Table of Contents
On June 24, 2026, the Bangko Sentral ng Pilipinas (BSP) issued Memorandum No. M-2026-031, titled “Governance Principles for Artificial Intelligence in Financial Services” — the Philippines’ first formal regulatory framework for AI adoption in the banking sector. The guidelines, announced publicly on June 30, establish voluntary governance principles under the BSP STARS framework: sustainability, transparency, accountability, responsibility, and security. For Filipino banking professionals, fintech workers, and technology vendors serving the financial sector, the BSP framework is now the benchmark against which their institutions’ AI strategies will be measured. This article explains what the framework requires, why it matters, and what Filipino professionals must do to prepare.
Key Takeaway
- 🏛️ First formal AI regulation for PH banking: BSP issued Memorandum M-2026-031 on June 24, 2026, establishing voluntary governance principles for AI in all BSP-supervised financial institutions — the first sector-specific AI regulation in the Philippines.
- ⭐ The BSP STARS framework: BSP AI governance is built on five principles — Sustainability, Transparency, Accountability, Responsibility, and Security — applied across the full AI system lifecycle: plan, develop, validate, deploy, and monitor.
- 📋 Covers banks AND vendors: The guidelines apply not only to financial institutions but also to third-party vendors and outsourced service providers that support AI-related activities under a shared responsibility model.
- 🔧 Voluntary but consequential: Compliance is technically voluntary, but institutions that ignore the framework face increasing scrutiny as BSP integrates these principles into its supervisory expectations and upcoming Model Risk Management framework.
- 👷 Career impact for Filipino professionals: Banks need AI governance frameworks, model validation, algorithmic fairness testing, and vendor oversight — creating demand for professionals with both AI and compliance skills.
Table of Contents
- What Is the BSP STARS Framework and Why Was It Issued Now
- The STARS Framework: Five Principles
- The AI System Lifecycle: Five Stages
- Who Must Comply With BSP AI Governance
- How the BSP STARS Framework Connects to Existing Regulation
- What This Means for Filipino Banking Professionals
- BSP STARS Framework in Southeast Asia
- What Filipino Institutions Must Do
- FAQ About the BSP STARS Framework
What Is BSP AI Governance and Why Was It Issued Now
The framework refers to the set of principles and expectations the Bangko Sentral ng Pilipinas has established for how banks and other BSP-supervised financial institutions (BSFIs) should develop, deploy, and monitor artificial intelligence systems. The framework was issued through Memorandum No. M-2026-031, dated June 24, 2026, and announced publicly on June 30 through a guidance paper titled “Governance Principles for Artificial Intelligence in Financial Services.”
The timing is not accidental. Filipino banks are already using AI for credit scoring, fraud detection, customer service chatbots, compliance monitoring, and risk management. According to Business Inquirer reporting, the BSP recognized that AI adoption in financial services has accelerated faster than the regulatory framework governing it. Deputy Governor Lyn I. Javier stated: “As artificial intelligence continues to advance and integrate into the financial sector, financial institutions must establish effective controls and safeguards against the attendant risks of AI adoption, such as data privacy concerns, bias leading to unfair and discriminatory practices, and misuse of technology.”
The BSP also acknowledged that institutions are at different stages of AI maturity, which means their risk exposures vary. This is why the framework is voluntary rather than mandatory — but the central bank made clear that it expects institutions to develop their own AI governance frameworks proportionate to their AI usage. As SunStar reported, the BSP said its AI governance principles align with guidelines developed by the OECD, ASEAN, and the Financial Stability Institute.
The STARS Principles: Five Pillars of AI Governance
The core of the framework is the STARS principle — five foundational requirements that banks must apply at each stage of the AI system lifecycle. PhilStar reported that STARS stands for sustainability, transparency, accountability, responsibility, and security. Here is what each principle requires.
Sustainability
BSFIs must ensure their AI solutions are “materially” beneficial to the entire financial, environmental, and societal ecosystem. The development of AI systems must aim to minimize carbon footprints, opt for energy efficiency, and must be “human-centered.” This principle reflects growing awareness that AI infrastructure — particularly data centers and model training — carries significant environmental costs.
Transparency
Relevant and necessary information about AI systems must be available and tailored to the knowledge of intended users or stakeholders. “To avoid blind reliance on AI system recommendations, users must be equipped to answer the questions such as ‘how’ the output was derived and ‘why’ a recommendation was made,” the BSP stated. Banks must maintain a centralized AI systems inventory, notify users when AI output is used in products or processes, and document design processes, decision-making logic, error tracking, and data sources for auditability.
Accountability
Institutions must clearly define responsibility among management, developers, and all relevant stakeholders, with emphasis on keeping a human in the loop. “While AI systems provide recommendations, humans are ultimately accountable for decisions made. The output of AI systems should not replace or diminish human responsibility,” the BSP stated. Human oversight and proper segregation of roles must be integrated across the AI lifecycle, and those responsible for developing and deploying AI must have sufficient experience and competence.
Responsibility and Social Fairness
AI systems should avoid unfair practices or potential harm to users, institutions, and the broader financial ecosystem. This covers data privacy concerns and avoiding potential bias against any demographic, particularly minority or vulnerable groups, through proper training data. The BSP requires that “the main objective of the AI system is to contribute positively to the individual’s well-being and support the greater good of the financial system.”
Security
BSFIs must have rigorous cybersecurity and data quality controls. They must conduct regular risk-based assessments for potential vulnerabilities, implement risk mitigation controls, systems testing, and incident response procedures covering AI models. The BSP specifically requires institutions to “regularly monitor and evaluate data quality and model performance to detect anomalies (such as bias and hallucination) early on.” The guidelines note that “AI system’s overall accuracy, reliability, and effectiveness hinge on the quality of its data sets.”
The AI System Lifecycle: Five Stages of the BSP STARS Framework
The framework is not a one-time compliance exercise. The STARS principles must be applied at each stage of the AI system lifecycle: plan, develop, validate, deploy, and monitor. This means institutions cannot simply audit their AI after deployment — they must embed governance from the planning stage through ongoing monitoring.
- Plan: Define the AI system’s purpose, assess risks, determine whether AI is the appropriate solution, and establish governance protocols before development begins.
- Develop: Build the AI system with transparency, document design decisions, ensure training data quality, and test for bias.
- Validate: Independently verify the AI system’s performance, fairness, security, and compliance before deployment.
- Deploy: Roll out the AI system with human oversight, user notification, and clear escalation protocols for when the system fails or produces unexpected results.
- Monitor: Continuously assess the AI system’s performance, track errors, detect anomalies including bias and hallucination, and conduct regular reviews.
Who Must Comply With the BSP STARS Framework: Banks, Vendors, and the Shared Responsibility Model
The guidelines apply to all BSP-supervised financial institutions (BSFIs) — which includes banks, electronic money issuers, and other regulated financial entities. But critically, the principles also cover vendors and outsourced service providers that support AI-related activities under a shared responsibility model.
This is significant because many Philippine banks rely on third-party AI vendors for credit scoring, fraud detection, and customer service. Under the framework, the bank remains accountable even when the AI is built and operated by a vendor. Institutions must ensure their vendor contracts include AI governance requirements, and that vendors comply with the same transparency, security, and fairness standards the bank itself must meet.
For Filipino technology professionals working at AI vendors serving the banking sector, this means the market for AI compliance and governance expertise is expanding beyond banks themselves. Vendors that can demonstrate framework compliance will have a competitive advantage in winning bank contracts.
How This Framework Connects to Existing Financial Regulation
The BSP’s AI governance framework does not exist in isolation. It connects to several existing regulatory and policy frameworks that worldngayon.com has been covering throughout 2026.
The BSP’s existing IT Risk Management framework already covers emerging technologies, focusing on information security, outsourcing, and project management. The central bank also announced it will release a Model Risk Management framework that will focus on algorithmic fairness and model risks throughout the entire model lifecycle using a proportionate, risk-based approach. This forthcoming framework will provide more detailed requirements for AI model validation and testing.
Our AI banking Philippines analysis documents how Filipino banks are already transitioning from AI co-pilot tools to autonomous workflows in collections, KYC, fraud detection, and SME credit. The framework provides the regulatory guardrails for this transition. Our Digital Banks Philippines guide covers the six BSP-licensed digital banks that are among the most aggressive adopters of AI technology — and therefore most affected by the new guidelines.
The framework also complements the BSP’s broader financial inclusion policy, which promotes digital payments and e-wallet adoption. AI has the potential to expand financial inclusion by enabling alternative credit scoring for unbanked Filipinos — but only if the AI is fair, transparent, and free from the bias that the guidelines explicitly prohibit. The Philippine digital fraud landscape is another connection point: AI-powered fraud detection is a key use case, and the security principle of STARS directly addresses the need for robust cybersecurity around AI systems.
What BSP AI Governance Means for Filipino Professionals
The issuance of this framework creates concrete career and business opportunities for Filipino professionals across the financial technology ecosystem. Here are the key implications.
For Banking Professionals
Banks now need to build AI governance frameworks from scratch. This creates demand for professionals who understand both AI technology and regulatory compliance. Roles in AI risk management, model validation, algorithmic fairness testing, and vendor oversight are emerging as new career paths within Philippine banks. Senior management and board members need AI literacy to fulfill their accountability obligations under the framework.
For Fintech and Technology Professionals
Fintech companies and AI vendors serving Philippine banks must now demonstrate compliance with these governance principles to win and retain contracts. This creates demand for professionals who can build AI governance documentation, transparency reports, and audit trails. Understanding the STARS framework is now a competitive advantage for any Filipino technologist working in financial services.
For Compliance and Risk Professionals
The BSP’s forthcoming Model Risk Management framework will require more detailed compliance work. Professionals with experience in model validation, stress testing, and regulatory reporting are well-positioned to expand their expertise into AI model risk. The intersection of AI and compliance is one of the fastest-growing career paths in Philippine financial services.
For OFWs and Overseas Professionals
Filipino professionals working abroad in banking, fintech, and AI roles should understand the framework because it aligns with international frameworks from the OECD and ASEAN. The principles are transferable — an OFW who understands these principles can apply similar frameworks in Singapore, the Middle East, or any jurisdiction following international AI governance standards. Our SEC GCash responsible lending analysis shows how Philippine regulators are increasingly coordinating with fintech companies on consumer protection — and the BSP framework extends this trend into the AI era.
The Broader Context: BSP AI Governance in Southeast Asia
The Philippines is not alone in developing AI governance for financial services. Singapore’s Monetary Authority of Singapore (MAS) has published guidance on AI-enabled cyber risks and the FEAT principles (Fairness, Ethics, Accountability, Transparency) for AI in financial services. ASEAN is developing regional AI governance frameworks that the BSP explicitly referenced in its guidelines.
What makes the framework notable is its timing. The Philippines is issuing AI financial regulation while its digital banking sector is still maturing — only two of six licensed digital banks are profitable, as documented in our Philippine digital banks analysis. This means the regulatory framework is being established before AI adoption reaches its peak, giving institutions time to build governance into their systems rather than retrofitting it later.
The DiBA PH fintech initiatives demonstrate that the industry is already organizing itself around digital finance standards. The framework provides the regulatory foundation that complements these industry-led efforts.
What Filipino Institutions Must Do About the Framework
While the framework is voluntary, institutions that take it seriously will gain competitive and regulatory advantages. Here are the concrete steps Filipino financial institutions should take.
First, conduct an AI inventory. Institutions cannot govern what they do not know they have. The BSP requires a centralized AI systems inventory — so the first step is cataloging every AI system in use, including those embedded in vendor products.
Second, establish an AI governance committee. The accountability principle requires clear roles and responsibilities. Institutions should form committees with representation from technology, risk, compliance, legal, and business units.
Third, develop AI policies and procedures. The framework requires documented policies for each stage of the AI lifecycle. Institutions should start with their highest-risk AI systems — typically those involved in credit decisions, fraud detection, and customer-facing applications.
Fourth, invest in AI literacy. Senior management, boards, and frontline staff need to understand how AI works, what its limitations are, and how to identify when it fails. The BSP explicitly requires that those responsible for developing and deploying AI have “sufficient experience and competence.”
Fifth, prepare for the Model Risk Management framework. The BSP announced it will release this framework with a focus on algorithmic fairness and model risks. Institutions that build STARS compliance now will be ahead when the more detailed requirements arrive.
Frequently Asked Questions About the BSP STARS Framework
What is the BSP STARS framework?
The framework refers to the governance principles established by the Bangko Sentral ng Pilipinas through Memorandum No. M-2026-031 for how banks and other BSP-supervised financial institutions should develop, deploy, and monitor artificial intelligence systems. The framework is built on the BSP STARS framework principles: sustainability, transparency, accountability, responsibility, and security.
Is the framework mandatory?
The guidelines are technically voluntary, meaning institutions are not immediately penalized for non-compliance. However, the BSP expects institutions to develop their own AI governance frameworks proportionate to their AI usage, and these principles will be integrated into supervisory expectations. The BSP will also release a forthcoming Model Risk Management framework with more detailed requirements.
Who must comply with the framework?
All BSP-supervised financial institutions (BSFIs) — including banks, electronic money issuers, and other regulated financial entities — are covered. The guidelines also apply to third-party vendors and outsourced service providers that support AI-related activities under a shared responsibility model. Banks remain accountable for AI systems even when operated by vendors.
What is the BSP STARS framework?
STARS stands for Sustainability, Transparency, Accountability, Responsibility, and Security. These five principles must be applied at each stage of the AI system lifecycle: plan, develop, validate, deploy, and monitor. The principles require banks to ensure AI is fair, transparent, secure, human-centered, and environmentally responsible.
How does the framework affect Filipino banking professionals?
The framework creates demand for professionals who understand both AI technology and regulatory compliance. New roles in AI risk management, model validation, algorithmic fairness testing, and vendor oversight are emerging. Senior management and board members need AI literacy to fulfill their accountability obligations. Professionals with AI governance expertise will have a competitive advantage in the Philippine financial services job market.
How does the framework compare to other ASEAN frameworks?
The BSP explicitly aligned its framework with guidelines from the OECD, ASEAN, and the Financial Stability Institute. Singapore’s MAS has similar FEAT principles (Fairness, Ethics, Accountability, Transparency). The Philippine framework is notable for adding Sustainability and Security to the core principles, and for being issued while the digital banking sector is still maturing.
What happens if a bank does not comply with the framework?
Since the guidelines are voluntary, there is no immediate penalty. However, institutions that lack AI governance frameworks face increasing scrutiny as the BSP integrates these principles into supervisory expectations and releases the forthcoming Model Risk Management framework. Institutions without governance frameworks may also face legal and reputational risks if their AI systems produce biased, unfair, or harmful outcomes.
Financial Disclaimer
This article is for informational purposes only and does not constitute financial, legal, or regulatory advice. The BSP AI governance framework is a voluntary guideline, not a binding regulation. Institutions should consult with qualified legal and compliance professionals before implementing AI governance policies. For the official BSP guidance paper, refer to bsp.gov.ph.
This article is part of worldngayon.com’s coverage of AI governance, financial regulation, and the digital economy for Filipino professionals worldwide. For more on AI in Philippine banking, explore our AI banking Philippines analysis and our Digital Banks Philippines guide.
