News and Insights

Practical updates on AI governance, workforce strategy, and digital resilience for EU organisations
Denmark wants consent for deepfakes Why AI-Assisted Attacks Go Through The Side Door AMD plans its chip supply further ahead An AI Savings Target Is A Promise, Not A Result Spotting AI-Generated Scams Is The Wrong Defence Copyright and AI: Brussels asks again BNP’s Google deal has a data boundary EDPB: a fine unless the breach is minor The KIDS Act gates AI chatbots

Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.

By subscribing you agree to receive Future Prep news. Unsubscribe any time.

Latest Insights

From the Future Prep blog

AI Generated - Stone plaques showing Solvinity replaced by Kyndryl illustrating DigiD sovereignty risk

DigiD Under Foreign Law: The Sovereignty Risk Nobody Wants to Name

A supplier acquisition can quietly move national identity infrastructure under foreign jurisdiction. The DigiD sovereignty risk is a live example of how this happens, why EU law already rules it out and what every EU organisation running critical systems should check before the same logic applies to them.
AI vendor governance risk depicted as a ceramic tile fracturing under pressure in an industrial vice with an unopened spare beside it

What the Anthropic Case Reveals About AI Vendor Governance

The Anthropic-Pentagon fallout is not a defence story. It is an AI vendor governance case study that exposes three structural risks every EU deployer needs to assess and monitor.
AI Generated - DSA platform designation risk illustrated by a regulatory stamp pressing onto a network cable connecting an office to a server

When a DSA Platform Designation Changes Your AI Risk Profile

The European Commission is assessing whether ChatGPT qualifies for DSA platform designation. For deployers, this changes the risk profile of every AI tool built on a regulated platform.
AI generated - Tree splitting a boundary wall between two contrasting landscapes representing AI provider jurisdiction risk

Your AI Provider Just Got Blacklisted. Now What?

When your AI provider gets blacklisted in one country and courted by another, governance teams face a new risk category: AI provider jurisdiction risk.
AI generated - Split desk scene representing AI data-sharing readiness between government and AI provider

When Governments Want Your AI Data

The Australia-Anthropic MoU signals a new regulatory pattern: governments negotiating direct access to AI usage data. EU governance teams should prepare now.
AI generated - A hand hovering over a payment terminal beside a tablet showing abstract analytics, representing the governance question of who authorises action when AI systems can execute decisions.

From chatbot to agent: what changes when AI starts doing, not just saying

Starling Bank's AI moves money. Norway's sovereign wealth fund keeps humans in charge. Both are deploying agentic AI but with very different governance choices. Here is what changes when AI starts acting, not just recommending, and what your oversight framework must address.

Latest News

Short updates

Denmark wants consent for deepfakes

Denmark’s culture minister introduced a bill on 8 October to ban sharing realistic digital imitations of a person’s appearance or voice without consent. Performers’ work is covered too, and satire stays allowed. The minister hopes it takes effect at the turn of the year. For anyone generating synthetic voices or faces, the question moves from whether output is labelled to whose likeness it uses, and who agreed to that.

AMD plans its chip supply further ahead

AMD will substantially increase chip supply in 2027 and now plans three to five years ahead, chief executive Lisa Su told reporters in Taipei on 6 October. Demand still exceeds supply, AMD needs more advanced wafer capacity and Su called Taiwan critical to the chip supply chain. An AI roadmap set a year at a time quietly assumes that capacity will be there. How far ahead does yours look?

Copyright and AI: Brussels asks again

On 29 September the European Commission opened a consultation on how technology, AI included, affects copyright protection. The use of protected content in AI is one of four focus areas. Rights holders, generative AI providers and other AI value-chain actors are among those invited to respond until 3 November 2026. An organisation deploying generative AI arguably sits in that chain. Is its view on licensing better heard now, or after any new measures take shape?

BNP’s Google deal has a data boundary

BNP Paribas has signed a five-year Google Cloud partnership covering infrastructure, Gemini models and internal AI agents. It is not a wholesale move. The bank’s existing governance framework decides which data may run in public cloud, and certain categories will stay out. Each agent is to be limited to the resources its task needs. For an EU-operating organisation, the question is whether that boundary is drawn before the contract or after it.

EDPB: a fine unless the breach is minor

The EDPB has adopted guidelines setting a five-step test for when a data protection authority should fine rather than reprimand. Step four carries the weight. A minor infringement generally draws a reprimand, while a non-minor one brings a strong presumption that a fine follows. For an EU-operating organisation, the live question moves from whether a fine is likely to whether its own breach would count as minor. Consultation runs to 13 November.

The KIDS Act gates AI chatbots

The Commission’s KIDS Act proposal, adopted on 17 September, would stop AI companions and chatbots reaching the market until providers can demonstrate compliance and run a monitoring mechanism for emerging risks. Enforcement rides on the AI Act for chatbots and the DSA for platforms, with fines up to 6% of worldwide turnover. For anyone shipping a chatbot that minors can reach, that is a market gate rather than a conduct rule.

Scroll to Top