Matt Berryman
@matt.berryman.social
Payments guy turned writer. Dad x3. Likes CrossFit, bikes & coffee. Writes about trust, tech, and the cost of friction at @txnintel.
Reposted by Matt Berryman
We laugh about it now but that night took five years off my life. God love the medical staff of Cyprus
November 1, 2025 at 7:53 PM
We laugh about it now but that night took five years off my life. God love the medical staff of Cyprus
Full analysis: transactionintelligence.net/uk-age-chec...
UK Age Checks: How a Win Became a VPN Marketing Campaign
Politicians love declaring victory. A new law passes, the metrics move in the right direction, and success is proclaimed. But in complex systems, the first metric to move is rarely the one that matters most.
transactionintelligence.net
August 22, 2025 at 10:09 AM
Full analysis: transactionintelligence.net/uk-age-chec...
This matters for AI regulation. The EU's prescriptive approach (defining what AI must be) risks the same trap. The US prohibition model (defining what AI mustn't do) maintains adaptability.
In digital markets, second-order thinking isn't optional — it's survival.
In digital markets, second-order thinking isn't optional — it's survival.
August 22, 2025 at 10:09 AM
This matters for AI regulation. The EU's prescriptive approach (defining what AI must be) risks the same trap. The US prohibition model (defining what AI mustn't do) maintains adaptability.
In digital markets, second-order thinking isn't optional — it's survival.
In digital markets, second-order thinking isn't optional — it's survival.
Now UK users route their data through opaque overseas VPN providers. Remember Facebook's Onavo? That "privacy" VPN that secretly monitored competitors for acquisition targets?
That's who people trust with their browsing now.
That's who people trust with their browsing now.
August 22, 2025 at 10:09 AM
Now UK users route their data through opaque overseas VPN providers. Remember Facebook's Onavo? That "privacy" VPN that secretly monitored competitors for acquisition targets?
That's who people trust with their browsing now.
That's who people trust with their browsing now.
When seat-belt laws came in (1983), compliance hit 90% within days. The London Congestion Charge (2003) cut traffic 15% in month one.
These worked because compliance became easier than resistance.
Age-verification did the opposite. It taught millions to vanish online.
These worked because compliance became easier than resistance.
Age-verification did the opposite. It taught millions to vanish online.
August 22, 2025 at 10:09 AM
When seat-belt laws came in (1983), compliance hit 90% within days. The London Congestion Charge (2003) cut traffic 15% in month one.
These worked because compliance became easier than resistance.
Age-verification did the opposite. It taught millions to vanish online.
These worked because compliance became easier than resistance.
Age-verification did the opposite. It taught millions to vanish online.
Sustainable AI can’t be an afterthought. #GreenAI #ResponsibleAI
July 24, 2025 at 8:07 AM
Sustainable AI can’t be an afterthought. #GreenAI #ResponsibleAI
6/ 📊 As the race for ever-larger models continues, it’s time we ask:
Can we innovate efficiently; not just intelligently?
Can we innovate efficiently; not just intelligently?
July 24, 2025 at 8:07 AM
6/ 📊 As the race for ever-larger models continues, it’s time we ask:
Can we innovate efficiently; not just intelligently?
Can we innovate efficiently; not just intelligently?
5/ 🔍 Why it matters:
Most AI labs don’t disclose this info. Mistral’s transparency sets a precedent but also makes the case for environmental reporting standards in AI.
Most AI labs don’t disclose this info. Mistral’s transparency sets a precedent but also makes the case for environmental reporting standards in AI.
July 24, 2025 at 8:07 AM
5/ 🔍 Why it matters:
Most AI labs don’t disclose this info. Mistral’s transparency sets a precedent but also makes the case for environmental reporting standards in AI.
Most AI labs don’t disclose this info. Mistral’s transparency sets a precedent but also makes the case for environmental reporting standards in AI.
4/ 🪨 Material Footprint
Training also used 660 kg antimony equivalent—a proxy for electronic waste and heavy metal impact.
That’s a weighty externality for digital progress.
Training also used 660 kg antimony equivalent—a proxy for electronic waste and heavy metal impact.
That’s a weighty externality for digital progress.
July 24, 2025 at 8:07 AM
4/ 🪨 Material Footprint
Training also used 660 kg antimony equivalent—a proxy for electronic waste and heavy metal impact.
That’s a weighty externality for digital progress.
Training also used 660 kg antimony equivalent—a proxy for electronic waste and heavy metal impact.
That’s a weighty externality for digital progress.
3/💧 Water Usage
It consumed 281,000 m³ of water—that’s enough to supply ~3,700 people for a full year.
Data centres and model training are thirsty.
It consumed 281,000 m³ of water—that’s enough to supply ~3,700 people for a full year.
Data centres and model training are thirsty.
July 24, 2025 at 8:07 AM
3/💧 Water Usage
It consumed 281,000 m³ of water—that’s enough to supply ~3,700 people for a full year.
Data centres and model training are thirsty.
It consumed 281,000 m³ of water—that’s enough to supply ~3,700 people for a full year.
Data centres and model training are thirsty.
2/ 📦 CO₂ Emissions
Training Large 2 generated 20,400 tonnes of CO₂e—roughly equivalent to the annual emissions of 4,300+ petrol cars.
[Ref: mistral.ai/news/mistra...]
Training Large 2 generated 20,400 tonnes of CO₂e—roughly equivalent to the annual emissions of 4,300+ petrol cars.
[Ref: mistral.ai/news/mistra...]
July 24, 2025 at 8:07 AM
2/ 📦 CO₂ Emissions
Training Large 2 generated 20,400 tonnes of CO₂e—roughly equivalent to the annual emissions of 4,300+ petrol cars.
[Ref: mistral.ai/news/mistra...]
Training Large 2 generated 20,400 tonnes of CO₂e—roughly equivalent to the annual emissions of 4,300+ petrol cars.
[Ref: mistral.ai/news/mistra...]
12/
Full analysis including what this means for infrastructure governance, why Internal Audit's scope gap proved fatal, and lessons for boards:
transactionintelligence.net/vocalink-bo...
Yesterday's Monzo deep-dive: transactionintelligence.net/monzo-bucki...
/end
Full analysis including what this means for infrastructure governance, why Internal Audit's scope gap proved fatal, and lessons for boards:
transactionintelligence.net/vocalink-bo...
Yesterday's Monzo deep-dive: transactionintelligence.net/monzo-bucki...
/end
Monzo's £21 Million Fine: A Systems-Thinking Post-Mortem
Monzo's £21 million FCA fine reveals a fundamental truth about scaling: product engines grow exponentially while compliance scales linearly. When growth and risk controls diverge, you're not building a business—you're building a time bomb.
transactionintelligence.net
July 9, 2025 at 2:55 PM
12/
Full analysis including what this means for infrastructure governance, why Internal Audit's scope gap proved fatal, and lessons for boards:
transactionintelligence.net/vocalink-bo...
Yesterday's Monzo deep-dive: transactionintelligence.net/monzo-bucki...
/end
Full analysis including what this means for infrastructure governance, why Internal Audit's scope gap proved fatal, and lessons for boards:
transactionintelligence.net/vocalink-bo...
Yesterday's Monzo deep-dive: transactionintelligence.net/monzo-bucki...
/end
11/
For every board member and risk professional: The most dangerous phrase in any boardroom isn't "I don't know"—it's "I thought I knew."
Time to ask: What critical reports are sitting in someone's inbox right now, deemed too uncomfortable to escalate?
For every board member and risk professional: The most dangerous phrase in any boardroom isn't "I don't know"—it's "I thought I knew."
Time to ask: What critical reports are sitting in someone's inbox right now, deemed too uncomfortable to escalate?
July 9, 2025 at 2:55 PM
11/
For every board member and risk professional: The most dangerous phrase in any boardroom isn't "I don't know"—it's "I thought I knew."
Time to ask: What critical reports are sitting in someone's inbox right now, deemed too uncomfortable to escalate?
For every board member and risk professional: The most dangerous phrase in any boardroom isn't "I don't know"—it's "I thought I knew."
Time to ask: What critical reports are sitting in someone's inbox right now, deemed too uncomfortable to escalate?
10/
The lesson? In complex organisations, having three lines of defence means nothing if they don't talk to each other.
Having escalation policies means nothing if the culture punishes bad news.
Having a Board means nothing if they only see what people want them to see.
The lesson? In complex organisations, having three lines of defence means nothing if they don't talk to each other.
Having escalation policies means nothing if the culture punishes bad news.
Having a Board means nothing if they only see what people want them to see.
July 9, 2025 at 2:55 PM
10/
The lesson? In complex organisations, having three lines of defence means nothing if they don't talk to each other.
Having escalation policies means nothing if the culture punishes bad news.
Having a Board means nothing if they only see what people want them to see.
The lesson? In complex organisations, having three lines of defence means nothing if they don't talk to each other.
Having escalation policies means nothing if the culture punishes bad news.
Having a Board means nothing if they only see what people want them to see.
9/
This comes ONE DAY after Monzo's £21m fine where Buckingham Palace was used as a registered address.
Two days. Two fines. £33 million. Same pattern:
Critical information that never reached the boardroom.
This comes ONE DAY after Monzo's £21m fine where Buckingham Palace was used as a registered address.
Two days. Two fines. £33 million. Same pattern:
Critical information that never reached the boardroom.
July 9, 2025 at 2:55 PM
9/
This comes ONE DAY after Monzo's £21m fine where Buckingham Palace was used as a registered address.
Two days. Two fines. £33 million. Same pattern:
Critical information that never reached the boardroom.
This comes ONE DAY after Monzo's £21m fine where Buckingham Palace was used as a registered address.
Two days. Two fines. £33 million. Same pattern:
Critical information that never reached the boardroom.
8/
The root causes per Bank of England:
- Insufficiently integrated risk management framework
- Risk decisions made without involving Risk Function
- Failed escalation to senior committees
- Governance "below standards expected"
Fine reduced from £20m for cooperation.
The root causes per Bank of England:
- Insufficiently integrated risk management framework
- Risk decisions made without involving Risk Function
- Failed escalation to senior committees
- Governance "below standards expected"
Fine reduced from £20m for cooperation.
July 9, 2025 at 2:55 PM
8/
The root causes per Bank of England:
- Insufficiently integrated risk management framework
- Risk decisions made without involving Risk Function
- Failed escalation to senior committees
- Governance "below standards expected"
Fine reduced from £20m for cooperation.
The root causes per Bank of England:
- Insufficiently integrated risk management framework
- Risk decisions made without involving Risk Function
- Failed escalation to senior committees
- Governance "below standards expected"
Fine reduced from £20m for cooperation.
7/
The Board's reaction when they finally saw the hidden reports in June 2022?
They admitted they "would NOT have signed" the compliance confirmation had they known.
This wasn't deception. It was systemic information failure.
The Board's reaction when they finally saw the hidden reports in June 2022?
They admitted they "would NOT have signed" the compliance confirmation had they known.
This wasn't deception. It was systemic information failure.
July 9, 2025 at 2:55 PM
7/
The Board's reaction when they finally saw the hidden reports in June 2022?
They admitted they "would NOT have signed" the compliance confirmation had they known.
This wasn't deception. It was systemic information failure.
The Board's reaction when they finally saw the hidden reports in June 2022?
They admitted they "would NOT have signed" the compliance confirmation had they known.
This wasn't deception. It was systemic information failure.
6/
When the Bank appointed an independent expert to verify compliance, the truth emerged.
May 2022 finding: Vocalink had FAILED to comply due to "unrealistic scope, timeline and Executive overcommitment."
Then the buried reports surfaced...
When the Bank appointed an independent expert to verify compliance, the truth emerged.
May 2022 finding: Vocalink had FAILED to comply due to "unrealistic scope, timeline and Executive overcommitment."
Then the buried reports surfaced...
July 9, 2025 at 2:55 PM
6/
When the Bank appointed an independent expert to verify compliance, the truth emerged.
May 2022 finding: Vocalink had FAILED to comply due to "unrealistic scope, timeline and Executive overcommitment."
Then the buried reports surfaced...
When the Bank appointed an independent expert to verify compliance, the truth emerged.
May 2022 finding: Vocalink had FAILED to comply due to "unrealistic scope, timeline and Executive overcommitment."
Then the buried reports surfaced...
5/
Yet on 28 Feb 2022, Vocalink wrote to the Bank of England confirming FULL COMPLIANCE with the regulatory direction.
The Board had signed off based on incomplete information.
The three lines of defence had failed. Catastrophically.
Yet on 28 Feb 2022, Vocalink wrote to the Bank of England confirming FULL COMPLIANCE with the regulatory direction.
The Board had signed off based on incomplete information.
The three lines of defence had failed. Catastrophically.
July 9, 2025 at 2:55 PM
5/
Yet on 28 Feb 2022, Vocalink wrote to the Bank of England confirming FULL COMPLIANCE with the regulatory direction.
The Board had signed off based on incomplete information.
The three lines of defence had failed. Catastrophically.
Yet on 28 Feb 2022, Vocalink wrote to the Bank of England confirming FULL COMPLIANCE with the regulatory direction.
The Board had signed off based on incomplete information.
The three lines of defence had failed. Catastrophically.
4/
The reports never reached:
❌ The Risk Committee
❌ The Board
❌ Internal Audit
❌ The executives signing off compliance
One staff member's reaction when seeing them: "[This] makes it look like [the programme] didn't deliver..."
The reports never reached:
❌ The Risk Committee
❌ The Board
❌ Internal Audit
❌ The executives signing off compliance
One staff member's reaction when seeing them: "[This] makes it look like [the programme] didn't deliver..."
July 9, 2025 at 2:55 PM
4/
The reports never reached:
❌ The Risk Committee
❌ The Board
❌ Internal Audit
❌ The executives signing off compliance
One staff member's reaction when seeing them: "[This] makes it look like [the programme] didn't deliver..."
The reports never reached:
❌ The Risk Committee
❌ The Board
❌ Internal Audit
❌ The executives signing off compliance
One staff member's reaction when seeing them: "[This] makes it look like [the programme] didn't deliver..."