North American AI Compliance Shifts: What UK Professional Services Need to Know

The regulatory landscape for artificial intelligence in North America is changing at pace, and the ripple effects extend well beyond US and Canadian borders. For UK professional services firms — accountants, solicitors, HR consultancies, and marketing agencies — with clients, operations, or technology supply chains touching North America, these developments carry direct compliance implications. Here is what is happening, why it matters, and what you should be doing about it.

Canada Abandons Its Landmark AI Bill — But Compliance Obligations Remain

Canada's proposed Artificial Intelligence and Data Act (AIDA), which formed part of Bill C-27, lapsed in January 2025 without becoming law. This might appear to signal a retreat from AI regulation, but the reality is more nuanced. The Canadian government's "AI for All" strategy, unveiled in June 2026, makes clear that the preferred approach is now to address AI risks through existing and amended legislation rather than a single comprehensive statute.

The practical consequence is that AI compliance in Canada is becoming distributed across multiple legal frameworks rather than consolidated in one place. The newly introduced Bill C-36, the Protecting Privacy and Consumer Data Act, proposes significant updates to PIPEDA, including enhanced obligations for privacy management frameworks, data sovereignty requirements, and — critically for professional services — specific rules around automated decision-making. Individuals will have the right to request an explanation of significant automated decisions affecting them. If your firm uses AI tools to screen job applicants, assess client creditworthiness, or generate client-facing recommendations, these provisions are relevant to your operations, regardless of where your firm is headquartered.

Quebec's Law 25 is already in force and includes its own provisions on automated decision-making and profiling. The Office of the Privacy Commissioner of Canada is actively investigating AI-enabled systems, including chatbots with the potential to generate deepfakes. Firms that have deployed AI-assisted client communication tools should be reviewing those systems now.

The United States: A Patchwork You Cannot Ignore

Federal AI legislation in the US remains fragmented. A discussion draft of the "Great American Artificial Intelligence Act of 2026" has been circulating, proposing federal preemption of state-level AI model development laws and introducing transparency and incident reporting requirements for large frontier model developers. However, this has not yet passed, and state-level activity has not waited.

By July 2026, more than half of US states had enacted over 100 new AI laws between them. For professional services firms operating across multiple US states or servicing US clients, this creates a genuinely complex compliance environment. California's Transparency in Frontier AI Act (SB 53) is now in effect, requiring risk frameworks and incident reporting for large frontier models. Illinois has passed comparable legislation mandating annual third-party audits. New York City's Local Law 144 continues to require bias audits for any automated employment decision tool — a direct concern for HR consultancies and any firm using AI in recruitment or performance management.

California's AB 2013 and SB 942 introduce transparency requirements around training data and mandate disclosure of AI-generated content through watermarking. Marketing agencies producing content for US audiences — or using AI to do so — need to assess whether their current practices satisfy these disclosure obligations.

The FTC's Sharpened Enforcement Posture

The Federal Trade Commission is the enforcement body UK firms are most likely to encounter when operating in the US market, and its approach to AI is hardening. Since 2024, the FTC has filed at least 13 cases targeting deceptive AI marketing claims, many directed at business-to-business representations. The term "AI-washing" — making inflated or misleading claims about AI capabilities — is now an active enforcement priority, not merely a reputational risk.

The FTC's proposed policy statement issued in July 2026 deserves particular attention. It warns that intentionally altering AI outputs away from accuracy — even where a business believes it is complying with another jurisdiction's requirements — may constitute a deceptive practice under Section 5 of the FTC Act. The implication is stark: firms cannot simply adjust AI outputs to suit one regulatory environment and assume that adjustment will be acceptable under US federal consumer protection law. Clear disclosure of any such modifications will be required.

For accountancy firms, legal practices, and consultancies using AI-assisted analysis or advice generation, this creates a genuine tension that requires legal and compliance scrutiny, not a marketing fix.

AI in the Courtroom: A Growing Liability

Both Canada and the US are seeing a significant increase in AI-related litigation. In Canada, references to AI in court decisions more than doubled between 2021 and 2024. Across North America, there is an escalating and deeply concerning pattern of AI-fabricated legal citations appearing in court submissions. In 2025 alone, 87 court decisions addressed this issue; in the first half of 2026, 74 further decisions did so, resulting in sanctions against practitioners.

This is not a distant technology problem. Any solicitor, barrister, or legal professional using AI research or drafting tools needs robust internal protocols to verify every citation, every statutory reference, and every case summary generated by AI before it goes anywhere near a court document. The same discipline applies to accountants and consultants producing AI-assisted reports that may subsequently be relied upon in regulatory or legal proceedings. The reputational and professional indemnity exposure here is material.

What This Means If You Operate Internationally

The combined effect of these developments creates several immediate obligations for UK professional services firms with North American exposure.

First, map your AI touchpoints. Identify every AI tool your firm uses that processes client data, generates client-facing outputs, or informs consequential decisions. Understand where that data flows geographically, and which jurisdictions' laws therefore apply.

Second, audit your automated decision-making processes. Both Canadian federal proposals and existing Quebec law, as well as multiple US state statutes, impose explanation and transparency requirements. Your firm needs to know which decisions are being made or materially influenced by AI systems, and whether individuals have appropriate rights in relation to those decisions.

Third, review your AI marketing and product claims. The FTC's enforcement activity is not limited to technology companies. Professional services firms making AI capability claims to US clients or prospects face the same scrutiny.

Fourth, implement verification protocols for AI-generated legal and professional content. The pattern of fabricated citations leading to sanctions is a professional conduct issue as much as a technology one. Internal review procedures must be in place before AI-assisted work product leaves your firm.

Fifth, track state-level law. If your firm operates across multiple US states or services clients in several states, you need a mechanism for monitoring legislative changes that may affect your compliance obligations on an ongoing basis. A static compliance review conducted once will rapidly become obsolete.

Stay Ahead of a Landscape That Is Moving Quickly

The North American AI regulatory environment is not settling — it is accelerating. Firms that treat AI compliance as a one-time project rather than an ongoing programme will find themselves exposed as new laws take effect and enforcement intensifies.

Ops Intel helps professional services firms understand their AI compliance obligations across multiple jurisdictions, identify gaps in their current frameworks, and build practical, proportionate responses that work in the real world. If you are unsure where your firm stands, the right time to find out is before a regulator or a court makes that determination for you.

Get in touch with Ops Intel today to arrange a compliance consultation.