FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Aipedia: Management consultants
There is no statutory regulator for UK management consultants, but the ICMCI AI Code now sets mandatory AI standards for Certified Management Consultants and public buyers can ask about AI use. Clients still sue for negligent advice, whatever tool produced it.
Part of: AI in Management consultants
In short
UK management consultancy has no statutory regulator, so AI rules come from professional bodies, client contracts and data law. The ICMCI Code of Responsible Use of AI, launched on 4 June 2026, makes human review, client disclosure and confidentiality mandatory standards for individual Certified Management Consultants. Public-sector buyers can ask about AI use in bids under PPN 02/24 and PPN 017. The Deloitte refunds in Australia showed what unchecked AI output in a client report can cost. Professional indemnity insurance usually responds to negligent advice claims, subject to the wording, but there is no compulsory PI minimum.
Generative AI suits much consulting work because so much of it is reading, summarising and writing. Typical uses include desk research and literature reviews, first drafts of options papers and board reports, market sizing and forecasting, financial models built with an AI assistant inside a spreadsheet, coding of survey responses, transcription of stakeholder interviews and data room summaries for due diligence. Some engagements now include designing AI automation for the client itself.
Each of these uses feeds into advice that a client relies on to spend money, restructure a workforce, buy a company or bid for funding. That is why the question of who checked the output matters so much when something goes wrong.
Management consultancy is not a regulated profession in the UK. No body controls entry or sets mandatory practice rules for the whole profession. The main bodies are:
Underneath all of this sits the common law. Consultants owe contractual and tortious duties of reasonable skill and care. The AI codes do not change that standard, but they show what a reasonable consultant is now expected to check. Our regulatory framework guide covers the wider picture.
The ICMCI Code of Responsible Use of Artificial Intelligence, version 1.0, was adopted by the ICMCI Board in May 2026 and launched on 4 June 2026. Section 3 makes its principles mandatory professional standards for individual CMCs. Firms and member institutes are expected to align their policies in proportion to size and risk. Key points:
Whether the IC or CMI will adopt the Code for UK CMC or Chartered Management Consultant holders has not been confirmed. Even so, a claimant's expert may point to it as evidence of good practice.
PPN 02/24 (March 2024) does not stop suppliers using AI to write bids. It lets authorities ask about AI use through unscored Annex B questions, warns that AI-assisted tenders may contain plausible but false statements, and asks buyers to stop their confidential data being used to train AI. PPN 017, published on 17 February 2025, restates this for Procurement Act 2023 procurements started on or after 24 February 2025 and is mandatory for central government departments, executive agencies and NDPBs. Contract terms may bar using buyer data to train AI without written approval.
Consultants who put client personal data into AI tools usually act as processors or controllers under UK GDPR. Section 80 of the Data (Use and Access) Act 2025 replaced the automated decision-making rules with new Articles 22A to 22D from 5 February 2026 (SI 2026/82). Under Article 22C, significant decisions based solely on automated processing need safeguards including information, representations, human intervention and a right to contest. This matters when consultants design HR, credit or operational decision systems. The ICO's statutory code on AI and automated decision-making is still to come.
The most visible failure so far is fabricated material in client reports. In October 2025 Deloitte agreed to partially refund the Australian Department of Employment and Workplace Relations for a report costing about A$440,000 that contained a fabricated quote attributed to a court judgment and references to non-existent papers; CFO Dive reports the refund as over A$97,000. In November 2025 a Deloitte health workforce plan for Newfoundland and Labrador was reported to contain citations that appear not to exist. Both are news reports, not court decisions, and no UK court or disciplinary decision against a consultant for AI misuse was found.
Other risks are less visible: flawed forecasts relied on by lenders, client data leaking into benchmarking, discriminatory restructuring advice, misread surveys, spreadsheet errors and AI programmes that never deliver.
No statutory or professional-body PI minimum for management consultants was found. Requirements come from client contracts and frameworks. PI wordings for consultants may be written on a civil liability basis and may not mention AI; if so, cover for AI-assisted negligence usually depends on the general insuring clause, subject to the policy terms. Some insurers may add AI exclusions or affirmative AI wording. Fee refunds, contractual promises and data breaches may sit outside PI or need separate cover. Our management consultants PI guide and guide to AI mistakes and PI explain more.
Apex arranges PI for management consultants. A broker can review your cover and how your policy treats AI-assisted research, modelling and reports before your next renewal.
No. There is no statutory regulator and no body controls entry. Professional bodies such as the Institute of Consulting and ICMCI set codes for their members, and the common law duty of reasonable skill and care applies to every consultant whether or not they belong to a body.
Section 3 makes its principles mandatory professional standards for individual Certified Management Consultants from its launch in June 2026. Firms and institutes are expected to align proportionately. For non-members it is not binding, but it may be cited as evidence of what a careful consultant does.
Under ICMCI 3.3 and 7.1, CMCs must tell clients when AI materially shapes analysis, recommendations or deliverables. Public-sector buyers may also ask under PPN 02/24 and PPN 017. Clear engagement terms are good practice for everyone.
Often, if the claim alleges negligent professional services and the policy has no relevant AI exclusion, subject to the wording. Fee refunds, contractual guarantees and data breaches may be treated differently, so check the policy and tell your insurer how you use AI.
Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.
Start a PI quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.
