EU AI Act for FinTech: The FCA, Consumer Duty and DORA Triple Pressure
UK FinTech companies face a regulatory environment that has become significantly more complex in 2026. Three separate frameworks — the FCA Consumer Duty, the EU AI Act, and DORA — are converging simultaneously, and each one has direct implications for how artificial intelligence can be used in financial services. This article explains how the three […]
ISO 42001: Why Fortune 500 Companies Are Now Requiring It From Vendors — And What UK Businesses Must Do
A quiet but significant shift is happening in enterprise procurement. Across financial services, pharmaceuticals, technology, and professional services, large organisations are adding a new requirement to their vendor onboarding questionnaires: ISO/IEC 42001 certification, or a documented roadmap toward it. If your organisation supplies services to large corporates and you use AI in any part of […]
Article 50 of the EU AI Act: What Every Business Using AI-Generated Content Must Do Before August 2026
When the EU AI Act’s enforcement timeline was revised in May 2026, most businesses breathed a sigh of relief. The high-risk AI system obligations moved to December 2027. Surely there was time to prepare? There was one obligation that did not move. Article 50 — the AI content transparency requirement — remains on schedule for […]
What Is Shadow AI and Why Is It Costing Your Organisation £300,000 a Year?
Shadow AI is the AI your employees are using right now, without your knowledge. ChatGPT to write client proposals. Claude to summarise board reports. Midjourney to create marketing images. AI note-takers joining your meetings. Research shows that 68% of employees use AI tools their employer has not approved, and 43% have shared sensitive company data […]
Article 50 Is Coming in August 2026. Is Your AI Content Compliant?
While the EU AI Act’s Annex III high-risk deadline moved to December 2027, one obligation did not move: Article 50 AI content disclosure. From 2 August 2026, any organisation that uses AI to generate content that interacts with or is served to individuals in the EU must disclose this fact. That includes AI-powered chatbots, AI-written […]
Is Your AI Hiring Tool Legal? What the ICO’s Investigation Found
In March 2026, the ICO published the findings of its investigation into automated decision-making in UK recruitment. The central finding was stark: most employers using AI in hiring did not even recognise that they were making solely automated decisions about candidates. That matters — because solely automated decisions triggering legal or significant effects now require […]
UK Automated Decision-Making Rules Changed in February 2026. Has Your Organisation Caught Up?
Most UK compliance teams know about GDPR Article 22 — the original rule on automated decision-making. But as of 5 February 2026, that rule was replaced. The Data (Use and Access) Act 2025 introduced a new framework: Articles 22A through 22D. The obligations are different. The conditions are different. And most organisations have not assessed […]
EU AI Act Digital Omnibus: What Changed on 7 May 2026 and What It Means for Your UK Business
On 7 May 2026, the European Parliament and Council reached a provisional agreement on the EU AI Act Digital Omnibus — the first significant amendment to the Act since it became law in August 2024. For UK and EU businesses working toward EU AI Act compliance, this changes the timeline significantly. But it does not […]