FCA Says AI Near-Misses Must Be Reported Under Existing Rules

What happened

Why it matters

• ·UK-regulated firms face live enforcement exposure. The FCA is not proposing a new rule but reinterpreting existing mandatory reporting obligations to cover AI events. Firms that have treated AI near-misses as outside their incident scope may already be in breach.
• ·Agentic AI creates a near-miss detection problem that most incident programs do not address. Unlike a server outage, an agent taking an unintended action may leave no complaint or visible harm. Firms without proactive monitoring logs may not know a reportable event occurred, as highlighted by Banking Examiners Are Now Asking Banks to Prove AI Agents Can Be Audited.
• ·The FCA's framing sets a supervisory expectation that will spread. Once a major regulator establishes that near-miss reporting is already required, peer regulators in other jurisdictions are likely to adopt the same interpretation. This raises the compliance baseline for internationally active firms.

Governance controls affected

What to do now

• ☐Review your current incident reporting taxonomy and confirm whether it explicitly covers AI failures and near-misses, including events involving agentic systems that caused no confirmed customer harm.
• ☐Ask your operations and technology teams which AI agent deployments can take actions without a human approving each step, and confirm that logging for those systems is sufficient to detect an unintended action after the fact.
• ☐Update your incident classification criteria to include a near-miss category for AI events, with a defined threshold for what triggers a report to the FCA.
• ☐Brief your operational resilience committee or equivalent governance body on the FCA's position and assign ownership for the near-miss reporting gap within the next 30 days.
• ☐Check whether your AI vendor contracts require the vendor to notify you of incidents or near-misses on their side that could affect your regulatory reporting obligations.

What to watch next

The FCA is expected to follow this signal with more detailed supervisory guidance on what AI near-miss reporting must include, particularly for agentic deployments. Firms should watch for updates to the FCA's operational resilience and model risk supervisory statements. They should also monitor any cross-authority coordination with the Prudential Regulation Authority on AI incident standards. The Interagency Revised Guidance on Model Risk Management (OCC Bulletin 2026-13, SR 26-2) from US regulators may also signal the direction of travel for near-miss standards in other jurisdictions. Internationally active firms should monitor whether the FCA's interpretation is adopted by equivalent supervisors in the EU, Singapore, and Hong Kong.