The UK has deliberately chosen not to write an AI rulebook for finance. The Bank of England, PRA, and FCA regulate AI through existing technology-agnostic frameworks — most recently reaffirmed in the BoE/PRA's April 2026 response to Parliament's inquiry on AI in financial services. Instead of rules, the UK runs the deepest supervisory monitoring program anywhere: periodic AI surveys (2019, 2022, 2024, and a new one covering foundation models and agentic AI), sandbox initiatives, and AI as a named 2026 supervisory priority.
| Full name | Bank of England, Prudential Regulation Authority, and Financial Conduct Authority |
| Role | Prudential and conduct regulators |
| Force on banks | Supervisory guidance |
| Applies to | UK banks, building societies, investment firms, and insurers |
| Key document | BoE/PRA response to the Treasury Select Committee on AI (Apr 2026) |
| Latest move | May 2026: BoE/FCA/HM Treasury joint statement on frontier AI and cyber resilience; July 2026: HM Treasury Financial Services AI Adoption Plan; 2026 AI survey (foundation and agentic AI) closed 31 July, results pending |
| Documents tracked | 15 · all documents → |
The UK approach was set by DP5/22 (2022) and the FS2/23 feedback statement (2023): existing frameworks — the Senior Managers regime, model risk management (SS1/23), operational resilience, and Consumer Duty — already cover AI, so the regulators supervise outcomes rather than technology. The government reinforced this in January 2026 with strategic letters directing 19 regulators, including the FCA and Bank of England, to publish plans for enabling safe AI innovation and report annually.
On April 1, 2026 the BoE and PRA responded to the Treasury Select Committee's inquiry on AI, reiterating the technology-agnostic stance while keeping 'whether further guardrails are needed' under review. AI adoption is a PRA supervisory priority for 2026, meaning firms face detailed supervisory dialogue on their AI governance even without new rules. The FCA, meanwhile, has invested in AI sandbox and live-testing initiatives to observe deployments directly.
What has the UK (BoE / PRA / FCA) actually published on AI?
| Date | Document | Status |
|---|---|---|
| Jul 14, 2026 | HM Treasury Financial Services AI Adoption Plan (Jul 2026) — Financial Services AI Adoption Plan | Final |
| Jun 5, 2026 | 2026 BoE/FCA AI survey — The Bank of England and FCA's 2026 AI Survey | Final |
| May 15, 2026 | BoE/FCA/HMT joint statement on frontier AI and cyber resilience (May 2026) — The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience | In force |
| Apr 1, 2026 | BoE response to Treasury Committee AI inquiry (Apr 2026) — Response to TSC inquiry report on AI in financial services | Final |
| Apr 1, 2026 | BoE/PRA plan for safe AI innovation (Apr 2026) — Letter from Sarah Breeden and Sam Woods to the Chancellor and Secretaries of State on enabling safe AI innovation | Final |
| Jan 28, 2026 | DSIT/DBT strategic letters to regulators (Jan 2026) — How will regulators enable safe AI-powered innovation: joint letter from DSIT Secretary of State and DBT Secretary of State | Final |
| Nov 24, 2025 | PRA AI/ML model-risk roundtable (Nov 2025) — The PRA holds model risk management roundtable on artificial intelligence and machine learning technologies | Final |
| Sep 9, 2025 | FCA FS25/5 — FS25/5: AI Live Testing | Final |
| Apr 9, 2025 | FPC Financial Stability in Focus: AI (Apr 2025) — Financial Stability in Focus: Artificial intelligence in the financial system | Final |
| Nov 21, 2024 | 2024 BoE/FCA AI survey — Artificial intelligence in UK financial services – 2024 | Final |
| Apr 22, 2024 | FCA AI Update (Apr 2024) — Artificial Intelligence (AI) update – further to the Government's response to the AI White Paper | Final |
| Oct 26, 2023 | FS2/23 — Feedback Statement 2/23: Artificial Intelligence and Machine Learning | Final |
| May 17, 2023 | PRA SS1/23 — Supervisory Statement 1/23: Model risk management principles for banks | In force |
| Oct 11, 2022 | DP5/22 — Discussion Paper 5/22: Artificial Intelligence and Machine Learning | Final |
| Oct 11, 2022 | 2022 BoE/FCA ML survey — Machine learning in UK financial services (2022 survey) | Superseded |
| Date | Type | Document / event |
|---|---|---|
| Aug 5, 2026 | Milestone | AI Consortium June 2026 minutes published. Minutes of the 3 June 2026 meeting cover frontier models, safe deployment of agentic tools, model harnesses and execution boundaries, AI incident reporting, and stress scenarios including agentic payments. |
| Jul 31, 2026 | Milestone | 2026 BoE/FCA AI survey closes to responses. The fourth biennial survey, extended to foundation models, generative AI and agentic AI, closed; results are expected later in 2026. |
| Jul 14, 2026 | Framework | HM Treasury Financial Services AI Adoption Plan (Jul 2026) — Financial Services AI Adoption Plan. HM Treasury published the Financial Services AI Adoption Plan on 14 July 2026, setting a government vision for firms of all sizes to move beyond isolated pilots and integrate AI across core processes responsibly and at pace. source ↗ |
| Jun 5, 2026 | Survey | 2026 BoE/FCA AI survey — The Bank of England and FCA's 2026 AI Survey. The fourth joint Bank of England and FCA AI survey opened on 5 June 2026 and closed to firm responses on 31 July 2026. source ↗ |
| May 15, 2026 | Guidance | BoE/FCA/HMT joint statement on frontier AI and cyber resilience (May 2026) — The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience. On 15 May 2026 the Bank of England, FCA and HM Treasury jointly warned that frontier AI models' cyber capabilities already exceed what a skilled practitioner could achieve, at higher speed, scale and lower cost, and that regulated firms and FMIs must act under existing operational-resilience rules to plan for and mitigate the resulting threats. source ↗ |
| Apr 1, 2026 | Letter | BoE response to Treasury Committee AI inquiry (Apr 2026) — Response to TSC inquiry report on AI in financial services. On 1 April 2026 Deputy Governor Sarah Breeden replied to the Treasury Select Committee's 20 January 2026 report on AI in financial services, rejecting the Committee's 'wait and see' characterisation while reaffirming a technology-agnostic, outcomes-focused approach. source ↗ |
| Apr 1, 2026 | Letter | BoE/PRA plan for safe AI innovation (Apr 2026) — Letter from Sarah Breeden and Sam Woods to the Chancellor and Secretaries of State on enabling safe AI innovation. On 1 April 2026 Sarah Breeden and Sam Woods answered the government's 28 January 2026 request with the Bank of England and PRA's plan for enabling safe AI innovation. source ↗ |
| Jan 28, 2026 | Letter | DSIT/DBT strategic letters to regulators (Jan 2026) — How will regulators enable safe AI-powered innovation: joint letter from DSIT Secretary of State and DBT Secretary of State. On 28 January 2026 Liz Kendall (DSIT) and Peter Kyle (DBT), with relevant departmental Secretaries of State including the Chancellor, wrote to 19 regulators — including the FCA, Bank of England and PRA — asking each to publish by May 2026 a plan for enabling safe AI-powered innovation in its sector and to report annually on actions, outcomes and metrics. source ↗ |
| Nov 24, 2025 | Guidance | PRA AI/ML model-risk roundtable (Nov 2025) — The PRA holds model risk management roundtable on artificial intelligence and machine learning technologies. On 24 November 2025 the PRA published the slides from two Chief Risk Officer roundtables held on 20 and 22 October 2025 with 21 PRA-regulated firms on applying the SS1/23 model risk management principles to AI and machine learning. source ↗ |
| Sep 9, 2025 | Report | FCA FS25/5 — FS25/5: AI Live Testing. FS25/5, published 9 September 2025, is the FCA's feedback statement on its proposal, first announced on 29 April 2025, to run AI Live Testing — a programme in which firms deploy AI systems in live UK markets with tailored regulatory and technical support and jointly evaluate fairness, accuracy, consumer outcomes and operational resilience. source ↗ |
| May 2, 2025 | Milestone | BoE/FCA AI Consortium launches. Public-private forum co-chaired by BoE Deputy Governor Sarah Breeden and FCA's David Geale; quarterly meetings on concentration risk, AI edge cases, explainability, contagion, and agentic AI. A report is due in 2026. |
| Apr 9, 2025 | Report | FPC Financial Stability in Focus: AI (Apr 2025) — Financial Stability in Focus: Artificial intelligence in the financial system. The Bank of England's Financial Policy Committee published its first dedicated assessment of AI and financial stability on 9 April 2025. source ↗ |
| Nov 21, 2024 | Survey | 2024 BoE/FCA AI survey — Artificial intelligence in UK financial services – 2024. The third joint BoE/FCA survey, published 21 November 2024, found 75% of UK financial services firms already using AI and a further 10% planning to within three years, up from 58% and 14% in 2022. source ↗ |
| May 17, 2024 | Milestone | SS1/23 model risk management principles take effect. The PRA's five model-risk principles, including the sub-principle on AI/ML models, become supervisory expectation for banks with internal-model approvals. |
| Apr 22, 2024 | Report | FCA AI Update (Apr 2024) — Artificial Intelligence (AI) update – further to the Government's response to the AI White Paper. The FCA's AI Update, published 22 April 2024 in response to the UK government's AI White Paper follow-up, sets out how the FCA's existing rules apply to firms' use of AI without creating new AI-specific requirements. source ↗ |
| Oct 26, 2023 | Report | FS2/23 — Feedback Statement 2/23: Artificial Intelligence and Machine Learning. FS2/23, published on 26 October 2023, summarises the 54 responses to DP5/22 and records the industry consensus that a regulatory definition of AI would not be useful and that the UK should rely on principles-based, technology-agnostic regulation. source ↗ |
| May 17, 2023 | Guidance | PRA SS1/23 — Supervisory Statement 1/23: Model risk management principles for banks. SS1/23, published with Policy Statement PS6/23 on 17 May 2023 and effective from 17 May 2024, is the PRA's model risk management standard and the UK's closest equivalent to SR 11-7. source ↗ |
| Feb 10, 2023 | Milestone | DP5/22 comment period closes. Responses to the joint BoE/PRA/FCA discussion paper on AI and machine learning were due; 54 responses were received and summarised in FS2/23. |
| Oct 11, 2022 | Consultation | DP5/22 — Discussion Paper 5/22: Artificial Intelligence and Machine Learning. DP5/22 is the joint Bank of England, PRA and FCA discussion paper published on 11 October 2022 that asked whether the UK's existing financial regulation is sufficient for AI and machine learning. source ↗ |
| Oct 11, 2022 | Survey | 2022 BoE/FCA ML survey — Machine learning in UK financial services (2022 survey). The second joint Bank of England and FCA survey, published on 11 October 2022 alongside DP5/22, found that 58% of UK financial services firms were using machine learning with a further 14% planning to within three years. source ↗ |
Which of the 100 largest US banks answer to the UK (BoE / PRA / FCA) on AI?
3 of the 100 bank pages on this site name the UK (BoE / PRA / FCA) among the authorities their AI programme answers to. Each page lists the documents that apply and why.
- Results of the 2026 BoE/FCA AI survey — the first regulator dataset anywhere on agentic AI in banks
- The AI Consortium's 2026 report on concentration risk, AI edge cases in credit and trading, explainability, and market contagion
- Whether the FCA delivers the Consumer Duty and SM&CR-for-AI guidance the Treasury Committee asked for by end-2026
- FCA AI Live Testing second-cohort evaluation report (Q1 2027) and the FPC's follow-up work on agentic AI in payments and markets
- Whether HM Treasury designates major AI and cloud providers as Critical Third Parties
Does the UK have an AI law for banks?
No. The UK has explicitly chosen not to create AI-specific rules for financial services. The Bank of England, PRA, and FCA apply existing technology-agnostic frameworks — senior manager accountability, model risk management (SS1/23), operational resilience, and the Consumer Duty — to AI, a position most recently reaffirmed in April 2026.
How do UK regulators monitor AI in banks?
Primarily through recurring joint BoE/FCA surveys (2019, 2022, 2024, and a 2026 edition extended to foundation models and agentic AI), supervisory dialogue under the PRA's 2026 priorities, and FCA sandbox/live-testing programs that observe real deployments.
How does the UK approach differ from the EU AI Act?
The EU imposes binding, AI-specific obligations with credit scoring classified as high-risk; the UK regulates the same activities through existing outcome-based rules with no AI-specific statute. UK banks operating in the EU must still comply with the AI Act for their EU business.
What do UK regulators expect banks to do about frontier AI cyber threats?
The 15 May 2026 joint statement from the Bank of England, FCA and HM Treasury says frontier AI models' cyber capabilities already exceed what a skilled practitioner can achieve, and that under existing operational-resilience rules firms must act now: boards should understand frontier AI risk, vulnerabilities should be triaged and remediated at scale, third-party and open-source supply chains must be managed, and detection and response must handle faster, more disruptive attacks. It creates no new rule but is a supervisory signal on how existing rules apply.
Follow every move these regulators make
the daily brief · six sourced stories · in your inbox by 7 am ET · free
plus every tracker, bank and agent page update, the morning after · leave any morning