Plans to push audit firms to disclose how they use AI in audits have been broadly welcomed, but concerns remain over how corporate data is used, secured, retained, and potentially exposed.
Neil Hodge
Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal issues for a wide range of publications in the United Kingdom and United States.
10 tips to comply with the U.K.’s new data law
Changes to the U.K.’s privacy regime will immediately affect how companies handle AI-driven decisions, cookie usage, and responses to data subject requests. As a result, experts are warning compliance teams to ensure their organizations take the legislation seriously and make plans to review data governance.
U.K. hopes to create ‘third way’ in AI regulation between EU and U.S.
The U.K.’s data regulator has unveiled a new enforcement approach to AI development and usage that experts say seeks to carve a middle way between the strict rules applied by the European Union (EU) and the pro-industry, light-touch regime favored by the U.S.
U.S. tariffs and compliance: what U.K. and EU companies need to consider
Tariff risk has probably rarely featured on many companies’ risk registers in recent years, but it now likely sits high on the agenda because of President Donald Trump’s tariff focus.
FCA drops ‘naming and shaming’ approach – except in ‘exceptional circumstances’
The UK’s financial regulator has had a rough ride over the past couple of years as its strategy to “name and shame” firms it opened investigations into was widely slammed by the industry and lawmakers over concerns that companies could be unfairly maligned.
Crypto firms brace for tighter UK oversight as FCA plots integration with financial markets
Trying to put rules in place to oversee an industry that has grown largely outside of regulation is not without serious challenges. But the UK’s Financial Conduct Authority’s (FCA) latest consultation aims to attract industry views about how some key aspects of crypto trading should be regulated ahead of planned legislation due to come into effect next year.
Seven years in, GDPR faces growing challenges from AI and ‘consent or pay’ models
Europe’s pioneering data protection legislation turned seven years old in May, but the compliance and enforcement difficulties that have dogged the rules since they came into force look set to present both companies and data regulators with fresh headaches for some time to come.
What is AI washing and why companies need to stop exaggerating their AI prowess
The buzz around generative AI has reached fever pitch over the past few years—to such an extent that it’s practically a death knell for any company to say it’s not investing massively in gen AI to transform their business. There’s only one problem: many companies are either being misleading or lying about the extent they are using such technology and what it’s capable of.
UK regulator’s efforts to coax self-reporting fraud could fall flat, experts warn
To both clean up corporate behaviour and rack up its own enforcement record, the UK’s anti-bribery agency has seemingly largely guaranteed companies a pass from prosecution if they spill the beans on their misconduct. There’s only one problem: experts believe businesses may still stand a better outcome if they front it out rather than self-report and hope for a deal.
Delayed UK antitrust case underscores compliance, reputational risks
Antitrust infringement cases in the United Kingdom can run on for years, but there’s a question whether issuing fines that are dwarfed by the revenues of those organisations involved is a worthy deterrent—particularly if they are imposed over a decade after the misconduct ended. It’s also debatable whether the first company to admit that it has been part of a cartel for years should get away scot-free if it agrees to turn over all the dirt on the other members.


