The New Statesman's investigation reveals that AI-generated text is already baked into UK legislation, that foreign AI models analysed the 2025 Spending Review, and that 60 Lords hold interests in AI companies while government has spent £476 million on AI consultancy since 2022. For mid-market law firms, insurers, financial services and accountancy practices, this matters because the rules you operate under are now being written by—and often through—commercial AI systems you did not choose and cannot audit. The SRA Code, FCA Consumer Duty PS22/9, and PRA SS1/23 all assume human judgment and verifiable reasoning. When the systems creating those rules lack transparency, your compliance obligations become targets moving at an unknown velocity.

This story is the inevitable outcome of an industry-wide pattern: deploying AI first, asking questions later. Over the past two years, consultancies have sold government departments on speed and cost efficiency. Generic large language models like GPT-4 and Claude were used to draft policy analysis because they were fast and cheap. Nobody stopped to ask whether a system trained on the open internet should be making decisions that affect billions of pounds of public spending and the legal obligations of thousands of regulated firms. The result is a closed loop: commercial AI companies influence government procurement, government then builds AI-dependent workflows, consultancies bid for contracts to manage those workflows, and regulated firms are left implementing rules written by AI systems designed to maximise profit, not public interest.

Here is our honest assessment: generic AI assistants—whether Microsoft Copilot, Harvey for legal work, or Luminance for document review—are powerful for execution but dangerously opaque for governance. They excel at pattern-matching and speed. They fail catastrophically at explaining *why* a decision was made in a way that regulators can verify. The difference matters. A solicitor using Harvey to draft a contract can justify every clause. A government department using GPT-4 to analyse spending bids cannot. This is why Trovix's approach to AI implementation differs: we build systems designed to remain auditable and explainable throughout the decision chain, because regulated firms need to prove they understand *every* rule they follow. You cannot defend a compliance decision you cannot explain. Government is learning this lesson slowly and at public expense. You should not.

What should you do now? First, assume that the regulatory environment will become less stable and more AI-influenced over the next 18 months. Second, invest in monitoring regulatory change with systems designed to flag when rules shift—not because consultants said so, but because the underlying requirements changed. Trovix Watch does this by tracking regulatory announcements and policy documents, not by feeding them to a black-box AI. Third, audit your own AI implementations. If you cannot explain how a rule was derived or why a decision was made, you are exposed to the same accountability gap that government is now facing. Fourth, build decision audit trails. When AI touches compliance, fee-earning, or underwriting work, document the human judgment that validated it. This is not bureaucracy—it is self-defence. The government's transparency crisis will eventually become yours if you use AI the same way they do.

Source: New Statesman