The UK’s data regulator has issued a strong warning that companies remain responsible for protecting personal data when they use AI systems, even when the technology acts autonomously.
Neil Hodge
Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal issues for a wide range of publications in the United Kingdom and United States.
Posted inBanking
EU banking regulator issues new TPRM guidelines for large banks, FS firms
The European Union’s key banking regulator has issued guidelines to help large banks manage the risk of disruption if an important IT provider has an outage or a third party cannot continue to supply critical services.
Posted inArtificial Intelligence
FCA warns AI may reveal more cyber vulnerabilities firms can cope with
The UK’s financial regulator has warned that the rapid pace of AI development is revealing vulnerabilities in firms’ cybersecurity arrangements because their existing controls cannot keep up with the risks new technology can either create or exploit.
Posted inArtificial Intelligence
EU’s financial regulator prioritizes AI, tokenization as key risks for 2027
The EU’s main financial regulator has made AI and tokenization—where assets are traded on blockchains rather than through traditional financial markets—key priorities for banking regulators in EU member states to focus on for 2027.
Posted inArtificial Intelligence
Don’t overestimate the value of ‘human in the loop’ for AI governance, say experts
One of the key governance tenets around the use of AI is the concept of having a “human in the loop” to query AI-generated responses and to ensure that AI outputs remain explainable, unbiased, and harmless. But there are obvious questions: Which “human” should it be left to—and should it be one person?
Posted inData Privacy
Future GDPR fines set to be more equal across EU
The EU’s main data regulator has issued new guidelines so that fines under the General Data Protection Regulation are in line from one EU country to the next.
Posted inRegulatory Policy
FCA expands non-financial misconduct rules to 37,000 more firms
Financial firms can now face regulatory action for bullying, harassment, and acts of violence under rules that have come into effect in the United Kingdom to counter sexism, misogyny, and poor corporate culture in the workplace. The Financial Conduct Authority’s (FCA) rules regarding non-financial misconduct (NFM) have been extended so that they not only apply […]
Posted inArtificial Intelligence
California presses ahead with executive order for AI safeguards, cites federal government “abject failure”
California Governor Gavin Newsom has issued an executive order to explore whether companies should develop a “kill switch” for any potentially harmful AI tech they develop.
Posted inArtificial Intelligence
Experts welcome U.K.’s approach to AI supervision in financial services—but with provisos
The U.K.’s approach to regulating AI in financial services by focusing on outcomes and consumer protection, rather than introducing new rules, has been largely welcomed by experts—so long as the current regulatory framework is regularly reviewed.
Posted inData Privacy
Grindr agrees $35 million settlement for U.K. complaint over serious data breaches
The tech company behind gay dating app Grindr has agreed to make a $35.2 million settlement over allegations that it shared sensitive personal medical information—including whether people were HIV positive—with third parties.
