Today
A mid-sized bank with a few hundred staff: advisers in the branches, business advisers, a credit department, compliance and a small legal team. It already runs Microsoft 365, and management has looked at Copilot. Many staff use ChatGPT on their own phones, knowing full well they must not put anything about customers into it.
A bank lives by rules: its own policies on credit, money laundering and knowing the customer, on advice about investment and pensions, on who may approve what. On top sit the law and the regulators. It is all written down, spread over the intranet, SharePoint, PDFs and emails with "new version attached". So the adviser calls compliance, compliance is on the phone all day, and the new hire does not dare to ask.
With GDPRchat
“What does our credit policy say about self-employed people with under two years of accounts?”
The answer comes in seconds, with an extract from the current policy and a link to the exact section. The adviser knows what it takes, and whether the case must go to credit.
“What do we need on the beneficial owners, and when does a case go to enhanced checks?”
The answer rests on the bank’s own procedure for knowing its customers and points to the form to use. Compliance gets fewer calls and keeps its time for the hard cases.
“Who has to approve it if I want to give a discount on the fee?”
In the first weeks the new colleague asks all the questions people usually keep to themselves, and the answer is always the bank’s own, not the internet’s.
The same chat sits on the phone and does everything people use ChatGPT for: write an email, sum up a long document, explain something complicated simply. The difference is that it also knows the bank’s rules, and the bank decides where it runs.
What changes
The adviser gets the answer while the customer is still there. Compliance is called less. New staff feel sure sooner. And the bank has a lawful, European replacement for the ChatGPT people were using on the quiet.
Who sees what
Everyone can ask about the general policies. The credit department sees credit instructions the advisers should not have. Management’s and the board’s material is for them alone. The bank decides who sees what.
Questions to ask yourself
- Who in your organisation gets called most often with questions about rules and procedures?
- Where do your policies live today, and how do people know they have the latest version?
- How long before a new adviser feels sure of your rules?
- Do your people use ChatGPT or similar today, even where they shouldn’t?
A made-up example, not a customer. The rules in this example are illustration only. They are not legal advice and do not describe what any particular bank must or may do.