Building the future of finance in the age of AI
RegCanary analysis of a FCA publication
Why it matters
RegCanary's analysis of what this means for regulated firms.
Jessica Rusu's remarks confirm that six of the seven Mills Review recommendations are being embedded into live work immediately, with emphasis on testing, assurance, monitoring and surveillance rather than further consultation. For compliance teams, this means AI governance should be demonstrably operational: maintain a complete inventory of AI use cases across retail and wholesale activities, evidence model testing and monitoring, define accountability, and be ready to explain how agentic finance, payments and fraud-detection systems are controlled. Firms should expect direct supervisory engagement and requests for evidence.
The wholesale market message broadens scope beyond retail, so trading, research and decision-support AI are in focus. Immediate actions include mapping AI deployments, reviewing third-party and agent arrangements, strengthening consumer-harm and fraud controls, and preparing assurance documentation. Opportunities exist for firms that can demonstrate robust AI oversight and engage early with FCA innovation services.
Who this affects
Sectors and firm types identified in the analysis.
- Financial Crime
Source
FCA
Original publication, 19 October 2026
Read the original publication fca.org.ukThis is RegCanary's analysis, not the regulator's text. It summarises and interprets the publication above; it is not the FCA's original wording, and it is not legal advice. Always rely on the original source.