Explains which regulations cover which bank data
GDPR covers personal data, PCI DSS v4.0.1 cardholder and sensitive authentication data only, DORA and the EBA ICT guidelines the bank's ICT risk, banking secrecy customer data.
Can AI do this?
AI does this well Most of the tested AI models master this. 3 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 100% | Mastered |
| gemini-3.5-flash-lite | Low cost | 100% | Not shown |
| gpt-6-luna | Low cost | 100% | Mastered |
| claude-haiku-5-5 | Low cost | 100% | Mastered |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: GDPR covers personal data, PCI DSS v4.0.1 cardholder and sensitive authentication data only, DORA and the EBA ICT guidelines the bank's ICT risk, banking secrecy customer data.
How it is assessed: Answers a written question on the regulatory coverage of bank data correctly
Related knobits
Needed for
- S-102 Recognises a regulation cited for data it does not cover
- S-104 Recognises a requirement cited to the wrong article or version
- S-107 Recognises a regulation in force with no requirements
- S-108 Recognises regulated data outside its requirement's scope
- S-153 Explains PCI DSS scope
- S-154 Explains PCI DSS requirements on stored card data
All 17 knobits of Register regulatory security requirements.
Source: Practice the stage 1 reference and review checklist rest on