Senior risk, enterprise risk & regulatory expertise across UK, EU & international frameworks

Regulatory Horizon 2026–2028

Translate upcoming UK, EU and international regulatory change into impact assessments, accountable implementation, controls, governance and evidence.

UKEUBasel 3.1Solvency IIEU AI ActDORARegulatory change

Selected regulatory developments · updated 28 August 2026

Regulatory change is useful only when it is converted into decisions, owners, data changes, controls, testing and evidence. The items below are a current illustrative horizon as at 28 August 2026; applicability depends on firm type, permissions and jurisdiction.

UK · 1 January 2027

Basel 3.1 implementation

The PRA's final Basel 3.1 policy and rules take effect on 1 January 2027 for most elements, with the internal model approach for market risk following on 1 January 2028. We can support impact assessment, ICAAP/Pillar 2 alignment, data and reporting changes, governance, controls, testing and implementation assurance.

Official PRA source ↗
EU · 30 January 2027

Solvency II Review

The amended EU Solvency II framework and EIOPA instruments apply from 30 January 2027. The July 2026 package includes revised reporting and disclosure guidance and new liquidity-vulnerability measures, with implications for ORSA, liquidity, solvency, governance and risk management. We can support ORSA, risk appetite, liquidity, governance, gap assessment and implementation.

Official EIOPA source ↗
EU · live / 2 Dec 2027 / 2 Aug 2028

EU AI Act implementation

The EU AI Act became generally applicable on 2 August 2026. Under the 2026 AI Omnibus amendments, high-risk Annex III obligations apply from 2 December 2027 and high-risk systems embedded in regulated products from 2 August 2028; certain additional prohibitions apply from 2 December 2026. We can support AI inventory, classification, governance, controls, human oversight, third-party risk and evidence.

Official EU source ↗
EU · In force

DORA and digital operational resilience

DORA has applied since January 2025 and remains a major assurance and implementation focus across ICT risk, resilience testing, incident reporting, third-party risk and subcontracting. We can independently review whether governance and controls are operating effectively and are evidenced.

Official EU source ↗
UK · consultation closes 18 September 2026

Consumer Duty scope & proportionality

FCA CP26/23 is consulting on targeted changes to clarify Consumer Duty scope, non-UK customers, distribution-chain responsibilities and proportionality. The consultation closes on 18 September 2026 and the FCA expects a policy statement and any new rules in Q1 2027. We can support impact assessment, governance, MI, product/distribution controls and implementation planning.

Official FCA source ↗
UK · effective 1 January 2027

PRA reporting taxonomy update

The Bank of England published Banking XBRL Taxonomy v4.1.1 on 27 August 2026 as a corrective update implementing reporting requirements linked to Basel 3.1, the Strong and Simple Framework and MREL changes due from 1 January 2027. We can support reporting impact assessment, data lineage, controls, testing and ICAAP alignment.

Official PRA reporting source ↗

Broader horizon monitoring

Where relevant, we can track and assess FCA, PRA, EBA, ESMA, EIOPA, BCBS, FSB, IOSCO and local-jurisdiction developments. For cross-border firms, we focus on identifying the delta between regimes and designing one workable control framework rather than creating parallel paperwork for every jurisdiction.

Our regulatory-change delivery model

Impact

Identify applicable requirements, affected entities, products, processes and data.

Gap

Map current framework and evidence against target-state obligations.

Implement

Assign owners, redesign controls, update policies, data and governance.

Assure

Test readiness and produce evidence for senior management, audit and regulators.

This horizon is general information, not legal advice. Regulatory dates and requirements can change; formal applicability should be assessed for each firm and jurisdiction.

Need senior risk expertise without the consulting overhead?

Use us for a defined project, an urgent ad hoc requirement, or temporary on-site support on a daily-rate basis.

Discuss your requirement ↗

MONTHLY EMAIL BRIEFING

Regulatory & Risk Briefing

Selected regulatory developments and risk priorities, delivered monthly. Briefings only — no spam, sales pitches or promotional marketing emails. Unsubscribe at any time.

Register for the monthly briefing →