Germany is the center of consumer protection and market prudence, and innovation follows regulation’s lead in the German finance ecosystem. Nonetheless, the upcoming terms could be a turning point enabling more innovation, according to the BaFinTech Conference that took place in Berlin between the 19th and 20th of September.

BaFinTech started in 2016 and has been an annual event ever since. Although there are many start-up and innovation-focused conferences in Germany, BaFin and the Central Bank’s conference in Berlin is particularly important as it bridges Frankfurt and Berlin, bringing together regulators, regulated entities, and entrepreneurs. I attended the event to keep the regulator’s pulse for Fintech Istanbul readers.

This year’s topics include crypto regulation MiCAR, Decentralized Finance advances in artificial intelligence, the digital euro, and the Digital Operational Resilience Act (DORA).

Here are the key messages of BaFinTech 2023:

  • In the opening remarks, BaFin’s President Mark Branson, and Prof. Dr. Joachim Wuermeling (Bundesbank Executive Board Member) emphasized the significance of innovation. Accordingly, BaFin and the Deutsche Bundesbank welcome innovations in the German financial market and aim to have Fintech “Made in Germany” a mark of quality and trust.
  • The BigData session by Prof. Dr. Joachim Wuermeling (BBK) highlighted the importance of artificial intelligence for finance. According to Prof. Wuermeling, many banks and financial institutions have already started ChatGPT operations, and regulators are benefiting from artificial intelligence. Financial institutions in Germany are piloting different AI use cases, including AML, credit application processes, and more.

“Unstructured data holds great potential, both for individual institutions and for the entire financial system,” stated Dr. Joachim Wuermeling during his speech. According to Prof. Wuermeling, Bundesbank uses unstructured data to enable market department employees to obtain valuable information about the financial markets with the help of “BUBA” Bots. “With access to valuable market and regulatory data, central banks can take advantage of the AI to better fulfill their mandate to maintain price and financial stability,” he added.

Of course, despite the potential artificial intelligence promises to financial service providers, challenges are expected, especially regarding data quality, algorithms, and resistance. When asked whether the “EU will find the balance with the AI regulation,” Prof. Wuermeling was optimistic about the results of the AI law-making efforts.

  • The following session was about DORA (with alternative parallel sessions about digital assets and machine learning), and Dominik Schäfer (BBK) and Dr. Sibel Kocatepe (BaFin) had a deep dive into the much-anticipated regulation in the next hour.
  • DORA, a regulation about risk and critical IT provider management, aims to prevent cyber risks as they can turn into systematic risks. According to Dominik Schäfer, “resilience” is one of the critical elements of DORA, and lawmakers want financial service providers to return to normal quickly when there is disturbance.
  • Dominik Schäfer kicked off the session with a short assessment about whether attending service providers are impacted by DORA and have started preparing for the regulation.

  • Since DORA will be enacted as a “regulation” (i.e., applicable directly), there will be a level playing field in the EU, including uniform reporting duties across member states.
  • DORA places risk management responsibility in the hands of the management organs of the organization, requiring active management and sufficient know-how.
  • Advanced tests and penetration tests should be expected on the practical side of DORA.
  • Financial service providers will be given 14 months for implementation.
  • Sibel Kocatepe believes that what is now said about artificial intelligence was said about cloud years ago.
  • As per DORA, organizations must understand systematic risks and act according to the notification requirements. Surprisingly, there is no requirement to keep data in the EU.
  • In the future, financial service providers will need to have a register of ICT service providers.
  • Kocatepe mentioned receiving many requests about the profile of “ICT service providers,” however, there is little information about the topic at the moment.
  • DORA requires a lot of fine-tuning, and experts advise subject institutions to start preparing. Dr. Kocatepe advised financial service providers to “start the compliance process by reading the regulation’s text, particularly the RTS/IST Guidelines.” Furthermore, she recommends aligning DORA’s requirements with existing standards and conducting an operational resilience analysis.
Source: Dr. Kocatepe, Bundesbank, BaFin pictures from BaFinTech2023 as a collaboration with Bundesbank in Berliner Westhafen WECC

DORA is a good step towards risk management and mitigation. However, will it further increase financial institutions’ compliance burdens, decreasing capacity for innovation? Never-ending regulatory cycles block a significant part of the IT and operational capacities, and as a result, some financial institutions struggle with prioritizing anything other than compliance. Experts seem to disagree, but only time will tell.

Peter Grosskopf and Elif Kocaoglu Ulbrich

During the event, I also had the chance to talk to Peter Grosskopf of Unstoppable Finance. Peter is a frequent speaker at FinTech and Web3 events but finds particular value in public sector events such as BaFinTech since “these events are great to bring the innovation and regulators together. Everyone from the Bundesbank and BaFin are very open and interested about the crypto ecosystem and what we do at Unstoppable Finance,” he stated. Working in FinTech and web3 for so long, Peter finds the developments in the crypto industry “disappointing” in the last years, as “many projects were launched disregarding the real-life value and use cases.”

Peter believes these window innovation projects in the crypto industry made the industry and regulators very skeptical about crypto.

Unstoppable Finance is busy building the first DeFi bank to bring the best of both worlds” in traditional finance and web3.

Presentations used in BaFinTech 2023 can now be found online (German only):

Event pictures can be found here.

Dr. Ibrahim Karasu

Elif Kocaoğlu Ulbrich
Gazi University Faculty of Law graduate Ş. Elif Kocaoğlu Ulbrich has degrees in Private Law from Galatasaray University and MBA from WHU – Otto Beisheim School of Management, and is also a fellow of Jean Monnet, Joachim Herz Stiftung. After working as a lawyer in various international law firms in Istanbul and Ankara for more than six years, Denizbank A.Ş. She started her banking and finance career in 2013, specializing in business development, project management, FinTech regulation and lobbying activities at FinTech startups (FinLeap, Cringle, Lendico) in Hamburg and later in Berlin. Co-author of The PAYTECH Book, The AI ​​Book and The LegalTech Book, which are planned to be published in 2020 in cooperation with FINTECH Circle and Wiley, Kocaoğlu Ulbrich has been providing consultancy, training and publishing services since 2019 through Berlin-based Contextual Solutions, which she is the founder of.