FCA, PRA, and the rules that apply to AI in UK financial services.
UK financial services sit under the Financial Services and Markets Act 2000 (FSMA), with the FCA supervising conduct and the PRA supervising prudential matters. The Consumer Duty rules (FCA PRIN 2A) apply to firms dealing with retail customers. The Digital Operational Resilience Act (DORA) applies via the UK financial-services Statutory Instruments aligning with EU operational-resilience standards.
On AI specifically, the FCA and PRA published the joint Discussion Paper DP5/22 on AI and ML in financial services, and the FCA's AI Update sets out their supervisory expectations. The framework is principle-based rather than prescriptive: firms must show that AI workflows are governed, auditable, and proportionate. Veetso's controls system was designed against this standard, which is why the six gates and the audit log are described in the language a UK supervisor would recognise.