The Financial Conduct Authority's decision to establish a dedicated review into AI's impact on retail financial services signals a maturation in the regulator's approach to emerging technology governance. Rather than impose immediate prescriptive rules under SYSC or COBS frameworks, the FCA is undertaking a structured, long-term assessment that will inform policy by summer 2026. This reflects lessons learned from the regulator's existing AI initiatives—the AI Lab, AI Live Testing, and Supercharged Sandbox—which have built institutional knowledge about how AI reshapes market conduct, consumer outcomes, and operational resilience. The Mills Review's remit extends to examining consumer protection implications under the Consumer Duty (PS22/9), suggesting the FCA views AI governance as integral to its broader transformation agenda rather than a standalone compliance issue.

The timeline is instructive for firms already deploying AI in advisory, decisioning, and customer service functions. The FCA expects to deliver recommendations to its Board in summer 2026, with formal guidance anticipated by year-end. This provides a window for firms to stress-test their current AI governance arrangements, which should encompass explainability, bias monitoring, and human oversight protocols aligned with ICOBS transparency obligations. Platforms such as Trovix Watch already parse regulatory announcements and track FCA consultation timelines, helping compliance teams anticipate guidance publication and prepare governance documentation in advance. For firms operating under the Senior Managers & Certification Regime (SM&CR), the review's findings will likely inform expectations around individual accountability for AI-related decisions, particularly where algorithmic systems drive credit decisions or conduct-of-business determinations.

The review's explicit focus on how AI will reshape market structure and regulation through 2030 suggests the FCA anticipates more fundamental shifts than incremental compliance updates. Consumer expectations around AI disclosure, the evolution of robo-advisory standards, and the integration of generative AI into customer communications will all require regulatory clarity. Which is why firms deploying Trovix Watch gain early visibility into emerging expectations—the platform captures not just published rules but the strategic direction signalled through reviews, research, and board-level priorities. The FCA's approach also creates space for competitive advantage: firms that embed rigorous AI governance frameworks now, informed by evidence rather than reactive rules-writing, will reduce remediation costs and build consumer trust ahead of formal guidance crystallisation.

For retail financial services firms, the Mills Review represents an opportunity to reset their AI governance posture. The evidence trail that Trovix Watch captures—spanning consultation launches, stakeholder feedback timelines, and guidance publication—helps firms coordinate their internal AI policy reviews with regulatory momentum. Governance frameworks should encompass model risk management, third-party vendor assessment (particularly where AI services are outsourced), and conflict-of-interest mapping under COBS 2. Trovix Audit provides the governance dashboard firms need to track compliance with evolving FCA expectations as the Mills Review recommendations materialise over the coming months.

Source: FCA