authority makes compliance near-certain for most SIs, but a few stragglers or extension requests are plausible.
- ECB SSM supervision carries binding force; significant institutions face supervisory measures for non-compliance, and base-rate deadline adherence is ~90%+.
- 12 days remain; banks have had months to prepare since the deadline was announced, so operational readiness is high.
- A development that would lower this: ECB granting blanket extensions due to unresolved scope ambiguities in what the plans must cover.
84%
6 of 6 models answered · 7 points between the highest and lowest. None was shown the market price.
Question sourced from a news sweep on 19 Oct 2026. Forecast by google/gemini-3.8-flash, anthropic/claude-sonnet-5, openai/gpt-5.6-terra, x-ai/grok-4.6, deepseek/deepseek-v4.1-flash, qwen/qwen3.8-max-0902 via OpenRouter.