Our new Risk & Compliance forecast (as at 22 May 2024) is now live. This month we report on: (1) an update to the UK’s national risk assessments on money laundering and terrorist financing and proliferation financing; (2) a new FCA consultation on proposed changes to its Financial Crime Guide; (3) timelines for the new offence of failure to prevent fraud; and (4) a new ICO call for evidence focusing on engineering individual rights into generative AI models.

This Practice Note is aimed at compliance professionals in the private sector. It tracks key future developments in risk and compliance in England and Wales. It provides details of key dates for your diary (including forecasted dates where the actual date is unknown) and commentary in relation to key developments, including legislation, regulatory changes and consultations. For details of developments relating to financial crime compliance, see Practice Note: Financial crime compliance horizon scanner—2026. This horizon scanner does not cover past developments, such as legislation fully in force, implemented regulatory changes or concluded consultations. For details of past developments in the field of Risk & Compliance, see Practice Notes: • Risk & Compliance tracker—2026 • Financial crime compliance tracker—2026 • New and updated content 2026—Risk & Compliance Data protection, AI and cybersecurity What’s happening? When? What’s the impact? Find out more Regulation of artificial intelligence (AI) On 2 February 2026, the Information Commission’s Office (ICO) reiterated its commitment to producing a single set of rules for firms developing or using AI products. The

This month’s edition of Risk and Compliance highlights includes: (1) Brexit; (2) crime prevention; (3) AML & CTF; (4) information management & security; (5) GDPR and data protection; (6) a selection of other news and updates; (7) LexisNexis® webinars; (8) all the latest new and updated content.

This Practice Note provides a summary of the key Risk & Compliance developments which have impacted compliance professionals in the private sector in England and Wales in 2026, including legislation, consultations, and other notable developments. For information on ongoing and expected developments, see Practice Note: Risk & Compliance horizon scanner—2026. Data protection, AI and cybersecurity What’s happened? When? What’s the impact? Find out more Data protection complaints advice for small organisations The ICO updated its advice on data protection complaints for small organisations, to include amendments from DUAA 2025. 22 October 2026 Having a data protection complaints process is a regulatory requirement. Firms need to ensure they have a process for handling data protection complaints that complies with the UK GDPR and the ICO’s expectations. ICO, Advice for small and medium organisations, What’s the right way to handle a data protection complaint?Practice Note: How to handle data protection complaints Information Commissioner’s Office change of name The Information Commissioner’s Office has been renamed the Information Commission’s Office. 30 September 2026 Firms should review

This week's edition of Risk & Compliance weekly highlights includes: an analysis on what legal teams need to know about AI standards and the main identified challenges of EU AI Act-GDPR interplay, the latest sanctions news, approval of AML guidance for the legal sector by HMT and new guidance on corporate self-reporting and DPAs by the SFO.

This week's edition of Risk & Compliance weekly highlights includes: the latest updates to the financial sanctions regime, a Spotlight on Corruption report criticising the UK’s enforcement of sanctions and a news analysis on the proposed EU anticorruption directive.

This week's edition of Risk & Compliance weekly highlights includes: the launch of the EDPB website compliance auditing tool, the latest sanctions updates, details of the NCA SARs in Action magazine, issue 14, an analysis of the Entain deferred prosecution deal and a news analysis on explainability and AI.

This week's edition of Risk and Compliance weekly highlights includes the Information Commissioner’s transition to the Information Commission under the Data (Use and Access) Act 2025, new guidance on information sharing in Welsh public services, and significant sanctions developments, including OFSI’s presumption of denial for licence applications from designated Iranian banks and its annual frozen assets reporting exercise. We also cover updated licensing for the Shah Deniz Project, the launch of an AI Scam Watchlist highlighting emerging AI-enabled scams, and analysis of key financial crime developments in 2026 and what practitioners should watch for as further reforms take effect.

This week's edition of Risk & Compliance weekly highlights includes the European Commission's updated Model Contractual Clauses for AI Procurement and the applicability of the EU's AI rulebook, a Legal Services Threat Assessment Report by OFSI, the Serious Fraud Office's new fraud prevention powers and covert tactics to address self-reporting declines and an analysis of the UK’s current approach to modern slavery.

This week's edition of Risk & Compliance weekly highlights includes: the FCA’s £21m fine against Monzo for financial crime control failings, OFSI’s updated sanctions FAQs, FATF’s report on terrorist financing enforcement gaps, EU changes to the AML high-risk jurisdictions list, and the ICO’s consultation on cookies and tracking technologies.

This week's edition of Risk & Compliance weekly highlights includes: the latest sanctions news, guidance published by the Home Office on the information sharing measures in the Economic Crime and Corporate Transparency Act 2023, analysis on the new 'failure to prevent fraud' offence that is likely to take effect in 2025 which was written to target large companies that do not have internal controls to prevent such crime and a report published by the European Commission on the functioning of the adequacy decision on the EU-US Data Privacy Framework (DPF), which facilitates the transfer of personal data from the EU to the US.

This week's edition of Risk & Compliance weekly highlights includes major Iran sanctions changes due to take effect on 29 September 2026, including new trade, financial and transport restrictions, alongside a £7.4 million settlement for Russia sanctions breaches. We also cover final amendments to Part I of the JMLSG’s anti-money laundering guidance, the Ministry of Justice’s new 2026–2030 fraud, bribery and corruption strategy, and the NECC’s latest report on action against fraud and illicit finance. In addition, we look at the first SDT ruling banning a foreign lawyer over inaccurate AI-generated citations, as well as increases to practising and registration certificate fees for 2026–27.