UK’s FCA says firms should report AI failures and near-misses
The Financial Conduct Authority says incident reporting rules should extend to cover significant AI system errors as autonomous agents raise new risks.
Key points
- The FCA says incident reporting rules must extend to cover significant AI failures and near-misses.
- Regulator officials cite consumer harm, cyber vulnerabilities, and operational failures as primary risks.
- The UK government is working with Parliament to strengthen oversight of AI-driven cyber threats.
The Financial Conduct Authority stated on Monday that financial services firms’ incident reporting rules must extend to cover significant artificial intelligence failures and near-misses. Jessica Rusu, the regulator’s chief data, information and intelligence officer, said the regulator wants Britain to lead safe AI adoption.
Rusu spoke at Bloomberg’s UK Policy Series, emphasizing that greater autonomy in financial systems requires clear accountability. She warned that poorly governed AI can create consumer harm, cyber vulnerabilities, and operational failures at a much greater speed and scale than traditional systems.
Context and Background
The Financial Conduct Authority views near-miss reporting for agentic AI as a regulatory priority that aligns with national security interests. Rusu noted that the UK’s AI Minister has recognized these reporting requirements as critical for protecting the nation. The regulator aims for Britain to lead in safe AI adoption within financial services.
Last week, UK artificial intelligence minister Kanishka Narayan said the government plans to collaborate with Parliament and technical experts. Their goal is to assess how to strengthen the regime to protect Britain from AI-driven cyber threats and loss-of-control risks.
Who Is Affected
The UK financial services sector contributed £223.6 billion to the national economy in 2025, representing 8 percent of output. This share was the fourth highest among OECD countries, highlighting the sector’s significant economic weight. Firms operating in this space face new regulatory expectations.
Steven Adler, co-founder and chief scientist of independent nonprofit Guidelight AI Standards, told Members of Parliament last week that AI oversight could learn from aviation. In most jurisdictions, reporting near-misses is mandatory in aviation, a model Adler suggested could apply to AI governance.
What should you do?
Financial institutions should review their incident reporting frameworks to ensure they are prepared to capture AI-related failures and near-misses. Organizations should assess their autonomous systems for potential cyber vulnerabilities and operational risks. Leaders should prepare for increased regulatory scrutiny regarding AI accountability and governance.
What to do and how to stay safe: Financial Conduct Authority
- Review internal incident reporting policies to include AI system failures and near-misses.
- Assess autonomous AI agents for potential cyber vulnerabilities and operational risks.
- Ensure clear accountability structures are in place for AI-driven decisions.
- Monitor regulatory updates from the FCA and UK government on AI oversight.
Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Does the FCA require reporting of all AI errors?
The FCA says existing rules requiring firms to report major incidents must extend to significant AI failures and near-misses.
Who announced these new reporting requirements?
Jessica Rusu, the Financial Conduct Authority’s chief data, information and intelligence officer, stated the regulator’s position on Monday.
Is this part of a broader government strategy?
Yes, UK AI Minister Kanishka Narayan stated the government is working to strengthen regimes against AI-driven cyber threats.
