The European Central Bank takes public supervisory enforcement action against banks missing the October 31, 2026 AI cyber-threat plan deadline.
The ECB set an October 31, 2026 deadline for banks to submit AI cyber-threat action plans. Official enforcement notices against non-compliant banks satisfy this.
Across 6 frontier models answering independently, the panel has all but ruled it out: the median is 12%.
They do not agree: GPT puts it at 57% and Claude at 7%, 50 points apart. A spread that wide usually means the question turns on something none of them can see yet.
Nothing is settled until 1 Apr 2027, when the outcome is checked against sources and every number above gets a permanent score.
What each one said
-
GPTOpenAI
This turns on whether the ECB treats missed plans as a supervisory breach warranting public naming within five months.
- ECB Banking Supervision must first identify late filers after 31 October and complete due-process steps before publication.
- Public ECB enforcement is less common than private remediation, but a fixed sector-wide cyber deadline raises escalation odds.
- A disclosed widespread failure, major AI-enabled cyber incident, or repeat offender would sharply increase public-action likelihood.
57% -
GrokxAI
Whether any SSM bank wholly misses the 31 Oct plan filing and ECB opts for a public notice within five months.
- Significant banks almost never skip a hard ECB filing after months of dialogue; complete misses are rare.
- SSM first uses SREP measures or private letters; public enforcement notices/fines are slower and reserved for egregious cases.
- A cluster of non-filings or a cyber incident would shift this, but none is evident with four weeks left.
18% -
DeepSeekDeepSeek
Enforcement needs a named bank to blow a deadline that is still four weeks away and a supervisory process that historically runs on multi-year cycles.
- The ECB's SREP process typically takes 6-18 months from finding to formal enforcement decision, so a plan due Oct 31 2026 cannot produce a public notice by Apr 1 2027.
- The ECB has never issued a public enforcement notice specifically for missing a thematic cyber/AI planning deadline; its public sanctions target capital, liquidity, and…
- Banks that miss the deadline will most likely get supervisory letters and remediation timelines, not public enforcement, which is the standard first response to planning…
12% -
QwenAlibaba
ECB supervisory enforcement within 5 months of a deadline is historically rare; the SSM typically uses dialogue first.
- The SSM's standard escalation path runs from supervisory dialogue to recommendations to formal measures over 12-18 months, not 5.
- No precedent exists for the ECB issuing public enforcement notices against banks for missing a planning-document deadline this quickly after it passes.
- A development that would raise this materially: a major AI-driven cyber incident in early 2027 prompting the ECB to make an example of non-compliant banks.
12% -
GeminiGoogle
ECB enforcement processes require lengthy due process and hearings, making public penalties within five months of a missed deadline improbable.
- SSM formal penalty proceedings routinely take 12 to 24 months, with supervisory dialogue and remediation kept confidential first.
- The ECB almost never issues public sanctions immediately for missing supervisory planning deadlines rather than substantive capital breaches.
- Public naming would only accelerate if multiple major lenders openly defied the mandate and the ECB fast-tracked periodic penalty payments.
8% -
ClaudeAnthropic
ECB typically relies on private supervisory dialogue, not public enforcement notices, for such compliance deadlines.
- ECB supervisory practice favors confidential follow-up letters and SREP scoring over named public enforcement actions for plan-submission deadlines.
- The window to April 2027 is short for formal enforcement proceedings, which usually follow extended non-compliance periods.
- A high-profile breach or widespread non-compliance before the deadline could push ECB toward unusually public action, but no sign of that yet.
7%
6 of 6 models answered · 50 points between the highest and lowest. None was shown the market price.
Question sourced from a news sweep on 3 Oct 2026. Forecast by google/gemini-3.8-flash, anthropic/claude-sonnet-5, openai/gpt-5.6-terra, x-ai/grok-4.6, deepseek/deepseek-v4.1-flash, qwen/qwen3.8-max-0902 via OpenRouter.