What does FCA: AI in financial services — good practice and areas for improvement say about AI in banking?

What are the key points of FCA: AI in financial services — good practice and areas for improvement?

• Defines agentic AI as AI that can take a sequence of actions towards a goal, and says it may need stronger controls because it can operate more independently than other AI.
• Good practice: designing a governance structure — escalation routes, compliance controls — before deploying autonomous agents, and keeping a central inventory of agents recording ownership, data access and controls.
• Poor practice: retrospective governance, informal approval processes, and tick-box human oversight that doesn't actually catch agent errors.
• Maps AI use onto existing rules rather than creating new ones: PRIN, SYSC governance, Consumer Duty, SM&CR, DISP and the SYSC 15A operational-resilience rules.
• Firms remain responsible for AI outcomes including AI bought from third parties/vendors.
• Published alongside a speech by Jessica Rusu, the FCA's Chief Data, Information and Intelligence Officer, 'Building the future of finance in the age of AI'; both follow through on the Mills Review.

What did FCA: AI in financial services — good practice and areas for improvement change for banks?

The FCA's first guidance specifically naming agentic AI's governance demands — a central agent inventory and pre-deployment governance design — rather than leaving agents to generic AI expectations. It is illustrative, not a new rulebook: firms are still held to existing FCA requirements.