EY UK Financial Services Regulation Outlook 2026: Growth, AI, and Compliance

UK Financial Services Regulation at a Crossroads

Global financial regulation stands at a crossroads in 2026. According to EY’s comprehensive UK Financial Services Regulation Outlook, the accelerating pace of change, technological disruption, and diverging regional agendas are converging, bringing geopolitical and economic impacts into sharp focus. As governments prioritize growth and competitiveness, jurisdictions worldwide are re-evaluating the post-global financial crisis settlement on financial stability.

The UK finds itself at the epicenter of this transformation. With net public debt rising from 34.7% of GDP in January 2008 to 95.6% in 2025, an ageing population (projected to reach 27% aged 65+ by 2072), and the end of historically low interest rates, the economic imperative for financial services-driven growth has never been more acute. The government has responded with an ambitious agenda that fundamentally reframes the role of financial regulation — from a defensive mechanism against risk to an active enabler of economic growth.

External threats add complexity to this picture. Cyberattacks have escalated in both frequency and sophistication, financial crime is intensifying through new technologies, and market volatility from geopolitical tensions creates persistent uncertainty. EY’s report maps how these forces will shape regulation across every major financial services sector in 2026, offering firms a detailed guide to navigating the year ahead. Explore our collection of financial services regulatory analyses in the interactive library.

The Growth Agenda Driving UK Financial Regulation Reform

Growth has become the central theme driving the UK’s political and regulatory agenda. The government has set a clear direction: for too long the country has been regulating for risk, and it is time to regulate for growth. This ambition crystallized with the publication of the Financial Services Competitiveness Strategy in July 2025, followed by the Leeds Reforms designed to “rewire the financial system, boost investment and create skilled jobs across the UK.”

EY identifies five specific regulatory levers the government is deploying. First, making the UK more attractive for global firms by easing capital requirements, offering concierge-style regulatory support, and speeding up authorizations. Second, moving more UK savings into productive investment through the Advice-Guidance Boundary Review. Third, driving more productive use of capital with longer-term, higher-risk and higher-return investing via pension reforms. Fourth, reducing unnecessary regulatory burdens through reforms to the Senior Managers and Certification Regime (SM&CR) and targeted data collections. Fifth, supporting high-growth firms through a new Scale-Up unit led jointly by the FCA and PRA.

The international context amplifies this agenda. As countries adopt protectionist policies and genuine international cooperation shrinks, the UK sees an opportunity to leverage financial services for competitive advantage. However, EY cautions that there is an inherent tension between enabling broader access and the potential for adverse consumer outcomes. Regulators want the government to take shared ownership of risk appetite and articulate it in clear metrics — a dynamic that will define the regulatory environment throughout 2026.

FCA and PRA Supervisory Approaches for Financial Services

The FCA and PRA have responded to the growth agenda with distinctly different approaches. The FCA has adopted a more data-driven, outcomes-focused and proportionate supervisory model, while the PRA remains firmly committed to financial stability, maintaining that there is “not a fundamental trade-off between growth and financial stability.”

The data reveals important shifts at the FCA. Open enforcement cases dropped from 188 to 130, while voluntary requirements and written undertakings rose from 104 to 119, and own-initiative requirements fell from 17 to 7. This pattern suggests a deliberate shift toward collaborative resolution over adversarial enforcement. The FCA has also streamlined communications — stopping portfolio letters from April 2025 in favor of firm-specific communications, a monthly Regulation Round-up newsletter, and LinkedIn articles by FCA directors.

The skilled persons framework is being refreshed from April 2026 with notable changes. Two new specialist Lots — Market Abuse, and Trade and Transaction Reporting — signal emerging supervisory priorities. The separation of market abuse investigations from the broader Financial Crime Lot responds to a growing trend of market-abuse-related reviews. Similarly, the new Trade and Transaction Reporting Lot signals enhanced focus on markets data integrity as the UK encourages capital markets growth. The PRA has also shown a spike in reviews commissioned under the Prudential Lot, particularly focused on data quality in regulatory returns.

Financial Crime: Enforcement and Regulation Priorities

Financial crime remains a central pillar of the FCA’s 2025-2030 strategy, and EY makes clear that firms should expect no easing of expectations. Fraud represents the largest share of financial crime and will continue as a key focus area. The new corporate “failure to prevent fraud” offence, effective from September 2025, may bring early enforcement cases in 2026, creating a new layer of corporate accountability.

Anti-money laundering scrutiny is intensifying. The FCA has committed to proactive reviews of AML controls in high-risk firms, supported by recent enforcement actions that underscore regulatory readiness to act on deficiencies. HM Treasury’s upcoming reforms will formalize and expand the FCA’s remit, particularly in areas where oversight was previously fragmented. The Payment Systems Regulator’s authorized push payment (APP) fraud reimbursement rules are also being assessed for impact.

Technology is reshaping financial crime from both sides. While AI-enabled financial crime and fraud are on the rise, firms are increasingly using AI to combat these threats. The FCA is leveraging data and technology to strengthen its own oversight, including social media sweeps, collaboration with the National Economic Crime Centre’s Data Fusion Project, and synthetic data pilots aimed at improving AML detection and market surveillance. Internationally, the new EU AML regulator (AMLA) is starting direct supervisory of selected large EU firms, adding another layer of complexity for cross-border operators.

Operational Resilience and Cyber Regulation in 2026

With new operational resilience standards now in force, UK regulators are shifting from policy-setting to active supervisory scrutiny. Firms must embed resilience into change programs, manage third-party dependencies effectively, and treat cyber risk as a principal concern. The growing frequency and sophistication of cyberattacks — evidenced by high-profile incidents throughout 2025 — has elevated operational resilience to the top of supervisory priorities.

EY highlights that the regulatory expectation goes beyond having resilience plans on paper. Regulators want to see evidence that firms have tested their important business services against severe but plausible scenarios, identified vulnerabilities in their technology and third-party ecosystems, and developed credible recovery capabilities. Third-party risk management is receiving particular attention, with regulators increasingly concerned about concentration risk in critical service providers.

The cyber dimension is becoming inseparable from operational resilience. Financial services firms face escalating threats from state-sponsored actors, organized criminal groups, and opportunistic attackers exploiting AI-generated social engineering techniques. Regulators are expecting firms to invest in threat-led penetration testing, enhanced monitoring capabilities, and incident response frameworks that can manage both traditional and AI-enabled attack vectors. For firms operating across jurisdictions, the challenge is compounded by diverging regulatory expectations for cyber resilience in the UK, EU, and US. Explore how leading firms are managing compliance and operational resilience in our interactive library.

AI Compliance in UK Financial Services Regulation

Artificial intelligence presents both an opportunity and a regulatory challenge for UK financial services. EY’s report identifies AI compliance as one of four cross-cutting priorities that will affect all firms across every sector. Regulators expect firms to maintain robust governance, risk management, and explainability for AI systems, with compliance teams actively overseeing AI deployment to safeguard fair and ethical outcomes.

The UK’s approach to AI regulation differs from the EU’s prescriptive AI Act. Instead of categorical rules, UK regulators are applying existing outcomes-based frameworks to AI use cases, expecting firms to demonstrate that AI-driven decisions are fair, transparent, and appropriately supervised. This approach gives firms more flexibility but also more responsibility — without prescriptive rules, firms must develop and justify their own governance frameworks.

The practical implications are significant. Firms using AI for credit decisions, customer communications, fraud detection, or investment advice must be able to explain how their models work, demonstrate that outcomes are fair across different customer groups, and maintain human oversight at critical decision points. The FCA’s own adoption of AI for supervision — including advanced analytics, market surveillance, and synthetic data — signals that regulators will increasingly use AI to identify firms that are falling short of expectations.

UK Capital Markets and Wholesale Banking Regulation

Capital markets and wholesale banking face a regulatory environment shaped by the UK’s ambition to strengthen London’s position as a global financial center. The Leeds Reforms include measures to streamline listing requirements, enhance market access, and reduce barriers to capital formation. The creation of new specialist Lots for Market Abuse and Trade and Transaction Reporting signals heightened scrutiny of market integrity even as barriers to market participation are lowered.

The consolidation of the Payment Systems Regulator into the FCA represents a significant structural change, with legislation expected to follow in 2026. This simplification is designed to reduce regulatory complexity for firms operating across payments and capital markets, though the transition period will require careful management of compliance frameworks and reporting obligations.

Wholesale banking firms should anticipate continued focus on stress testing and contingency planning amid heightened economic and geopolitical uncertainty. The unresolved issues from the March 2023 banking turmoil, including questions about deposit stability, liquidity management, and concentration risk, remain on regulators’ radar. The PRA’s emphasis on data quality in regulatory returns suggests that firms investing in data infrastructure and reporting accuracy will be better positioned for supervisory interactions.

Payments and Pensions Regulation Reforms

The payments sector is experiencing substantial regulatory restructuring in 2026. The PSR’s consolidation into the FCA will fundamentally change how payment services are regulated, creating a single regulator with oversight of both consumer protection and payments infrastructure. The APP fraud reimbursement framework continues to evolve, with regulators assessing its effectiveness and impact on both consumer protection and firm economics.

Cryptoasset regulation is advancing rapidly. The FCA is finalizing its framework for regulated cryptoasset activities, with guidance expected to address financial crime risks linked to digital innovation. Firms operating in or adjacent to the cryptoasset space should prepare for clearer but more demanding regulatory expectations that align crypto activities with existing financial services standards.

Pension regulation represents one of the most consequential reform areas. The government’s “Workplace Pensions: A Roadmap” outlines ambitious reforms designed to move pension savings into more productive, higher-return investments. These reforms aim to unlock significant capital for the UK economy while improving outcomes for pension savers. For pension providers and asset managers, this creates both compliance obligations and commercial opportunities as the regulatory framework actively encourages longer-term, higher-risk investment strategies. Learn how organizations are navigating pension and regulatory reforms in our interactive library.

Insurance and Wealth Management Regulation Outlook

The insurance sector benefits from targeted deregulation, with the PRA and FCA looking to reduce burdens by relying more on Lloyd’s of London’s assessments for managing agent authorizations. This streamlining represents a practical example of the growth agenda in action — reducing unnecessary regulatory duplication while maintaining standards through existing market infrastructure.

The motor finance redress situation illustrates the ongoing tension between growth and consumer protection. This complex issue, where consumer harm has been identified in past lending practices, demonstrates how the FCA must balance its growth mandate with its statutory duty to protect consumers. How regulators navigate this tension will set important precedents for future conduct-related issues.

Wealth and asset management firms face evolving expectations around the Consumer Duty, AI-driven advice models, and the Advice-Guidance Boundary Review. The boundary review is particularly significant — by potentially allowing firms to offer more guidance without triggering full advice requirements, it could open substantial new market opportunities while addressing the UK’s persistent advice gap. Firms that position themselves to deliver technology-enabled guidance at scale could capture significant market share as regulatory barriers to entry are lowered.

Strategic Regulatory Roadmap for Financial Services Firms

EY concludes with clear guidance for firms navigating 2026. First, demonstrate support for the growth agenda — use it as a means to engage with government and regulators to influence policy. Firms that actively contribute to the growth conversation will have more influence over how regulation evolves than those that passively wait for changes to be imposed.

Second, stay alert to enduring regulatory priorities. The growth agenda does not mean reduced standards in areas like financial crime, operational resilience, or consumer protection. Firms should recognize which areas are unlikely to see a reduction in regulatory rules or expectations and maintain robust compliance frameworks accordingly. The shift to outcomes-based regulation means firms bear more responsibility for demonstrating good outcomes, not less.

Third, leverage any reduction in regulatory burden to drive strategic growth. Where reforms create new opportunities — whether through pension reforms, the Advice-Guidance Boundary Review, or streamlined authorization processes — firms should move quickly to capture first-mover advantage. Fourth, harness new technologies to boost efficiency while anticipating regulatory concerns, particularly around AI governance and explainability. Finally, for firms operating internationally, accept that longer-term regulatory divergence is now a cost of doing business and focus on managing those costs rather than waiting for harmonization that may never come. The window for positioning is now — HM Treasury will be evaluating whether regulators are translating ambition into action, and firms that demonstrate alignment with the growth agenda will be best positioned for the years ahead.