News and Insights

Practical updates on AI governance, workforce strategy, and digital resilience for EU organisations
Meaningful Human Involvement Is Not A Rubber Stamp Europe’s First Uber Robotaxi Still Has A Safety Operator France excludes OpenAI from cyber work Ten Days To Answer A European Production Order UK growth: AI vendors, not AI users Two clouds. One jurisdiction. No regulator paused Astra. OpenAI did. US productivity up 1.4%, cause unproven Moldova’s GDPR law lands on 23 August

Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.

By subscribing you agree to receive Future Prep news. Unsubscribe any time.

Latest Insights

From the Future Prep blog

AI generated image - workers held at a closed gate beside an empty booth, illustrating meaningful human involvement missing from an automated decision

Meaningful Human Involvement Is Not A Rubber Stamp

The Dutch regulator has fined Uber 824,990,000 euros for fully automated decisions about drivers. Roles under the AI Act can be reallocated, but the duty to have a human who can overturn the output follows whoever decides about the person. Where that review sits in your organisation.
AI generated image - a supervised driver's seat representing the safety operator role in AI deployment

Europe’s First Uber Robotaxi Still Has A Safety Operator

Europe's first Uber-bookable autonomous ride launched in Zagreb with a licensed safety operator behind the wheel. The role split across three companies, and the human still sitting inside it, describes most enterprise AI deployments more accurately than any vendor business case does.
AI generated image - an open letterbox holding a sealed envelope, representing a production order served on an EU addressee

Ten Days To Answer A European Production Order

The e-Evidence Regulation applies from 18 August 2026. A European production order can now compel your cloud or AI vendor to produce prompts, logs and account data within ten days, and your organisation is unlikely to be the addressee or to hear about it first.
AI generated image - a crate being relabelled, representing provider obligations transferring under Article 25

Your Vendor Can Leave You Holding The Provider Obligations

Rebranding, substantially modifying or repurposing an AI system can move the full provider obligations onto your organisation under Article 25 of the AI Act. The July 2026 Omnibus amendment sharpened the rules, and one common vendor clause can leave you with the duties and none of the documentation.
AI generated image - a padlocked iron gate standing alone in a field with a worn footpath curving around it, illustrating how an AI agent attack bypasses frontier model controls

The AI Agent Attack Built From Public Parts

Taiwan confirmed AI agent-assisted attacks on government agencies in July. A security vendor separately documented one campaign built from open-source frameworks. No frontier model gate was crossed, which is why vendor safety cases were never going to cover it.
AI generated image - a small brass jug and a large galvanised pail filled to the same level on a workshop bench.

Read The AI Cost Savings Before You Cite Them

Airbnb told investors its customer support cost per booking fell about 16% year on year. The same letter shows total support spending rose. Reading the difference between those two facts is the skill earnings season is about to demand.

Latest News

Short updates

France excludes OpenAI from cyber work

French Budget Minister David Amiel said the state will hire sovereign AI providers such as Mistral to test public systems for security vulnerabilities, and that this excludes OpenAI. The decision came days after a breach at the tax authority affecting around 700,000 people. Jurisdiction is turning into a procurement filter, applied after an incident rather than in a strategy paper. Worth knowing which of your vendors would survive that filter.

UK growth: AI vendors, not AI users

Britain’s economy grew 0.4% in the second quarter and information and communication supplied almost half of it. Inside that, computer programming and consultancy rose 3.7%, computing and electronics manufacturing 10.7% year on year. So the measurable growth sits with the firms selling AI, not the firms using it. One economist attributes part of June’s rise to the World Cup and the weather. Adoption returns remain unmeasured.

Two clouds. One jurisdiction.

Ryanair has added Google Cloud on a five-year deal, sixteen days after renewing AWS for five years. Chief executive Eddie Wilson calls the dual-cloud strategy infrastructure resilience, and against outage risk it is. Jurisdictional exposure is a different question, and two US providers do not answer it. The two contracts also cover separate workloads rather than mirroring each other. Worth watching whether European boards start telling those two risks apart.

No regulator paused Astra. OpenAI did.

OpenAI says preliminary evaluations of Astra, an unreleased model, cannot rule out the Critical cybersecurity level under its own Preparedness Framework. It has paused internal work that fails the strengthened controls and added isolated testing, encrypted weights and universal monitoring. No regulator required this. For EU organisations the point is evidential: so far the only safety case that exists is the vendor’s own unverified reading, published before the model reaches any market.

US productivity up 1.4%, cause unproven

US nonfarm business productivity rose at a 1.4% annual rate in the second quarter, and 2.2% on the year. Output rose 1.7%, hours worked 0.3% and unit labour costs 1.3%. The release credits nothing to AI, because the series cannot separate one input from another. Revised figures follow on 3 September. Any AI business case leaning on this data is adding a claim the statistics do not carry.

Moldova’s GDPR law lands on 23 August

Moldova’s Law 195/2024 takes effect on 23 August, bringing GDPR-style duties and a regulator with fining powers. Ceilings are 1 million lei or 1% of turnover for documentation and processor failures, and 2 million lei or 2% for serious breaches. DLA Piper puts 2 million lei at roughly 104,000 euros. Fines phase in over three years. Controllers outside Moldova that serve or monitor people there have to appoint a local representative.

Scroll to Top