AI's Compliance Mandate: Firms Shift From Awareness to Action

WASHINGTON, DC – July 29, 2026 – The era of treating artificial intelligence as a future-state concern is officially over. A landmark industry survey reveals that AI has not just become a priority for investment advisers; it has become the single most dominant compliance challenge in over two decades, forcing firms to move from passive awareness to urgent, decisive action.

According to the 2026 Investment Management Compliance Testing (IMCT) Survey, co-released by the Investment Adviser Association (IAA), ACA Group, and Yuter Compliance Consulting (YCC), a staggering 85% of firms now identify AI as their top compliance topic. This figure represents a 28-percentage-point surge from 2025 and marks the most dominant response for any single topic in the survey's 21-year history. The data paints a clear picture of an industry in the midst of a profound operational and strategic pivot.

From Watchlist to Work Plan: The Great AI Pivot

For years, AI has lingered on compliance watchlists. Now, it has firmly landed on the work plan. The survey, which polled 411 investment adviser firms, shows that this shift is not merely a change in sentiment but a tangible reallocation of resources. A full 72% of firms reported increasing their compliance testing around AI—the largest year-over-year jump for any topic ever tracked by the survey.

This follows a wave of adoption, with 80% of firms now formally using AI tools. The majority are proceeding with caution, with 70% restricting use to internal applications like drafting communications or summarizing research. In response, firms have rapidly erected foundational guardrails: 86% now have acceptable use policies in place, a significant climb from 64% in fall 2025, and an equal percentage now maintain a formal inventory of AI tools.

"In 21 years of this survey, we have never seen a single topic command this kind of separation from everything else on the agenda," said Carlo di Florio, President of ACA Group. "What makes this year's results particularly meaningful is that firms are no longer just naming AI as a concern; they are allocating compliance resources, standing up governance committees, and increasing testing."

The Governance Gap: Navigating Uncharted Regulatory Waters

While the industry's sprint to adopt AI policies is impressive, the survey exposes critical gaps between policy and practice. The establishment of robust, defensible governance frameworks remains a work in progress. Only 59% of firms have established a formal AI governance committee, and the numbers drop further when it comes to specific oversight mechanisms.

Critically, less than half of firms (48%) have a formal policy for human-in-the-loop (HITL) oversight of AI outputs. Even fewer (37%) have procedures for testing and validating those outputs for accuracy and bias. This gap is particularly concerning as regulators like the SEC and FINRA have made it clear that firms cannot delegate their fiduciary duties to an algorithm. The risk of AI "hallucinations" or biased results leading to poor client outcomes remains a primary concern.

Furthermore, the interconnected nature of modern finance exposes another vulnerability: third-party risk. A mere 30% of firms have policies governing their use of third-party AI, and only 7% have a process to assess risks from the fourth parties used by their key vendors. This is a significant blind spot, as regulators hold firms accountable for their entire supply chain.

This scramble for governance is unfolding under an watchful regulatory eye. While the SEC has yet to issue specific AI rules, it has already taken enforcement action. The 2024 cases against Delphia and Global Predictions for "AI-washing"—making misleading claims about their AI use—serve as a clear warning that regulators demand substance, not just marketing sizzle. The message is clear: firms must be able to prove what they claim.

"Investment advisers are taking the challenge of AI governance seriously, and this survey captures that shift in real time," said Karen Barr, President & CEO of the IAA. "At the same time, the consistency we see in SEC examination focus areas – advertising, books and records, conflicts of interest – is a reminder that firms must address emerging technology risks while continuing to deliver on their core compliance obligations."

The New Compliance Officer: More With Less, But Smarter

The dual challenge described by Barr falls squarely on the shoulders of compliance departments, which continue to operate under the mantra of "doing more with less." The survey shows that compliance budgets and staffing have remained largely flat, with 45% of firms employing between two and five compliance staff. Nearly 60% of Chief Compliance Officers (CCOs) wear multiple hats, frequently combining the role with that of CFO or General Counsel.

In this environment, the role of the compliance professional is evolving. AI is not just a new risk to be managed; it is a tool that can augment their capabilities. The focus is shifting from manual, high-volume tasks to strategic oversight, deep-dive investigations, and supervising the AI models themselves. This requires a new skillset grounded in AI literacy, data analytics, and model governance.

Technology partners are stepping in to fill this gap. For instance, ACA Group, a survey co-sponsor and a firm recognized as a top fintech company for its RegTech solutions, has integrated AI into its ComplianceAlpha® platform to automate tasks like marketing reviews and employee trade surveillance, freeing up compliance officers to focus on higher-risk areas.

Shifting Priorities: AI's Rise and ESG's Recalibration

The intense focus on AI is causing a recalibration of other compliance priorities. While perennial SEC exam topics like Advertising and Marketing (57%), Books and Records (53%), and Conflicts of Interest (53%) remain top-of-mind, other areas are seeing a shift in attention.

Most notably, ESG was the rare category to see a decrease in focus, with 15% of firms reducing their compliance testing in the area. This decline doesn't necessarily signal a lack of interest but rather a strategic pause in the face of regulatory fragmentation, data reliability challenges, and an evolving definition of what constitutes a sustainable investment. With the immense resource demands of building an AI governance program from the ground up, some firms appear to be reallocating resources from the uncertain terrain of ESG to the urgent and rapidly materializing risks of AI.

Ultimately, the 2026 IMCT survey captures a pivotal moment for the investment management industry—one where a nascent technology has become an immediate and unavoidable strategic imperative.

"This year's data tells a clear story: AI has moved from the watchlist to the work plan," concluded Amy Yuter, Managing Principal of Yuter Compliance Consulting. "Firms are focused on drafting policies, forming governance committees, and expanding testing programs as regulatory scrutiny intensifies. The Survey gives compliance teams the clarity they need to build practical, business-aligned frameworks."