# DP5/22: Discussion Paper 5/22: Artificial Intelligence and Machine Learning

Source: https://www.bankingnewsai.com/ai-regulation/documents/uk-dp5-22-ai-and-machine-learning
Last updated: Aug 26, 2026

DP5/22 is the joint Bank of England, PRA and FCA discussion paper published on 11 October 2022 that asked whether the UK's existing financial regulation is sufficient for AI and machine learning. It set out how current rules — the Senior Managers regime, model risk management, operational resilience, outsourcing, data protection and conduct rules — already apply to AI, and asked whether a regulatory definition of AI or new AI-specific requirements were needed. Responses closed on 10 February 2023 and were summarised in FS2/23.

## At a glance

| Field | Value |
| --- | --- |
| Authority | [UK (BoE / PRA / FCA)](https://www.bankingnewsai.com/ai-regulation/uk) |
| Type | Consultation |
| Status | Final |
| Published | Oct 11, 2022 |
| Comment deadline | Feb 10, 2023 |
| Applies to | All PRA- and FCA-regulated firms, including banks, building societies, investment firms and insurers (a discussion paper, not a rule) |
| Official text | https://www.bankofengland.co.uk/prudential-regulation/publication/2022/october/artificial-intelligence |

## Key points

- Joint BoE/PRA/FCA paper following the AI Public-Private Forum's February 2022 final report.
- Maps AI use to existing frameworks: SM&CR accountability, model risk management, operational resilience, third-party/outsourcing rules, Consumer Duty and conduct rules, and UK GDPR.
- Asks whether a regulatory definition of AI would help; respondents later said no.
- Raises data risks (bias, fairness, protected characteristics), model risks (explainability, robustness) and governance risks as the three main risk clusters.
- Explicitly technology-agnostic: considers whether AI-specific regulation is needed rather than proposing it.
- Comment period closed 10 February 2023; 54 responses received.

## What changed for banks

DP5/22 is the origin of the UK's current posture. It framed AI as a question of whether existing rules suffice, and the answer that came back through FS2/23 — that they largely do — has anchored the BoE, PRA and FCA's technology-agnostic approach ever since. For banks it remains the clearest official map of which UK rulebooks an AI system falls under.

## Use cases it governs

- [AI governance (general)](https://www.bankingnewsai.com/ai-regulation/by-use-case#governance-general)
- [Model risk management](https://www.bankingnewsai.com/ai-regulation/by-use-case#model-risk)
- [Fair lending & discrimination](https://www.bankingnewsai.com/ai-regulation/by-use-case#fair-lending)
- [Third-party & vendor AI](https://www.bankingnewsai.com/ai-regulation/by-use-case#third-party-vendors)
- [Data & privacy](https://www.bankingnewsai.com/ai-regulation/by-use-case#data-privacy)

## FAQ

### Did DP5/22 propose new AI rules for UK banks?

No. It was a discussion paper asking whether existing regulation was sufficient and how it might evolve; it made no policy proposals.

### Which UK rules did DP5/22 say already apply to AI?

The Senior Managers and Certification Regime, model risk management expectations, operational resilience and outsourcing rules, conduct rules including the Consumer Duty, and UK data protection law.

## Related documents

- [Bailey: Frontier AI and the Question of Governance (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-bailey-frontier-ai-governance-2026) — Frontier AI and the Question of Governance — Governor Andrew Bailey (Sep 30, 2026)
- [FCA multi-firm review: Frontier AI and cyber resilience (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fca-frontier-ai-cyber-resilience-2026) — Frontier AI and Cyber Resilience (Sep 2, 2026)
- [HM Treasury Financial Services AI Adoption Plan (Jul 2026)](https://www.bankingnewsai.com/ai-regulation/documents/hmt-financial-services-ai-adoption-plan-2026) — Financial Services AI Adoption Plan (Jul 14, 2026)
- [2026 BoE/FCA AI survey](https://www.bankingnewsai.com/ai-regulation/documents/uk-ai-in-financial-services-survey-2026) — The Bank of England and FCA's 2026 AI Survey (Jun 5, 2026)
- [BoE/FCA/HMT joint statement on frontier AI and cyber resilience (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/uk-joint-statement-frontier-ai-cyber-resilience-2026) — The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience (May 15, 2026)
- [BoE response to Treasury Committee AI inquiry (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-response-tsc-ai-inquiry-2026) — Response to TSC inquiry report on AI in financial services (Apr 1, 2026)
- [BoE/PRA plan for safe AI innovation (Apr 2026)](https://www.bankingnewsai.com/ai-regulation/documents/boe-pra-safe-ai-innovation-plan-letter-2026) — Letter from Sarah Breeden and Sam Woods to the Chancellor and Secretaries of State on enabling safe AI innovation (Apr 1, 2026)
- [DSIT/DBT strategic letters to regulators (Jan 2026)](https://www.bankingnewsai.com/ai-regulation/documents/gov-uk-dsit-dbt-safe-ai-innovation-letter-2026) — How will regulators enable safe AI-powered innovation: joint letter from DSIT Secretary of State and DBT Secretary of State (Jan 28, 2026)

Last reviewed Aug 26, 2026. Cite the official text (https://www.bankofengland.co.uk/prudential-regulation/publication/2022/october/artificial-intelligence) for the rule and this page for the summary and dates.

---

Canonical page: https://www.bankingnewsai.com/ai-regulation/documents/uk-dp5-22-ai-and-machine-learning
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (41 authorities, 237 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.
