UK Regulatory Brief
15 regulatory updates covered · Generated by Regulatte AI
Executive Summary
This week's regulatory landscape is dominated by three themes: the FCA's stepped-up enforcement activity against market abuse and illegal promotions, the formal launch of the Critical Third Party oversight regime on 13 July 2026, and growing supervisory pressure on how firms design products and use AI for retail customers. NEDs should expect regulators to scrutinise firm culture, third-party risk management, and consumer outcomes with increasing intensity in the months ahead.
This is a generic brief
It covers all 7 regulatory bodies but isn't filtered to your specific NED role, firm type, or priorities. A personalised Regulatte brief surfaces only the developments that are directly relevant to you - and tells you exactly what to do about them.
Request personalised access →Board Level: Requires Attention
Critical Third Party regime is now active: confirm your firm's readiness
The regime went live on 13 July 2026, meaning regulators can now directly oversee and engage with designated third parties your firm may depend on. If your firm has not mapped its reliance on designated CTPs or updated its third-party risk framework, it may be exposed to regulatory criticism or operational gaps that the board is accountable for.
SourceAI governance: board oversight of the FCA's 2030 retail AI review
The FCA's landmark review sets an expectation that firms understand and govern AI use in retail services. Boards that cannot demonstrate oversight of AI-related risks and consumer outcomes are likely to face regulatory challenge as the FCA develops follow-up policy, and NEDs bear personal accountability for the adequacy of governance frameworks.
SourceEnforcement escalation: review financial promotions and market conduct controls
The FCA's enforcement results, including arrests, social media takedowns and insider dealing charges filed this week, demonstrate that the regulator is actively pursuing individual and firm-level misconduct. Boards should not assume their firm's promotions compliance and market conduct surveillance controls are adequate without recent independent review.
SourceKey Developments
Critical Third Party oversight regime goes live
From 13 July 2026, the FCA, PRA and Bank of England formally begin overseeing designated Critical Third Parties (such as major cloud and data providers). Any firm relying on these providers must now expect those relationships to be subject to regulatory scrutiny, and must ensure its own third-party risk frameworks are aligned with the new regime.
Read moreFCA publishes landmark AI review covering retail financial services
The FCA has set out how artificial intelligence could fundamentally reshape retail financial services by 2030, covering impacts on consumers, firms, markets and regulators. Boards need to understand where AI is already embedded in their products and services, and whether governance frameworks are keeping pace with the risks identified.
Read moreFCA reports major enforcement push in first year of new strategy
The FCA's first strategy year produced 3 arrests from an international finfluencer crackdown, 650 social media takedown requests, and 11 years of combined custodial sentences for market abuse. This signals a materially more aggressive enforcement posture that firms should factor into their compliance risk assessments.
Read more2 more developments in your personalised brief
Your brief also filters these to the ones that matter for your specific NED role and firm.
Watch List
Generated by Regulatte AI · Always verify with source material before acting
Regulatte AI tailors your brief to your NED role, firm type, and background.
Request early access