The Financial Conduct Authority (FCA) is the United Kingdom's conduct regulator for financial services firms and markets. In AI policy it is the originator of the regulatory-sandbox model that AI-specific sandboxes descend from, and — with the July 2026 Mills Review — the publisher of what it describes as the first regulator-initiated review globally into how AI could transform retail financial services (Source: fca.org.uk).
| Type | UK statutory conduct regulator (financial services) |
| Chair | Ashley Alder (as of July 2026) |
| AI-relevant programs | Regulatory Sandbox (2016–), AI Lab, AI Live Testing, Supercharged Sandbox |
| Key AI publication | The Mills Review (July 6, 2026) |
Sandbox lineage
The FCA launched the original regulatory sandbox in 2016, admitting fintech and increasingly AI-driven firms to test products with real consumers under individually negotiated restrictions. The model relies on waivers, individual guidance, and informal steers rather than statutory enforcement suspension, and became the template from which AI regulatory sandboxes in other jurisdictions descend (AI Regulatory Sandbox).
AI program
The FCA's AI work spans its AI Discussion Paper and feedback statement (FS23/6), an AI Sprint, and the AI Lab, which includes AI Live Testing (a second cohort was announced in 2026) and the Supercharged Sandbox supported by Nvidia (Source: fca.org.uk). On July 21, 2026, the FCA announced that Anthropic will support the second Supercharged Sandbox cohort of 21 organizations, with applications up 51% year over year (Source: fca.org.uk). The regulator characterizes its approach to AI as principles-based and outcomes-focused, relying on the Consumer Duty and the Senior Managers Regime rather than AI-specific rules. A publication on good and poor practice in firms' AI use is planned for later in 2026.
The Mills Review (July 2026)
Commissioned by the FCA Board in January 2026 and led by executive director Sheldon Mills, the Mills Review — "AI and the future of retail financial services" — was published July 6, 2026. It examines how AI could reshape retail financial services for consumers, firms, markets, and regulators by 2030 and beyond, and identifies four AI-driven shifts: transformation of firm operations, evolution of consumer journeys, reshaping of competition and market power, and amplification of fraud and cyber risks (Source: fca.org.uk).
An April 2026 Yonder Consulting survey of more than 5,000 UK retail financial services consumers, commissioned for the review, found 20% of consumers — equivalent to roughly 11 million UK adults — would be likely to use AI capable of acting autonomously within pre-set goals, while expressing concerns about trust and control. The review makes seven recommendations to the FCA Board and Executive: secure and adapt the regulatory perimeter; strengthen system-wide coordination and oversight; monitor the transition to autonomous models and adapt regulatory frameworks; scale up the AI Lab; enable the foundations for agentic finance; build and adopt an AI-enabled agentic supervisory model; and develop a trusted public-interest AI-enabled financial capability service (Source: fca.org.uk).
The review concludes that AI is likely to become a defining force in retail financial services — improving access, personalisation, and efficiency while potentially amplifying risks of fraud, cyber insecurity, consumer harm, and market concentration.
The review's own text (The Mills Review: AI and the future of retail financial services (FCA, July 2026)) organizes this around an AI autonomy spectrum. Its projection is that firms today deploy AI for specific tasks "mostly keeping humans in the loop," but that "by 2030 many could have moved significantly further along the autonomy spectrum, embedding AI into almost every function from customer support and underwriting to compliance, claims and product design," with AI becoming for leading firms "the main method by which they process information, serve customers, and evidence outcomes."
The consequence the review draws for supervision is that human oversight changes in kind rather than degree: the role of people moves "from operators close to each decision, towards collaborators, approvers and, eventually, observers who monitor outcomes and step in when systems move outside agreed parameters." It describes this as "a substantial organisational shift, requiring new skills and a clearer account of what human oversight actually involves" — a regulator's statement that the human-in-the-loop condition common across AI regulation lacks a definition adequate to the deployments it governs.
Relationships
- related: The Mills Review: AI and the future of retail financial services (FCA, July 2026) — the review's primary text
- related: Agent Autonomy Spectrum (5 Levels) — the review's organizing frame
- related: AI Regulatory Sandbox — the FCA sandbox is the model's origin
- related: Financial Services — AI Deployment — the sector the FCA regulates and the Mills Review addresses
- related: UK Information Commissioner's Office (ICO) — fellow UK regulator with overlapping AI remit