What happened
On 26 October 2026, the Bank of England and the Financial Conduct Authority jointly published their fourth survey report on artificial intelligence and machine learning in UK financial services. Key findings: 86% of firms now use AI (up from 75% in 2024); generative AI accounts for 56% of reported AI systems; 80% of firms report deploying AI agents; third-party AI implementations account for 39% of systems and 53% of high-materiality systems; and while 94% of firms report firm-wide AI policies and pre-deployment controls are widespread, only around half report ongoing monitoring, leakage testing and periodic review/recertification — a post-deployment governance gap. Frontier-AI cyber-capability impact is flagged as a major expected risk.
Why it matters
The BoE/FCA joint survey is supervisory evidence used to set expectations for the financial sector. The data on AI-agent deployment (80%) and the gap between pre-deployment controls and post-deployment monitoring (only ~50%) signals that UK regulators are likely to focus supervision on ongoing AI governance, third-party/cloud concentration risk, and agentic-AI controls — particularly for AI agents and third-party model suppliers.
Action needed
UK-regulated financial firms should benchmark their AI governance against the survey findings, including closing post-deployment monitoring/model-review gaps, registering AI agents, and strengthening third-party/cloud concentration and vendor-assurance controls.