Tagged with: #compliance

On 2 August 2026, the EU AI Act’s rules for standalone high-risk systems were supposed to take effect. They will not. Six days before the deadline, the EU brought an amendment into force deferring those obligations to December 2027, because the standards and implementation machinery needed to make them workable were not ready. In this article, I set out what the deferral reveals about Boards which anchored AI governance to regulatory deadlines, and where the accountability that never moved actually sits.

The UK regime now requires four safeguards for any significant decision taken solely by automated processing: information, representations, human intervention, contestability. On the page these are procedural rights. In practice they all depend on something the law does not name: whether the organisation can interrogate its own decisions well enough for the safeguards to work. For a rule-based system, that capability is built in. For a probabilistic system, it is not, and most Boards have approved those systems without ever asking whether it exists. The first contestability request is when the gap surfaces.

Minimum lovable governance marks a shift from episodic compliance scrambles to continuous, embedded oversight that people actually want to use. In this article I explain how governance can achieve necessary guardrails whilst earning adoption rather than resistance — like an arbour that guides growth without constraining it. For Boards, minimum lovable governance presents a practical path: the operating principle that makes AI governance work when traditional approaches simply get routed around.

With a 68% surge in shadow AI usage and 54% of employees saying they would use AI tools even if they were not authorised by the company, Boards face a governance challenge traditional compliance cannot solve. This article presents AI amnesty as an important first step to minimum lovable governance - transforming hidden risks into strategic assets whilst capturing employee-validated innovation. When 95% of enterprise AI pilots fail to deliver measurable ROI yet shadow AI thrives everywhere, the path forward isn’t enforcement but structured disclosure programmes that build trust and position early adopters as governance standard-setters.

AI governance is fragmenting into incompatible systems — Europe prioritising trust through transparency, America pursuing speed through scale, China maintaining control through integration — forcing Boards to choose rather than compromise. In this article, I explore the sovereignty trilemma and present three strategic stances for navigating these landscapes without fracturing your strategy.

The EU’s General-Purpose AI (GPAI) Code of Practice, effective August 2025, signals a new era of regulatory divergence. While the EU sets transparency and systemic risk guardrails, the U.S. accelerates through deregulation. For Boards, the challenge isn’t choosing sides but mastering dual-track governance — turning regulatory complexity into strategic advantage.

In my previous article, Transforming the Board: Using Decision Analytics for Strategic Advantage, I introduced the concept of AI-powered decision analytics as a transformative approach to board decision-making. I explored how these capabilities can help directors move beyond traditional backward-looking metrics to embrace predictive indicators that model potential futures and enhance strategic decision-making.

The EU AI Act, which came into force on August 1, 2024, establishes significant penalties for non-compliance, including fines of up to €35 million or 7% of global annual turnover for serious violations. As regulatory frameworks for artificial intelligence rapidly evolve worldwide, Boards face a new imperative: navigating complex compliance requirements while maintaining the innovation speed necessary to compete.