Insights

The EU AI Act is no longer forthcoming legislation. It is law, and its enforcement phases are rolling out through 2026 and 2027. For UK tech companies that develop AI products or sell AI-powered services into the European Union, this creates immediate governance obligations that did not exist two years ago.

If your organisation already holds ISO 27001 certification and is now developing, deploying, or using AI systems, you are in the strongest possible position to integrate ISO 42001 into your existing management system. Both standards follow the same Annex SL structure. That shared backbone means you are not building a second management system from scratch. You are extending the one you already have.

It's been an extremely busy start to the year at Sampson ISO Audit & Consult Ltd — barely a moment to breathe. So I thought it sensible to take stock of what we've achieved, how we've delivered it, and where we want to go for the rest of the year.