Category: Compliance
AI compliance practices, documentation requirements, risk classification, and audit readiness for organisations
Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.
By subscribing you agree to receive Future Prep news. Unsubscribe any time.
The e-Evidence Regulation applies from 18 August 2026. A European production order can now compel your cloud or AI vendor to produce prompts, logs and account data within ten days, and your organisation is unlikely to be the addressee or to hear about it first.
Rebranding, substantially modifying or repurposing an AI system can move the full provider obligations onto your organisation under Article 25 of the AI Act. The July 2026 Omnibus amendment sharpened the rules, and one common vendor clause can leave you with the duties and none of the documentation.
Taiwan confirmed AI agent-assisted attacks on government agencies in July. A security vendor separately documented one campaign built from open-source frameworks. No frontier model gate was crossed, which is why vendor safety cases were never going to cover it.
Chime cut 10% of its workforce and named AI. The same announcement removed a management layer and brought staff back to the office. Three changes, one explanation, and no way to test it. What evidence a board should ask for, and what EU consultation law adds.
Germany's BaFin started supervising AI in banks and insurers on 29 July, two days after the Digital Omnibus softened the AI literacy duty. Fines reach €35 million, the sampling is risk-based, and the supervisor depends on what the system is used for.
Germany advertised 288 AI job titles in Q1 2026, and 59% sit outside tech. Indeed's data and HSBC's new governance hires show AI work leaving the technology function, taking Article 4 and Article 26 duties with it.