{"id":12273,"date":"2025-06-12T15:22:30","date_gmt":"2025-06-12T15:22:30","guid":{"rendered":"https:\/\/comply-dev.peaktwo.com\/?post_type=resource_posts&p=12273"},"modified":"2025-07-31T16:25:33","modified_gmt":"2025-07-31T16:25:33","slug":"ai-navigating-fca-eu-regulatory-expectations","status":"publish","type":"resource_posts","link":"https:\/\/www.comply.com\/en-gb\/resource\/ai-navigating-fca-eu-regulatory-expectations\/","title":{"rendered":"AI in Compliance: Navigating FCA & EU Regulatory Expectations"},"content":{"rendered":"

As artificial intelligence (AI) reshapes the financial services and regulatory landscape, compliance leaders are grappling with how to govern, integrate, and mitigate the risks of it. In a recent industry discussion at Comply x Connect London, several emerging themes resonated with compliance professionals navigating this uncertainty.<\/span>\u00a0<\/span><\/p>\n

Here are five key takeaways for compliance teams looking to stay ahead of the AI curve:<\/span><\/p>\n

<\/div>\n

 <\/p>\n

<\/span>AI regulation: diverging global approaches<\/span><\/h2>\n

Regulatory expectations around AI are taking shape, but they remain fragmented. The EU\u2019s AI Act is the world\u2019s first comprehensive framework, with a strict, risk-based approach requiring firms to classify and oversee AI usage throughout the customer lifecycle. By contrast, following Discussion Paper 5\/22<\/a>, the UK\u2019s Financial Conduct Authority (FCA) has opted for a less-prescriptive, principles-based approach, relying on existing regulations such as Consumer Duty, SMCR, and GDPR. As an example, firms should be considering AI risks in the context of the Consumer Duty, as issues such as AI bias are closely linked to the principles of fairness and transparency. While this avoids yet another regulatory overhaul, it also creates ambiguity, leaving firms to interpret how current frameworks apply to AI.<\/span>\u00a0<\/span><\/p>\n

One big implication is that firms operating across jurisdictions should prepare to apply the highest common standard \u2013 most likely the EU’s stricter requirements \u2013 to ensure compliance.<\/span><\/p>\n

 <\/p>\n

<\/div>\n

<\/span>AI governance must be proactive, not reactive<\/span><\/h2>\n

Despite regulatory uncertainty, firms are expected to take responsibility for how AI is used internally. This includes ensuring transparency, explainability, and accountability. A recurring theme in the discussion was the need to monitor how AI tools are adopted, particularly as employees experiment with new technologies without formal approval or oversight.<\/span>\u00a0<\/span><\/p>\n

Best practice:<\/span><\/b> Implement a clear, regularly updated AI usage policy. Even if your firm doesn\u2019t formally use AI, the policy should define what\u2019s permitted and outline controls for any unofficial usage.<\/span>\u00a0<\/span>\u00a0<\/span><\/span><\/p>\n

<\/div>\n

 <\/p>\n

<\/span>Uncontrolled use is the biggest near-term risk<\/span><\/h2>\n

The most immediate compliance risk is the uncontrolled deployment of AI tools without appropriate guardrails. This can lead to breaches in data privacy, confidentiality, and even consumer harm. The FCA\u2019s emphasis on consumer outcomes highlights the importance of aligning AI usage with existing regulatory duties, even in the absence of AI-specific rules.<\/span>\u00a0<\/span><\/p>\n

Next step:<\/span><\/b> Create a framework to assess and approve AI use cases, incorporating risk assessments, documentation, and human oversight.<\/span><\/p>\n

<\/div>\n

 <\/p>\n

<\/span>AI can streamline – or complicate – compliance operations<\/span><\/h2>\n

AI presents significant opportunities to automate routine compliance tasks such as policy writing, minute-taking, surveillance, marketing reviews, and reporting. In areas like employee communications monitoring, AI can detect context and intent beyond simple keyword searches. However, reliance on poorly understood models\u2014especially those prone to \u201challucination\u201d\u2014can introduce new vulnerabilities.<\/span>\u00a0<\/span><\/p>\n

The message is clear: use AI to enhance efficiency, but maintain human oversight. AI should support, not replace, core compliance judgment.<\/span><\/p>\n

 <\/p>\n

<\/div>\n

<\/span>The compliance skill set is evolving<\/span><\/h2>\n

As AI becomes embedded in financial services, the composition of compliance teams will need to evolve. While regulatory expertise remains critical, there is increasing demand for data-savvy professionals who can work alongside legal experts to build, monitor, and interpret AI tools.<\/span>\u00a0<\/span><\/p>\n

Next step:<\/span><\/b> Evaluate current team capabilities and consider adding data analysts or AI specialists to complement traditional compliance skills.<\/span><\/p>\n

 <\/p>\n

<\/div>\n

<\/span>How to prepare<\/span><\/h2>\n

Whether your firm is actively using AI or just starting to explore its potential, now is the time to act. The consensus advice from our expert panel was clear:<\/span>\u00a0<\/span><\/p>\n