Two Clocks Started This Week. Most Firms Are Only Watching One.

If you're anything like me, you're carrying a lot this week. We came close to something nobody wants to name out loud, an escalation that had world leaders on the phone at hours they shouldn't be awake, and then watched it pull back from the edge just as suddenly as it arrived. We also watched the Artemis II crew do something no human has done in over fifty years, travel farther toward the moon than any person alive has ever been. The scale of what's happening out there is hard to hold.

And in the middle of all of it, two things quietly happened in UK financial services that most firms haven't fully registered. The FCA activated a new disclosure regime. And then, three days later, confirmed that no new AI rules are coming. Those two facts belong together, and if you missed the connection, that's exactly what this edition is for.

I keep an eye on this so you don't have to carry it alone. Let's get into it.

UK financial services is under pressure from two directions at once. New rules arrived this week, and old rules got louder. The FCA, that's the Financial Conduct Authority, the UK's main financial watchdog, activated a new disclosure regime on April 6 that changes how investment firms must communicate with retail consumers. At the same time, the FCA and the PRA, the Prudential Regulation Authority which oversees banks and insurers, confirmed on April 9 that there will be no AI-specific rulebook in 2026. Instead, accountability for AI outcomes falls entirely under SM&CR, the Senior Managers and Certification Regime, under which named individuals at your firm are personally liable for what happens inside their functions. The tension this week is not between old rules and new ones. It's between what firms believe they have time for, and what regulators are already measuring.

You don't have to read everything — just the right thing. 1440's daily newsletter distills the day's biggest stories from 100+ sources into one quick, 5-minute read. It's the fastest way to stay sharp, sound informed, and actually understand what's happening in the world. Join 4.5 million readers who start their day the smart way.

Join for free today!

The FCA's Consumer Composite Investments regime, set out in Policy Statement PS25/20, replaced the EU-derived PRIIPs Regulation on April 6, 2026. PRIIPs, the Packaged Retail and Insurance-based Investment Products rules, required firms to produce a standardised Key Information Document for retail investment products. The CCI framework replaces it with a more flexible product summary, designed for the UK market, giving manufacturers more freedom over structure, language, and presentation. The old regime was widely criticised as too prescriptive and producing documents consumers didn't read. The new one is designed to fix that.

This applies to asset managers, fund platforms, insurers, and any firm manufacturing or distributing investment products to retail consumers. From April 6 until June 7, 2027, firms can choose between the old PRIIPs KID and the new CCI product summary. From June 8, 2027, the CCI format is mandatory. Firms that move early are compliant. Firms that delay are still compliant for now. But neither position is neutral when AI is involved.

The AI governance implication is this: the CCI framework gives firms explicit flexibility to design and personalise their product disclosures. That flexibility will attract AI. Firms will use large language models to draft summaries, automate translations between data and consumer language, and personalise outputs for different investor profiles. Under the Consumer Duty, every consumer communication must deliver good outcomes and be understood by the person receiving it. Under SM&CR, the Senior Manager who owns that function is personally accountable if those AI-generated disclosures mislead, omit, or cause harm. The new freedom the FCA handed firms on Tuesday is also a new line of accountability. Most firms have not drawn it yet.

On April 9, the FCA and PRA jointly reaffirmed their principles-based approach to AI regulation. There will be no dedicated AI rulebook for UK financial services in 2026. The regulators' position, consistent since 2023, is that the Consumer Duty, SM&CR, the Systems and Controls sourcebook known as SYSC, and the operational resilience framework are sufficient to govern AI. FCA CEO Nikhil Rathi and FCA Chief Data, Information and Intelligence Officer Jessica Rusu have both confirmed this position to the Treasury Committee. No new rules are coming.

This affects every FCA-authorised firm using or considering AI, which in practice means every firm. It is particularly significant for those in retail banking, wealth management, lending, and insurance, where AI is most actively deployed in customer-facing decisions. The FCA simultaneously launched Cohort 2 of its AI Live Testing programme this week, offering a supervised environment for firms to test AI tools against regulatory expectations before full deployment.

The AI governance implication is blunt. The FCA has confirmed there will be no grace period. No new rules means current rules apply now, in full, to everything AI does inside your firm. SM&CR means a named Senior Manager must own every AI-driven outcome in their area of responsibility. Delegating a decision to an algorithm does not transfer the liability. Operational resilience requirements mean AI systems supporting important business services must be mapped, tested, and capable of recovery within defined impact tolerances. SYSC means your governance and control frameworks must demonstrably cover AI, with documentation that a supervisor can actually review. The firms that walked away from this week's announcement thinking nothing changed are the firms that will face the hardest questions in their next supervisory conversation.

You're spending 40 hours a week writing code that AI could do in 10.

While you're grinding through pull requests, 200k+ engineers at OpenAI, Google & Meta are using AI to ship faster.

How?

The Code newsletter teaches them exactly which AI tools to use and how to use them.

Here's what you get:

Sign up and get access to the Ultimate Claude code guide to ship 5X faster.

Join 200K+ engineers

This week exposed the core gap that BuildMoat exists to close. Two regulatory moments arrived simultaneously: new disclosure rules that actively invite AI use, and a confirmed accountability framework that makes named senior individuals personally responsible for what AI produces. The firms that will struggle are not the ones that lack the technology. They are the ones that have deployed AI into CCI disclosure workflows, customer communication systems, or decision-support tools without building the human infrastructure to sit behind it. That means no named Senior Manager with documented ownership, no oversight process that a regulator can review, and no audit trail connecting the AI output to the person responsible for it. A Head of Compliance or Head of AI needs one question answered this week: which AI systems in your firm now touch a process covered by the CCI regime, and can you name the Senior Manager who will own every disclosure those systems produce?

Which of your firm's AI tools now touches a process covered by the CCI regime, and is the Senior Manager named in the relevant Statement of Responsibilities aware that their personal accountability already covers what that tool produces?

If this is a live problem in your organisation, reply to this email. BuildMoat works with UK financial services firms to build the human infrastructure that closes the gap between AI deployment and regulatory accountability.

BuildMoat — buildmoat.co.uk

Building human infrastructure for AI adoption is not a framework exercise. It is the daily work of getting compliance teams, operations leads, and senior managers to actually use the systems you put in front of them, and to be able to prove it when the FCA asks.

If you are working through how to make that happen in your firm, we should talk. Not a sales call. A conversation about where you are and what is actually blocking you.

Book a 30-minute conversation →

If someone forwarded this to you and it landed, subscribe below. We publish weekly on what it takes to make AI adoption stick in regulated financial services.

Keep building,

BuildMoat
Human infrastructure for AI adoption