One of the important implications, from a Strategy perspective, is the increase in personal liability for decision making - and increased requirements for Governance.    We are moving (have moved !) from a situation where Regulatory Compliance was a de minimis 'hygiene factor' to one where Regulatory fines (and reputational damage) have become existential threats.    Monzo had a strategy - but AML fines, and now challenges with funding may threaten its future existence...  HP suffered from the BSkyB case - and the fines led to them having to re-state their accounts... and arguably to the eventual break-up of the company...    Firms have just started to get over GDPR and Schrems II, and now there are proposals for Regulation of AI with even higher levels of potential fines.    What should you be doing ?    How should you be doing it ?    If you are not thinking about this yet - then you should be !