FCA Targets AI Governance and Off-Channel Messaging

Why It Matters

The guidance forces regulated firms to embed AI risk controls and expand misconduct oversight, increasing compliance costs but reducing regulatory exposure as enforcement intensifies throughout 2026.

Key Takeaways

• FCA issues sector‑specific Regulatory Priorities reports, replacing 40+ letters
• AI adoption encouraged via sandboxes, but firms must ensure outcome monitoring
• New off‑channel rules expand misconduct code to harassment, bullying, discrimination
• 41% of off‑channel breaches involve directors, raising senior‑level risk
• Compliance teams should adopt ISO 42001 AI standards and update policies

Pulse Analysis

The Financial Conduct Authority’s decision to consolidate its communications into quarterly, sector‑focused Regulatory Priorities reports marks a strategic shift in how it steers the UK financial services industry. By moving away from a flood of individual letters, the FCA provides clearer, board‑level guidance that aligns regulatory expectations with the distinct risk profiles of insurance, wholesale markets, retail banking and consumer investments. This format not only improves transparency but also creates a single reference point for senior executives tasked with aligning business strategy to evolving supervisory priorities.

Artificial intelligence sits at the heart of the FCA’s 2026 agenda. The regulator encourages firms to experiment through its Supercharged Sandbox and Innovation Hub, yet it couples that encouragement with a non‑negotiable requirement: robust governance and demonstrable customer‑outcome monitoring. Industry bodies are already recommending standards such as ISO 42001 for AI Management Systems and the CSA STAR framework to prove that AI models are developed, trained, deployed and maintained responsibly. Firms that embed these controls early will be better positioned for the AI Live Testing evaluation report the FCA plans to publish by year‑end, potentially gaining a competitive edge while avoiding enforcement actions.

Off‑channel communications have become a new compliance frontier. Revised non‑financial misconduct rules, effective 1 September 2026, broaden the Code of Conduct to cover harassment, bullying and discrimination even when conveyed via informal channels like cloud‑calling or instant‑messaging apps. The FCA’s 2025 review revealed that 41 % of off‑channel breaches originated at director level, underscoring a governance gap at the top of organisations. To mitigate this risk, firms should overhaul their communication policies, extend monitoring to modern digital tools, and deploy technology that flags policy‑violating content in real time. Proactive alignment with these expectations will not only reduce the likelihood of fines but also reinforce a culture of ethical conduct across all employee tiers.