News and Insights

Practical updates on AI governance, workforce strategy, and digital resilience for EU organisations
Denmark wants consent for deepfakes Why AI-Assisted Attacks Go Through The Side Door AMD plans its chip supply further ahead An AI Savings Target Is A Promise, Not A Result Spotting AI-Generated Scams Is The Wrong Defence Copyright and AI: Brussels asks again BNP’s Google deal has a data boundary EDPB: a fine unless the breach is minor The KIDS Act gates AI chatbots

Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.

By subscribing you agree to receive Future Prep news. Unsubscribe any time.

Latest Insights

From the Future Prep blog

AI generated image - a crate being relabelled, representing provider obligations transferring under Article 25

Your Vendor Can Leave You Holding The Provider Obligations

Rebranding, substantially modifying or repurposing an AI system can move the full provider obligations onto your organisation under Article 25 of the AI Act. The July 2026 Omnibus amendment sharpened the rules, and one common vendor clause can leave you with the duties and none of the documentation.
AI generated image - a padlocked iron gate standing alone in a field with a worn footpath curving around it, illustrating how an AI agent attack bypasses frontier model controls

The AI Agent Attack Built From Public Parts

Taiwan confirmed AI agent-assisted attacks on government agencies in July. A security vendor separately documented one campaign built from open-source frameworks. No frontier model gate was crossed, which is why vendor safety cases were never going to cover it.
AI generated image - a small brass jug and a large galvanised pail filled to the same level on a workshop bench.

Read The AI Cost Savings Before You Cite Them

Airbnb told investors its customer support cost per booking fell about 16% year on year. The same letter shows total support spending rose. Reading the difference between those two facts is the skill earnings season is about to demand.
AI generated image - matching inspection huts on both banks of a river, illustrating cloud sovereignty rules

Cloud Sovereignty Rules Now Point Both Ways

Nigeria signed three cloud instruments on 5 August, sorting government data into four levels and pinning the top two inside the country. The architecture mirrors CADA almost exactly. What changes for EU providers when the sovereignty test is pointed at them, and what October 2026 decides.
AI generated image - assembly bench with three workstations removed, illustrating AI job cuts

AI Job Cuts: The Claim You Cannot Test

Chime cut 10% of its workforce and named AI. The same announcement removed a management layer and brought staff back to the office. Three changes, one explanation, and no way to test it. What evidence a board should ask for, and what EU consultation law adds.
AI generated image - filing cabinet with two open drawers and two inspection stamps, representing split AI supervision

AI Supervision Started Before the Deadline

Germany's BaFin started supervising AI in banks and insurers on 29 July, two days after the Digital Omnibus softened the AI literacy duty. Fines reach €35 million, the sampling is risk-based, and the supervisor depends on what the system is used for.

Latest News

Short updates

Denmark wants consent for deepfakes

Denmark’s culture minister introduced a bill on 8 October to ban sharing realistic digital imitations of a person’s appearance or voice without consent. Performers’ work is covered too, and satire stays allowed. The minister hopes it takes effect at the turn of the year. For anyone generating synthetic voices or faces, the question moves from whether output is labelled to whose likeness it uses, and who agreed to that.

AMD plans its chip supply further ahead

AMD will substantially increase chip supply in 2027 and now plans three to five years ahead, chief executive Lisa Su told reporters in Taipei on 6 October. Demand still exceeds supply, AMD needs more advanced wafer capacity and Su called Taiwan critical to the chip supply chain. An AI roadmap set a year at a time quietly assumes that capacity will be there. How far ahead does yours look?

Copyright and AI: Brussels asks again

On 29 September the European Commission opened a consultation on how technology, AI included, affects copyright protection. The use of protected content in AI is one of four focus areas. Rights holders, generative AI providers and other AI value-chain actors are among those invited to respond until 3 November 2026. An organisation deploying generative AI arguably sits in that chain. Is its view on licensing better heard now, or after any new measures take shape?

BNP’s Google deal has a data boundary

BNP Paribas has signed a five-year Google Cloud partnership covering infrastructure, Gemini models and internal AI agents. It is not a wholesale move. The bank’s existing governance framework decides which data may run in public cloud, and certain categories will stay out. Each agent is to be limited to the resources its task needs. For an EU-operating organisation, the question is whether that boundary is drawn before the contract or after it.

EDPB: a fine unless the breach is minor

The EDPB has adopted guidelines setting a five-step test for when a data protection authority should fine rather than reprimand. Step four carries the weight. A minor infringement generally draws a reprimand, while a non-minor one brings a strong presumption that a fine follows. For an EU-operating organisation, the live question moves from whether a fine is likely to whether its own breach would count as minor. Consultation runs to 13 November.

The KIDS Act gates AI chatbots

The Commission’s KIDS Act proposal, adopted on 17 September, would stop AI companions and chatbots reaching the market until providers can demonstrate compliance and run a monitoring mechanism for emerging risks. Enforcement rides on the AI Act for chatbots and the DSA for platforms, with fines up to 6% of worldwide turnover. For anyone shipping a chatbot that minors can reach, that is a market gate rather than a conduct rule.

Scroll to Top