The U.K. government on Wednesday published recommendations for the artificial intelligence industry, outlining an all-encompassing approach for regulating the technology at a time when it has reached frenzied levels of hype.
In a white paper to be put forward to Parliament, the Department for Science, Innovation and Technology (DSIT) will outline five principles it wants companies to follow. They are: safety, security and robustness; transparency and explainability; fairness; accountability and governance; and contestability and redress.
related investing news
15 hours ago
Rather than establishing new regulations, the government is calling on regulators to apply existing regulations and inform companies about their obligations under the white paper.
It has tasked the Health and Safety Executive, the Equality and Human Rights Commission, and the Competition and Markets Authority with coming up with “tailored, context-specific approaches that suit the way AI is actually being used in their sectors.”
“Over the next twelve months, regulators will issue practical guidance to organisations, as well as other tools and resources like risk assessment templates, to set out how to implement these principles in their sectors,” the government said.
“When parliamentary time allows, legislation could be introduced to ensure regulators consider the principles consistently.”
Maya Pindeus, CEO and co-founder of AI startup Humanising Autonomy, said the government’s move marked a “first step” toward regulating AI.
“There does need to be a bit of a stronger narrative,” she said. “I hope to see that. This is kind of planting the seeds for this.”
However, she added, “Regulating technology as technology is incredibly difficult. You want it to advance; you don’t want to hinder any advancements when it impacts us in certain ways.”
The arrival of the recommendations is timely. ChatGPT, the popular AI chatbot developed by the Microsoft-backed company OpenAI, has driven a wave of demand for the technology, and people are using the tool for everything from penning school essays to drafting legal opinions.
ChatGPT has already become one of the fastest-growing consumer applications of all time, attracting 100 million monthly active users as of February. But experts have raised concerns about the negative implications of the technology, including the potential for plagiarism and discrimination against women and ethnic minorities.
AI ethicists are worried about biases in the data that trains AI models. Algorithms have been shown to have a tendency of being skewed in favor men — especially white men — putting women and minorities at a disadvantage.
Fears have also been raised about the possibility of jobs being lost to automation. On Tuesday, Goldman Sachs warned that as many as 300 million jobs could be at risk of being wiped out by generative AI products.
The government wants companies that incorporate AI into their businesses to ensure they provide an ample level of transparency about how their algorithms are developed and used. Organizations “should be able to communicate when and how it is used and explain a system’s decision-making process in an appropriate level of detail that matches the risks posed by the use of AI,” the DSIT said.
Companies should also offer users a way to contest rulings taken by AI-based tools, the DSIT said. User-generated platforms like Facebook, TikTok and YouTube often use automated systems to remove content flagged up as being against their guidelines.
AI, which is believed to contribute £3.7 billion ($4.6 billion) to the U.K. economy each year, should also “be used in a way which complies with the UK’s existing laws, for example the Equality Act 2010 or UK GDPR, and must not discriminate against individuals or create unfair commercial outcomes,” the DSIT added.
On Monday, Secretary of State Michelle Donelan visited the offices of AI startup DeepMind in London, a government spokesperson said.
“Artificial intelligence is no longer the stuff of science fiction, and the pace of AI development is staggering, so we need to have rules to make sure it is developed safely,” Donelan said in a statement Wednesday.
“Our new approach is based on strong principles so that people can trust businesses to unleash this technology of tomorrow.”
Lila Ibrahim, chief operating officer of DeepMind and a member of the U.K.’s AI Council, said AI is a “transformational technology,” but that it “can only reach its full potential if it is trusted, which requires public and private partnership in the spirit of pioneering responsibly.”
“The UK’s proposed context-driven approach will help regulation keep pace with the development of AI, support innovation and mitigate future risks,” Ibrahim said.
Not everyone is convinced by the U.K. government’s approach to regulating AI. John Buyers, head of AI at the law firm Osborne Clarke, said the move to delegate responsibility for supervising the technology among regulators risks creating a “complicated regulatory patchwork full of holes.”
“The risk with the current approach is that an problematic AI system will need to present itself in the right format to trigger a regulator’s jurisdiction, and moreover the regulator in question will need to have the right enforcement powers in place to take decisive and effective action to remedy the harm caused and generate a sufficient deterrent effect to incentivise compliance in the industry,” Buyers told CNBC via email.
By contrast, the EU has proposed a “top down regulatory framework” when it comes to AI, he added.
Spotify said Monday it paid more than $100 million to podcast publishers and podcasters worldwide in the first quarter of 2025.
The figure includes all creators on the platform across all formats and agreements, including the platform’s biggest fish, Joe Rogan, Alex Cooper and Theo Von, the company said.
Rogan, host of “The Joe Rogan Experience,” Cooper of “Call Her Daddy” and “This Past Weekend w/ Theo Von” were among the top podcasts on Spotify globally in 2024.
Rogan and Cooper’s exclusivity deals with Spotify have ended, and while Rogan signed a new Spotify deal last year worth up to $250 million, including revenue sharing and the ability to post on YouTube, Cooper inked a SiriusXM deal in August.
Read more CNBC tech news
Even when shows are no longer exclusive to Spotify, they are still uploaded to the platform and qualify for the Spotify Partner Program, which launched in January in the U.S., U.K., Canada and Australia.
The program allows creators to earn revenue every time an ad monetized by Spotify plays in the episode, as well as revenue when Premium subscribers watch dynamic ads on videos.
Competing platform Patreon said it paid out over $472 million to podcasters from over 6.7 million paid memberships in 2024.
YouTube’s payouts are massive by comparison but include more than just podcasts. The company said it paid $70 billion to creators between 2021 and 2024 with payouts rising each year, according to YouTube CEO Neal Mohan.
Spotify reports first-quarter earnings on Tuesday.
The deal is set to close by the first quarter of fiscal year 2026.
“By extending our AI security capabilities to include Protect AI’s innovative solutions for Securing for AI, businesses will be able to build AI applications with comprehensive security,” said Anand Oswal, senior vice president and general manager of network security at Palo Alto Networks, in a release.
Palo Alto has been steadily bolstering its artificial intelligence systems to confront increasingly sophisticated cyber threats. The use of rapidly built ecosystems of AI models by large enterprises and government organizations has created new vulnerabilities. The company said those risks require purpose-built defenses beyond conventional cybersecurity.
Read more CNBC tech news
The acquisition would fold Protect AI’s solutions and team into Palo Alto’s newly announced Prisma AIRS platform. Palo Alto said Protect AI has established itself as a key player in what it called a “critical new area of security.”
Protect AI’s CEO Ian Swanson said joining Palo Alto would allow the company to “scale our mission of making the AI landscape more secure for users and organizations of all sizes.”
The company’s stock price is up 23% in the past year lifting its market cap close to $120 billion. Palo Alto reports third-quarter earnings on May 21.
From left, Veza founders Rob Whitcher, Tarun Thakur and Maohua Lu.
Veza
Tech giants like Google, Amazon, Microsoft and Nvidia have captured headlines in recent years for their massive investments in artificial intelligence startups like OpenAI and Anthropic.
But when it comes to corporate investing by tech companies, cloud software vendors are getting aggressive as well. And in some cases they’re banding together.
Veza, whose software helps companies manage the various internal technologies that employees can access, has just raised $108 million in a financing round that included participation from software vendors Atlassian, Snowflake and Workday.
New Enterprise Associates led the round, which values Veza at just over $800 million, including the fresh capital.
For two years, Snowflake’s managers have used Veza to check who has read and write access, Harsha Kapre, director of the data analytics software company’s venture group told CNBC. It sits alongside a host of other cloud solutions the company uses.
“We have Workday, we have Salesforce — we have all these things,” Kapre said. “What Veza really unlocks for us is understanding who has access and determining who should have access.”
Kapre said that “over-provisioning,” or allowing too many people access to too much stuff, “raises the odds of an attack, because there’s just a lot of stuff that no one is even paying attention to.”
With Veza, administrators can check which employees and automated accounts have authorization to see corporate data, while managing policies for new hires and departures. Managers can approve or reject existing permissions in the software.
Veza says it has built hooks into more than 250 technologies, including Snowflake.
The funding lands at a challenging time for traditional venture firms. Since inflation started soaring in late 2021 and was followed by rising interest rates, startup exits have cooled dramatically, meaning venture firms are struggling to generate returns.
Wall Street was banking on a revival in the initial public offering market with President Donald Trump’s return to the White House, but the president’s sweeping tariff proposals led several companies to delay their offerings.
That all means startup investors have to preserve their cash as well.
In the first quarter, venture firms made 7,551 deals, down from more than 11,000 in the same quarter a year ago, according to a report from researcher PitchBook.
Corporate venture operates differently as the capital comes from the parent company and many investments are strategic, not just about generating financial returns.
Atlassian’s standard agreement asks that portfolio companies disclose each quarter the percentage of a startup’s customers that integrate with Atlassian. Snowflake looks at how much extra product consumption of its own technology occurs as a result of its startup investments, Kapre said, adding that the company has increased its pace of deal-making in the past year.
‘Sleeping industry’
Within the tech startup world, Veza is also in a relatively advantageous spot, because the proliferation of cyberattacks has lifted the importance of next-generation security software.
Veza’s technology runs across a variety of security areas tied to identity and access. In access management, Microsoft is the leader, and Okta is the challenger. Veza isn’t directly competing there, and is instead focused on visibility, an area where other players in and around the space lack technology, said Brian Guthrie, an analyst at Gartner.
Tarun Thakur, Veza’s co-founder and CEO, said his company’s software has become a key part of the ecosystem as other security vendors have started seeing permissions and entitlements as a place to gain broad access to corporate networks.
“We have woken up a sleeping industry,” Thakur, who helped start the company in 2020, said in an interview.
Thakur’s home in Los Gatos, California, doubles as headquarters for the startup, which employs 200 people. It isn’t disclosing revenue figures but says sales more than doubled in the fiscal year that ended in January. Customers include AMD, CrowdStrike and Intuit.
Guthrie said enterprises started recognizing that they needed stronger visibility about two years ago.
“I think it’s because of the number of identities,” he said. Companies realized they had an audit problem or “an account that got compromised,” Guthrie said.
AI agents create a new challenge. Last week Microsoft published a report that advised organizations to figure out the proper ratio of agents to humans.
Veza is building enhancements to enable richer support for agent identities, Thakur said. The new funding will also help Veza expand in the U.S. government and internationally and build more integrations, he said.
Peter Lenke, head of Atlassian’s venture arm, said his company isn’t yet a paying Veza client.
“There’s always potential down the road,” he said. Lenke said he heard about Veza from another investor well before the new round and decided to pursue a stake when the opportunity arose.
Lenke said that startups benefit from Atlassian investments because the company “has a large footprint” inside of enterprises.
“I think there’s a great symbiotic match there,” he said.