Map: EU & UK AI Governance Regulation

What this map covers: the regulatory and supervisory framework around AI in EU and UK financial services, as it stands May 2026. Each entry links to a Topic or Entity page.

Topics

• EU AI Act — Articles, deadlines (notably 2 Aug 2026), enforcement structure, and the Digital Omnibus delay debate.
• FCA approach to AI — “No separate AI rulebook” stance; Consumer Duty, SM&CR, Operational Resilience as the operating frame.
• BCBS AI Governance Framework — BIS othp90 ten-step playbook, applicable from 1 Aug 2026.
• EBA Supervisory Direction on AI and Governance — CRR/CRD as technology-neutral baseline, 2026 Work Programme, AI Act mapping exercise.
• Operational Resilience and Third Party Risk — DORA, PS26/2, BCBS d605, Critical Third Parties regime.
• Model Risk Management and Agentic AI — SR 11-7 / SS1/23 extension, human-in-the-loop, AI inventory expectations.
• BCBS 239 and Data Lineage — Persistent supervisory priority; substrate for AI governance.
• AI Governance Maturity Gap — Practitioner intelligence on CDO/CRO readiness.
• AGILE Framework — FIFAI II / OSFI organising structure for AI risk in FS.

Adjacent maps

• Map: BCBS and BIS Publications — Detail on the BIS / Basel publication trail underpinning the topics above.
• Map: Paul’s Service Lines — How the regulatory map maps to Paul’s four practice service lines.

Last updated: 2026-05-17