Every time you tap your card to pay for a coffee, you are trusting a rule that nobody in the queue could name. Not a law. A standard. A technical agreement, hammered out years ago in a committee room somewhere, that decided how the chip in your card talks to the reader on the counter. It works so quietly that you have never once had to think about it. And that is precisely the point.
Standards are the plumbing of modern life. You only notice them when they fail, when two systems that should talk to each other refuse to, when the thing that was meant to just work suddenly doesn’t. The rest of the time they are invisible, which is why almost nobody pays attention to who writes them or whose interests they serve.
The UK government has just published a document arguing that this inattention is a mistake. ‘Shaping Tomorrow: The UK’s Digital Standards Strategy (2026 to 2030)’, released by the Department for Science, Innovation and Technology on 17 June 2026, is described as a first of its kind. It sets out how Britain intends to shape the international technical standards that will govern artificial intelligence, cybersecurity, quantum computing, advanced connectivity and semiconductors over the next five years. It is dry. It is bureaucratic. And if you work in financial services, it is quietly one of the more consequential things to land this year.
Let me explain why, starting with the numbers, because the numbers are genuinely striking.
The strategy cites a British Standards Institution study suggesting that around 23% of the UK’s GDP growth since the year 2000 can be attributed to standards. Read that carefully. Not 23% of GDP, but 23% of the growth in it, across a quarter of a century, traced back to shared technical rules that lower production costs and let systems built by different people work together. The digital and technology sector alone contributed an estimated £207 billion in gross value added in 2023, roughly 9% of the entire economy on the government’s own measure. And internationally, a 2025 World Bank report found that nearly 90% of world trade is now shaped by non-tariff measures, most of them linked to standards. In the 1990s that figure was 15%. That is not a gentle drift. That is standards moving from the background of the global economy to something close to its steering wheel.
Here is the line in the document that ought to make anyone in our industry sit up. When the strategy lists the sectors that gain the most economic value from standards, it names three: information and communications technology, healthcare, and financial services. We are on the list. Not as an afterthought, but as one of the biggest beneficiaries of a system most of the people working in it have never given a second’s thought.
And yet financial services is not one of the five priority areas the strategy actually sets out to work on. Those are AI, cybersecurity, advanced connectivity, quantum and semiconductors. So here is the tension worth sitting with. The rules being written are for the technologies. The industries that run on those technologies, ours very much included, inherit whatever gets decided. We do not get a seat at the table where the AI cybersecurity standard is agreed. We just live with the result once it arrives, baked into the software our lenders buy and the tools our networks roll out.
Consider one concrete example the strategy is proud of. A new ETSI standard called EN 304 223, covering the cybersecurity of AI, was shaped with significant input from DSIT and the National Cyber Security Centre. It embeds what the document calls secure-by-design principles and sets baseline security requirements for AI systems across their whole lifecycle. Think about what that means in practice. The next generation of AI tools in mortgage advice, in affordability assessment, in fraud detection, in the automated decisioning that sits behind so much of what lenders now do, will increasingly be built to a security standard that was negotiated in a room none of us were in. When your compliance team eventually asks whether the AI in your process is safe, the honest answer will depend heavily on rules like this one. Rules you did not vote for and probably never read.
This is where the strategy becomes interesting rather than merely worthy. It is making an argument that most of us have not had to confront. Standards are not neutral. The document is refreshingly blunt about this. It notes that some governments around the world are attempting to use digital standards to extend control over emerging technologies, with serious implications for security and interoperability. Whoever shapes the standard shapes the market. A country that gets its national champions’ technology written into the global rulebook gains a first-mover advantage that can last decades. The UK knows this from experience. The GSM standard, which built the entire mobile phone industry, drew heavily on British and European efforts to bring government and industry together. One committee’s decision in the 1980s created a multi-billion pound industry and shaped how the whole world would communicate.
So the government’s ambition is understandable. It wants UK experts embedded in the leadership of these standards bodies, a stronger talent pipeline feeding into them, initiatives like the AI Standards Hub giving British firms a route in. There is a real economic prize here, and the strategy is right that participation matters. Eighty-one percent of businesses surveyed said standards give them a sustained boost to productivity. This is not abstract policy. It is competitiveness.
But there is a quieter lesson in all of this for those of us who advise clients and run regulated businesses rather than sit on international committees. We spend a great deal of energy watching the FCA, and rightly so. Consumer Duty, the regulatory Handbook, the consultation papers, these are the rules we can see, the ones with our name on them. Standards are the other rulebook. The one being written in parallel, largely by engineers and industry bodies rather than regulators, that will increasingly determine what the technology in our sector is even capable of doing. Regulation tells us what we are allowed to do. Standards quietly decide what is possible in the first place.
The strategy makes a point of saying that standards are voluntary, industry-led, and not written into law. That is meant to be reassuring. In some ways it is the opposite. A rule that goes through Parliament gets debated, scrutinised, reported on. A technical standard agreed in an international committee arrives in your business with none of that noise, embedded in a product update, and by the time you notice it, it is already load-bearing.
None of this requires a mortgage broker to start attending ETSI working groups. But it might be worth asking, next time a lender demonstrates their shiny new AI-powered tool, a question that sounds simple and is not. Whose rules is this built to, and who was in the room when they were written? You may find the honest answer is nobody you have ever heard of. And that should be interesting to you, because their decisions are becoming yours.
Source: Shaping Tomorrow: The UK’s Digital Standards Strategy (2026 to 2030), Department for Science, Innovation and Technology, published 17 June 2026. Read it on GOV.UK.