Building societies — member-owned mutuals — operate under strong conduct regulation, which shapes how they can use AI. Here’s a practical view for 2026. (dgm implements osFoundry as an independent partner; regulatory responsibility stays with the society.)

Where AI helps

High-value use cases for a building society:

  • member service and contact-centre support;
  • mortgage and savings document processing;
  • complaints handling;
  • fraud and AML monitoring;
  • vulnerable-customer identification; and
  • adviser knowledge retrieval.

All framed against Consumer Duty “good outcomes” — AI accelerates, staff keep judgement.

The regulation

Building societies are dual-regulated by the PRA (prudential) and FCA (conduct). The key frameworks for AI:

  • Consumer Duty (since July 2023) — the primary lens for customer-facing AI;
  • SM&CR — named senior-manager accountability; and
  • SYSC — governance, outsourcing and operational resilience.

The FCA has no AI-specific rules — it applies these existing frameworks.

Consumer Duty is the lens

Firms must act in good faith, avoid foreseeable harm, and deliver good outcomes. So AI must not produce unfair or discriminatory results, and the society must evidence good member outcomes from AI-driven processes. This is the central consideration for member-facing AI.

Accountability is human

Under SM&CR, named senior managers are accountable — including for AI. AI providers are managed as an outsourcing/operational-resilience risk. Accountability can’t be delegated to the algorithm, so keep humans on significant decisions.

Where osFoundry and dgm fit

dgm builds Consumer-Duty-aware AI on osFoundry: fairness and bias-awareness, explainability, audit trails to evidence outcomes, and human oversight for significant decisions. Data control via self-hosting or an EU region (it publishes US/EU/JP regions, not a UK one) and bring-your-own-key address the outsourcing/resilience and data angles. (See our FCA AI approach guide.)

dgm is an independent integration partner with zero integrations so far — no client claims. Regulatory responsibility stays with the society. To scope a Consumer-Duty-aware AI project, book a consultation with dgm. Not regulatory advice.