At a seminar convened in Paris by the Association Europe-Finances-Régulations on 15 October 2026, Denis Beau, First Deputy Governor of the Bank of France and Delegated Chairman of the Prudential Supervision and Resolution Authority (ACPR), delivered what has since been recognised as one of the most substantive European regulatory addresses of the year — a call to reconcile three forces that are increasingly pulling the financial system in competing directions: innovation, security, and technological sovereignty. The speech, subsequently published by the Bank for International Settlements on 3 November 2026, underscores just how urgently Europe's financial establishment is grappling with the governance of technology at a time of profound systemic transformation.
Three Imperatives, One Impossible Triangle?
The framing Beau chose — three imperatives that must be reconciled rather than traded off — is itself a significant policy signal. For years, European financial regulators have operated on the implicit assumption that some degree of compromise was inevitable: that aggressive pursuit of innovation would create security vulnerabilities, or that stringent prudential controls would blunt the competitive edge of European financial institutions against their American and Asian counterparts. Beau's address challenges that fatalistic framing directly, arguing instead that these imperatives must be treated as a unified governance challenge rather than a trilemma demanding sacrifice.
This rhetorical and intellectual move matters enormously for how European supervisors — including the ACPR, which Beau chairs in its delegated capacity — approach the regulation of fintech firms, artificial intelligence deployment in credit and risk assessment, cloud infrastructure dependencies, and the broader digitalisation of financial services. By insisting that innovation, security, and sovereignty can coexist, Beau is implicitly rejecting both the laissez-faire model that leaves technology governance to market forces and the defensive protectionism that would isolate European finance from global technological currents.
Sovereignty as a Regulatory Imperative
The inclusion of technological sovereignty alongside innovation and security is perhaps the most politically charged element of Beau's argument. Technological sovereignty — broadly understood as the capacity of European institutions and regulators to govern, audit, and where necessary control the technological infrastructure underpinning their financial systems — has gained sharp urgency in recent years as European banks have deepened their reliance on a small number of non-European cloud service providers and technology platforms. Concentration risk in cloud infrastructure has become a live supervisory concern across the European Banking Authority and the European Central Bank, and Beau's decision to elevate sovereignty to a co-equal imperative signals that the ACPR intends to treat it with corresponding seriousness.
This is not merely an abstract philosophical position. French and European financial institutions operate in a geopolitical environment in which the provenance and governance of critical technology infrastructure carries real strategic weight. The lessons drawn from semiconductors, telecommunications, and energy supply chains over recent years have not been lost on financial regulators. Beau's speech, by anchoring sovereignty within the supervisory framework, suggests that the ACPR and its European counterparts are building toward a more assertive posture on third-party technology risk — one that may eventually manifest in formal supervisory expectations around data localisation, exit strategies, and the auditability of algorithmic systems used in regulated financial activities.
The European Regulatory Moment
The choice of the Association Europe-Finances-Régulations as the venue is itself revealing. This is an audience of European financial lawyers, regulators, and senior industry professionals — people who shape the practical implementation of regulatory frameworks across member states. By presenting this argument to that community, Beau is not simply floating ideas; he is laying intellectual groundwork for the regulatory agenda that the ACPR and the broader European supervisory architecture will pursue in the period ahead.
Europe is currently at a juncture where several major regulatory frameworks — including the Markets in Crypto-Assets Regulation (MiCA), the Digital Operational Resilience Act (DORA), and forthcoming artificial intelligence governance rules — are either newly implemented or approaching implementation. Each of these frameworks, in different ways, embodies precisely the tension Beau identifies. MiCA attempts to unlock innovation in crypto-asset markets while imposing conduct and prudential standards. DORA seeks to harden the operational security of financial entities without stifling the technology partnerships that enable modern financial services. The AI Act reaches for governance of algorithmic decision-making without foreclosing the productivity gains that institutions are beginning to realise from machine learning systems.
What This Means for Financial Institutions and Supervisors
For financial institutions operating across European jurisdictions, Beau's speech carries a clear implication: supervisors at the highest levels are actively developing a doctrine that refuses to treat technology governance as a secondary concern or as a matter best left to chief information officers and compliance teams. The integration of innovation management, cybersecurity resilience, and technological sovereignty into a single supervisory lens means that boards and executive committees should expect regulators to ask not just whether a technology works, but whether it is secure, whether it can be governed, and whether it serves or undermines European strategic autonomy.
The BIS publication of Beau's remarks gives them an international dimension as well. Central banks and financial supervisors beyond Europe will read this speech as a statement of direction from one of the continent's most senior prudential authorities. At a moment when global financial regulation is itself becoming a site of geopolitical competition — with divergent approaches to digital assets, artificial intelligence, and infrastructure control emerging between major jurisdictions — a clear articulation of Europe's attempt to hold innovation, security, and sovereignty together in a single framework has significance well beyond the seminar room on the Seine where it was first delivered.
Written by the editorial team — independent journalism powered by Codego Press.