The Future of Surveillance: Artificial Intelligence (AI), Accountability, and the Governance Gap

Financial institutions are at a pivotal moment in surveillance. Regulatory expectations are rising, AI capabilities are accelerating, and the old ways of managing conduct risk are under serious strain.

Regulators have expanded their definition of what constitutes a “model,” meaning tools once treated as simple rule engines now fall under formal Model Risk Management (MRM) frameworks. The industry response is not resistance it is a push for proportionality. Firms are building tiered frameworks that apply heavier oversight to adaptive ML models and lighter-touch validation to rules-based systems. But investment scrutiny is intensifying too. Surveillance budgets now compete with broader AI programmes, and compliance necessity alone will not win the argument. Teams must demonstrate clear ROI a difficult task when the primary return is avoiding a fine that may never materialise.

On operating models, the question of where surveillance sits structurally is largely the wrong one. Regulators are not concerned with org chart placement, they want clear policies, defined escalation rights, and evidence that conflicts of interest are managed. What matters most is culture. The most effective models combine genuine proximity to the business with genuine independence in decision-making.

AI is delivering real capability gains in transcription, translation, and behavioural analytics, but limitations are equally real. Code-switching, cultural nuance, and fragmented data all constrain what automated systems can reliably detect. The direction of travel is unified platforms linking communications, voice, and trade data into a single investigative view. Getting there, however, demands serious investment in data infrastructure that technology alone cannot shortcut. Human judgement remains irreplaceable, particularly in nuanced behavioural interpretation.

The firms best positioned for what comes next are those investing equally in technological capability and governance discipline because regulators will demand both.