The Pause in the Review Call

Let me start with this incident.  Three weeks ago, I was sitting in a review call where a young team proudly walked me through their new dashboard.

Everything was real-time. Customer onboarding time cut by 60 percent. Risk flags auto-generated. Compliance reports available at one click. At the end of the presentation, someone asked a simple question.

“Who actually signs off on these exceptions?”

There was a pause. Not long. Just long enough. Then came the familiar answer.

“The system handles it.” Not wrong. Not reassuring either.

I remember thinking that we had built something impressive. But I also felt that quiet discomfort you get when you realise you are looking at a very smooth surface, and you have no idea what is happening underneath.

No crisis. No failure. Just a vague sense that something important had quietly moved out of sight.

The Santander Fine Was Not the Story

This is why the news about Banco Santander being fined over €40 million for shortcomings in its Openbank division is more important than it looks.

Not because of the amount. For a global bank, that number is immaterial. It is a story about how easily modern banking forgets where human responsibility actually sits.

Therefore I say that the real signal is different.

Regulators are no longer looking at digital banks as innovative experiments with relaxed expectations. They are now treating them as full-scale financial institutions with full-scale accountability.

And they are starting to look inside. Not just at capital ratios. Not just at liquidity buffers. But at internal processes, controls, decision trails, and governance structures.

The boring parts. The invisible parts. The parts no one shows in product demos.

When the Flagship Is Not Exempt

Openbank is not a fringe startup. It is Santander’s digital flagship. The polished face of what modern banking is supposed to look like.

Seamless onboarding. App-first journeys. Cross-border scalability. Algorithmic monitoring. If even that unit is being flagged for weaknesses in internal processes, it tells us something uncomfortable.

Digital-first does not mean regulation-light. It often means regulation-heavy. Because when operations become faster, more distributed, and more automated, the surface becomes simpler but the underlying system becomes far more complex.

And complexity is where risk hides best.

The Rise of Compliance Debt

There is a quiet pattern I have been noticing across banks, NBFCs, and fintech platforms. We are investing heavily in:

• Customer experience.
• Journey design.
• Automation layers. AI-driven decisions.

But we are under-investing in:

• Process ownership.
• Exception governance.
• Human accountability.
• Audit trails that actually make sense to humans.

Everything works. Until it doesn’t. And when it doesn’t, no one quite knows where the decision came from.

The dashboard shows the outcome. The model shows the score. The workflow shows the path. But the responsibility feels oddly distributed. Everyone touched it. No one owned it.

When the System Becomes the Answer

This is what I call compliance debt.

Not non-compliance. Not a regulatory breach. But accumulated shortcuts in process design slowly detach systems from human supervision. The kind of debt that does not show up in financial statements.

It shows up during inspections. When regulators start asking: 

• Who approved this logic?
• Who reviews these thresholds?
• Who overrides the model?
• Who signs off on exceptions?

And the answers start with: “The system…” “The platform…” “The vendor…” “The algorithm…”

That is when you realise the organisation has been operating with a comfortable illusion. That technology has replaced governance;  that automation has replaced accountability; that dashboards have replaced judgement.

Regulators Have Stopped Being Impressed

The Santander fine is not about AML gaps in one bank. It is about a broader shift.

Regulators are done being impressed by digital optics. They are now pricing in internal fragility.

They want to see:

• Clear ownership structures.
• Traceable decision chains.
• Human accountability behind automated flows.
• Auditable governance, not just auditable data.

In other words, they are asking a very old question in a very new environment.

Who is actually responsible? Not in theory. Not in policy documents. In practice. And on a bad day. In an edge case. When the system behaves unexpectedly.

The Pattern Beyond Banking

I see the same behaviour repeating everywhere. In organisations, people trust dashboards more than conversations. In families, parents trust tracking apps more than direct check-ins. In cities, authorities trust sensors more than field officers. In finance, boards trust models more than middle managers.

Everything is visible. And yet, very little feels truly understood. We are surrounded by signals. But increasingly disconnected from meaning.

The system knows more. The humans feel less. And somewhere along the way, we quietly accepted that responsibility can be automated too.

Accountability Does Not Get Digitised

The uncomfortable truth is this. : You can outsource interfaces. You can automate journeys. You can scale operations. You can even delegate decisions.

But you cannot digitise accountability. It always sits with a human. A regulator will still look for a name. An internal auditor will still look for a the person who exercises a function. A board will still look for a responsible person.

Not a model. Not a platform. Not a vendor. A person.

The Quiet Phase Before the Real Headlines

What makes this moment interesting is that nothing has collapsed. There is no financial crisis. No major fraud. No public outrage.

Just a fine. A process gap. A quiet signal. But these are the signals that usually arrive before the real ones.

Before the operational failures. Before the systemic risks. Before the headlines that use the word “unexpected”. This is the phase where organisations still believe they are ahead of the curve. And regulators have already moved past them.

When Speed Replaces Judgement

Digital banking promised speed, efficiency, and scale. It delivered all three. But it also quietly removed friction. And friction, it turns out, was where judgement used to live.

• The pause before approving.
• The conversation before overriding.
• The discomfort before signing off.

We removed those pauses. Now we are discovering that systems move faster than responsibility. And regulators are simply doing what they have always done.

They are following the risk. Even when it no longer looks human.

The Question No Dashboard Can Answer

The Santander fine is not a warning about one bank. 

It is a mirror for the entire industry. Not asking whether digital banking works. But, asking whether anyone is still truly in charge of it.

And that is a much harder question to answer on a dashboard.