EU vs UK AI regulation: side-by-side comparison

Binding regulation in force and partially applicable. Prohibited practices and AI-literacy duties apply since 2 February 2025; general-purpose AI model obligations and the governance and penalties chapters since 2 August 2025; most remaining obligations, including Annex III high-risk requirements, are scheduled from 2 August 2026, with high-risk AI embedded in Annex I regulated products from 2 August 2027. A Commission "Digital Omnibus" proposal published in November 2025 would adjust some high-risk application dates; its adoption status must be checked against the official sources linked below.

Principles-based, regulator-led framework; no AI-specific Act in force. The government has signalled a future bill targeting the most powerful AI models, but as of the last check no such bill had been introduced. Sector regulators (ICO, FCA, CMA, Ofcom, MHRA, EHRC) publish AI guidance and enforce existing law.

• EU AI Act (Partially applicable)

No AI-specific binding legislation recorded. See status and guidance.

19 binding, 0 voluntary

• Apply data governance and quality criteria to training, validation and testing data
• Achieve appropriate accuracy, robustness and cybersecurity
• Operate a quality management system
• Complete conformity assessment, CE marking and EU database registration
• Carry out a fundamental rights impact assessment before deployment
• Ensure AI literacy of staff operating AI systems

No high-risk tiering recorded.

4 binding, 0 voluntary

• Ensure AI literacy of staff operating AI systems
• Disclose AI interaction and label synthetic content
• Meet general-purpose AI model provider obligations
• Manage systemic risk for high-impact general-purpose models

0 binding, 2 voluntary

• Ensure AI systems are safe, secure and robust throughout their lifecycle (voluntary)
• Establish accountability and governance for AI (voluntary)

2 binding, 0 voluntary

• Disclose AI interaction and label synthetic content
• Provide deployers with clear instructions for use

0 binding, 1 voluntary

• Provide appropriate transparency and explainability (voluntary)

1 binding, 0 voluntary

• Carry out a fundamental rights impact assessment before deployment

1 binding, 0 voluntary

• Carry out a data protection impact assessment for high-risk AI processing

1 binding, 0 voluntary

• Apply data governance and quality criteria to training, validation and testing data

No data-governance obligations recorded.

1 binding, 0 voluntary

• Enable and assign effective human oversight

1 binding, 1 voluntary

• Apply safeguards to solely automated decisions with significant effects
• Provide routes to contest AI outcomes and seek redress (voluntary)

Public-authority deployers must register high-risk AI use and assess fundamental-rights impact

No public-sector-specific requirements recorded.

• 1 August 2024: Entry into force (EU AI Act)
• 2 February 2025: Prohibited practices and AI literacy apply (Chapters I and II) (EU AI Act)
• 2 August 2025: General-purpose AI, governance, notified bodies and penalties apply (EU AI Act)
• 2 August 2026: General application, including Annex III high-risk systems and Article 50 transparency (EU AI Act)
• 2 August 2027: High-risk AI as safety components of Annex I products (EU AI Act)
• 2 August 2027: General-purpose models placed on the market before 2 August 2025 must comply (EU AI Act)
• 31 December 2030: Large-scale IT systems listed in Annex X placed on the market before 2 August 2027 (EU AI Act)

• 21 June 2023: Consultation closed (UK AI regulation framework)
• 6 February 2024: Government response published (UK AI regulation framework)

• Regulation (EU) 2024/1689 (Artificial Intelligence Act) — Official Journal
• AI Act — European Commission policy page
• European AI Office

• A pro-innovation approach to AI regulation (white paper)
• AI Opportunities Action Plan
• Guidance on AI and data protection