Zango report

The AI Regulatory Edge

AI agents are pushing UK regulators towards a new model of financial supervision. This new report from Zango sets out recent AI regulatory developments with a foreword by Rt Hon John Glen MP.
Rt Hon John Glen MP

Foreword By Rt Hon John Glen MP

Member of the Treasury Committee, House of Commons. Former City Minister from 2018 to 2022, leading the reforms later enacted through the Financial Services and Markets Act 2023.

“The existing framework was built for a world in which senior managers make decisions and can be held directly accountable for them, not for a world in which autonomous agents act continuously, and in which a small number of cloud and model providers sit beneath the entire sector. The Mills Review, the Bank's Financial Stability Report and Nikhil Rathi's speech in June all ask, in different ways, whether technology-neutrality is sufficient when the technology itself changes the nature of accountability and concentration risk. That deserves a serious answer.”

— Rt Hon John Glen MP

AI REGULATORY DEVELOPMENTS

The twelve developments
covered in this report

19 May
UK Government

Financial Services and Markets Bill

Accountability requirements move out of statute and into the regulators' rulebooks, so future changes to how AI is supervised will not have to wait for Parliament.

26 May
IOSCO

Supervisory toolkit for AI use in capital markets

Sets out the questions supervisors are being equipped to ask, which makes it the closest thing yet to a preview of your next AI conversation with the FCA.

10 Jun
Financial Stability Board

Sound practices for responsible adoption of AI

Establishes materiality and risk as separate tests, so a small use case with real autonomy stops being a small governance problem.

24 Jun
Nikhil Rathi, Chief Executive, FCA

Rethinking regulation for the age of AI

The FCA signals it will reach for market-wide powers routinely rather than exceptionally, moving intervention beyond your own supervisory relationship.

30 Jun
Sarah Breeden, Deputy Governor, Bank of England

Agents of change

The Bank asks in public whether technology-agnostic rules remain sufficient, the clearest signal so far that AI-specific requirements are on the table.

6 Jul
Sheldon Mills, FCA

The Mills Review

Recommends the regulator supervise with AI as firms adopt it, replacing periodic document review with continuous, data-driven oversight.

7 Jul
Bank of England

Financial Stability Report

Treats AI as a source of system-wide financial risk rather than a firm-level operational one, which changes who is watching and what they are watching for.

10 Jul
HM Treasury

First Critical Third Parties designated

Brings the shared layer beneath the market under direct supervision, while leaving responsibility for depending on it firmly with your firm.

14 Jul
HM Treasury

Financial Services AI Adoption Plan

Proposes sector-wide incident sharing and third-party assurance, pointing towards supervision built on pooled evidence rather than firm-by-firm returns.

10 Aug
Financial Conduct Authority

High-growth firms: good and poor practice

Names structured governance over AI as good practice and concentrated, thinly evidenced ownership as poor, giving you the benchmark before the guidance lands.

18 Aug
Financial Conduct Authority

Wealth management survey report

Shows adoption still limited but accelerating, which is why supervisory expectations are being set now rather than after the fact.

2 Sep
Financial Conduct Authority

Frontier AI and cyber resilience review

Finds vulnerability discovery outpacing remediation, making the governance around the model, not the model itself, the thing under examination.

Executive summary

Key themes

01

Continuous supervision

Recent developments point towards more continuous, system-wide supervision as AI becomes more autonomous. Regulators are considering how supervision should adapt as AI operates across increasingly interconnected parts of the financial system.

02

Accountability

Greater autonomy makes senior-manager accountability and meaningful human oversight harder to exercise and to evidence. Probabilistic systems make point-in-time assessment less reliable, and shared reliance on common cloud, model and data providers creates concentration and resilience risk across firms.

03

A less prescriptive framework

The Financial Services and Markets Bill would remove statutory requirements from the SM&CR and give the FCA and PRA more flexibility over how the accountability framework operates. Not an AI reform, but it gives regulators room to adapt one.

04

A gap in the perimeter

General-purpose AI tools can increasingly influence savings, investment and pension decisions while potentially sitting outside the FCA's existing perimeter. The Mills Review recommends examining whether advice-like outputs from general-purpose AI create a regulatory gap.

05

No AI rulebook

None of this yet amounts to a separate rulebook for AI. The UK's principles-based, outcomes-focused framework remains the foundation. What is being examined is which parts of that framework, and the way it is supervised, need to evolve.

06

Upcoming guidance

The FCA's AI good and poor practice, expected later in 2026. The progress of the Financial Services and Markets Bill, particularly SM&CR reform. The next Bank of England and FCA adoption survey. The FSB's final Sound Practices.

Contributors

Commentary from leading voices in UK financial services regulation

Industry
Zakaria Ouraich

Zakaria Ouraich

Head of UK Compliance

Chris Kiew-Smith

Chris Kiew-Smith

Managing Director and Head of EMEA Compliance & Financial Crime

Edward Thompson

Edward Thompson

MLRO

Michael Phillips

Michael Phillips

Head of Legal

Technology
Ashi Bajwa

Ashi Bajwa

Regulatory AI Architect

Ritesh Singhania

Ritesh Singhania

CEO and Co-Founder

Law
Andrew Henderson

Andrew Henderson

Partner

Robbie Constance

Robbie Constance

Partner and Head of Wealth Management Regulatory

  What the research finds

Key findings

01

Technology-agnostic regulation may not hold

Regulatory approach

Adapting supervision to AI may require more targeted rules that depart from the technology-neutral principle the UK framework has relied on.

02

The human-decision assumption is under pressure

Accountability

Senior-manager accountability, human oversight and operational resilience were all built around people making individual decisions.

03

Supervision is becoming continuous and system-wide

Supervisory model

The Mills Review's agentic supervisory model and the FCA's readiness to use system-wide powers point the same way.

04

Point-in-time sign-off no longer fits

Controls and evidence

Firms will need new ways to evidence that oversight is meaningful and ongoing, rather than a moment of approval.

Get the full report

A concise guide for risk and compliance leaders on how AI is changing the UK supervisory landscape — with key findings, signals, and practical takeaways.
Full report PDF
Practitioner quotes from 27 senior leaders
Foreword by Rt Hon John Glen MP
Action points for firms
Your information will be processed in accordance with our Privacy Policy.
Download your report. A copy is also on its way to your inbox.
Download PDF
Download PDF
Oops! Something went wrong while submitting the form.
Interviews
Insights from leaders across AI governance and compliance
More conversations on the way
Subscribe and we will let you know the moment the next one goes live.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.