News and Insights

Practical updates on AI governance, workforce strategy, and digital resilience for EU organisations
Denmark wants consent for deepfakes Why AI-Assisted Attacks Go Through The Side Door AMD plans its chip supply further ahead An AI Savings Target Is A Promise, Not A Result Spotting AI-Generated Scams Is The Wrong Defence Copyright and AI: Brussels asks again BNP’s Google deal has a data boundary EDPB: a fine unless the breach is minor The KIDS Act gates AI chatbots

Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.

By subscribing you agree to receive Future Prep news. Unsubscribe any time.

Latest Insights

From the Future Prep blog

AI Generated - AI governance divergence shown as misaligned cartographic prints separated by a draftsman's divider on a drafting table

AI Governance Divergence: Three Signals That Reset Your 2026 Compliance Roadmap

AI governance divergence stopped being a forward risk this week. The EU softened its AI Act, the United States normalised CAISI pre-release vetting and seven European tech CEOs called for further simplification. Three signals in seven days reset how compliance roadmaps must plan evidence, vendors and timelines.
AI Generated - Open August 2026 calendar with 2 August circled in red beside a torn paper marked POSTPONEMENT and a red wax pencil.

What the DMA review actually changed for your cloud and AI stack

The 28 April DMA review did not expand the law to cloud and AI. It narrowed enforcement onto two specific providers and one specific service category. The date worth pinning to your governance calendar is November 2026, not 28 April. Here is what changes for an EU mid-market stack.
AI Generated - Mechanical typewriter on a wooden desk with wires running from each key into a hidden cable below, illustrating algorithmic management and worker monitoring through keystroke capture.

Algorithmic Management at Scale

Meta's Model Capability Initiative tips workplace monitoring into algorithmic management territory. For EU employers, that means Article 88 GDPR, Article 22, works council consultation and the AI Act's Article 26(7) all apply at once. Three controls to add before the next workforce monitoring pilot goes live.
AI Generated - Glass distillation apparatus in a workshop with a row of derivative receiving vessels behind it, illustrating model provenance and the difference between an original AI system and its distilled copies.

Model Provenance: 3 Critical Vendor Questions

A US State Department cable on Chinese AI distillation has turned model provenance into an immediate vendor due diligence question for EU deployers. Three concrete asks for every supplier this quarter, and where the EU AI Act helps but does not finish the job.
AI Generated - Industrial scale weighing EU-flagged servers against an unmarked unit illustrating the cloud sovereignty framework procurement assessment

SEAL-2, SEAL-3 and the Architecture of the EU’s €180 Million Sovereignty Bet

The European Commission awarded €180 million in sovereign cloud contracts assessed against its new Cloud Sovereignty Framework and SEAL levels. A working reference for procurement teams.
AI Generated - Postcard and sealed envelope on a park bench illustrating AI acceptable use policy confidentiality gap

When AI Chats Become Evidence: What the GWG Holdings Ruling Means for Your Acceptable Use Policy

A US court ruled that AI chatbot interactions are not privileged and can be compelled as evidence. Most organisations' AI acceptable use policies are not ready for this. Here is what to fix.

Latest News

Short updates

Denmark wants consent for deepfakes

Denmark’s culture minister introduced a bill on 8 October to ban sharing realistic digital imitations of a person’s appearance or voice without consent. Performers’ work is covered too, and satire stays allowed. The minister hopes it takes effect at the turn of the year. For anyone generating synthetic voices or faces, the question moves from whether output is labelled to whose likeness it uses, and who agreed to that.

AMD plans its chip supply further ahead

AMD will substantially increase chip supply in 2027 and now plans three to five years ahead, chief executive Lisa Su told reporters in Taipei on 6 October. Demand still exceeds supply, AMD needs more advanced wafer capacity and Su called Taiwan critical to the chip supply chain. An AI roadmap set a year at a time quietly assumes that capacity will be there. How far ahead does yours look?

Copyright and AI: Brussels asks again

On 29 September the European Commission opened a consultation on how technology, AI included, affects copyright protection. The use of protected content in AI is one of four focus areas. Rights holders, generative AI providers and other AI value-chain actors are among those invited to respond until 3 November 2026. An organisation deploying generative AI arguably sits in that chain. Is its view on licensing better heard now, or after any new measures take shape?

BNP’s Google deal has a data boundary

BNP Paribas has signed a five-year Google Cloud partnership covering infrastructure, Gemini models and internal AI agents. It is not a wholesale move. The bank’s existing governance framework decides which data may run in public cloud, and certain categories will stay out. Each agent is to be limited to the resources its task needs. For an EU-operating organisation, the question is whether that boundary is drawn before the contract or after it.

EDPB: a fine unless the breach is minor

The EDPB has adopted guidelines setting a five-step test for when a data protection authority should fine rather than reprimand. Step four carries the weight. A minor infringement generally draws a reprimand, while a non-minor one brings a strong presumption that a fine follows. For an EU-operating organisation, the live question moves from whether a fine is likely to whether its own breach would count as minor. Consultation runs to 13 November.

The KIDS Act gates AI chatbots

The Commission’s KIDS Act proposal, adopted on 17 September, would stop AI companions and chatbots reaching the market until providers can demonstrate compliance and run a monitoring mechanism for emerging risks. Enforcement rides on the AI Act for chatbots and the DSA for platforms, with fines up to 6% of worldwide turnover. For anyone shipping a chatbot that minors can reach, that is a market gate rather than a conduct rule.

Scroll to Top