Verified against the official source 26 Sep 2026 · reviewed by Bhaskar Bhatt (a factual check against the official source, not a legal review or legal advice)What this label means
Verified
— a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
Pending review
— linked to the official source and in the queue for a reviewer to confirm.
Source-linked
— linked to the official source, not yet confirmed by a reviewer.
The United Kingdom has 4 recorded AI policy instruments, none of them binding. Principles-based, regulator-led framework; no AI-specific Act in force. Regulators include Department for Science, Innovation and Technology (DSIT), Information Commissioner's Office (ICO), AI Security Institute. The United Kingdom has not enacted a cross-sector AI statute.
Department for Science, Innovation and Technology (DSIT), Information Commissioner's Office (ICO), AI Security Institute, Competition and Markets Authority (CMA)
The United Kingdom has not enacted a cross-sector AI statute. Its approach, set out in the March 2023 white paper "A pro-innovation approach to AI regulation" and confirmed in the February 2024 government response, asks existing regulators to apply five cross-cutting principles within their remits, supported by central functions and the AI Security Institute. Binding obligations for AI therefore come mainly from existing law: UK GDPR and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), equality, consumer, financial-services, competition and online-safety legislation.
What is the current regulatory status?
Principles-based, regulator-led framework; no AI-specific Act in force. The government has signalled a future bill targeting the most powerful AI models, but as of the last check no such bill had been introduced. Sector regulators (ICO, FCA, CMA, Ofcom, MHRA, EHRC) publish AI guidance and enforce existing law.
Binding rules versus guidance
Binding: UK GDPR and Data Protection Act 2018 (including rules on automated decision-making), Equality Act 2010, Consumer Rights Act 2015, Online Safety Act 2023, sector rules such as FCA Consumer Duty. Guidance: the AI regulation white paper principles, ICO guidance on AI and data protection, DSIT and regulator AI guidance, the Algorithmic Transparency Recording Standard for public bodies.
A pro-innovation approach to AI regulation (white paper and government response)
The UK white paper sets out a principles-based, context-specific approach to regulating AI. Instead of a single AI law, it asks existing regulators to interpret and apply five cross-cutting principles within their remits: safety, security and robustness; appropriate transparency and explainability; fairness; accountability and governance; and contestability and redress. Central government provides coordination, monitoring and guidance.
Adopted 29 Mar 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
The AI Opportunities Action Plan is an independent report by Matt Clifford commissioned by the government, containing 50 recommendations organised under three aims: laying foundations (compute, data, skills and regulation), driving AI adoption across the public and private sectors, and securing homegrown frontier AI capability. The government published a response accepting the recommendations and treats the plan as its roadmap for AI-led growth.
Adopted 13 Jan 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
The AI Playbook is official guidance for UK public-sector organisations on selecting, buying, building and deploying AI. It sets ten principles covering legality, security, human oversight, transparency and accountability, and explains AI capabilities, limitations and risks in plain terms. It expands and replaces the January 2024 Generative AI Framework for HMG to cover a broader range of AI technologies.
Adopted 10 Feb 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
The ICO's guidance explains how UK GDPR and the Data Protection Act 2018 apply when organisations develop or use AI that processes personal data. It covers accountability and governance, lawfulness and fairness, transparency, data minimisation, security, individual rights, and automated decision-making. The guidance is not itself law, but it reflects how the regulator interprets binding obligations and is the reference point in ICO enforcement.
Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Which states, provinces and regions in UK have their own AI laws and policies?
4 instruments on record from 3 of UK's sub-national jurisdictions. Each applies only within its own territory.
Sub-national AI laws and policies recorded for United Kingdom
No future deadlines are recorded for UK; past milestones are listed on each policy page. New dates reach the calendar feed: UK feed · how it works
Current priorities
Delivering the AI Opportunities Action Plan (January 2025), AI Growth Zones and compute, the AI Security Institute's evaluation work, regulator capacity through the Regulatory Innovation Office, and implementation of the Data (Use and Access) Act 2025 changes to automated decision-making rules.
@misc{aipolicytracker2026_airegulationinunitedking,
author = {{AIPolicyTracker}},
title = {{AI regulation in United Kingdom}},
year = {2026},
howpublished = {\url{https://aipolicytracker.org/jurisdictions/uk}},
url = {https://aipolicytracker.org/jurisdictions/uk},
urldate = {2026-10-27},
note = {Data licensed CC BY 4.0. Accessed 27 October 2026}
}
Frequently asked questions
Does the UK have an AI Act?
No. As of the last check the UK relies on existing laws applied by sector regulators under five non-statutory principles. The government has said it intends to legislate for the most powerful AI models, but no bill has been introduced to Parliament.
What UK laws already apply to AI systems?
UK GDPR and the Data Protection Act 2018 for personal data and automated decisions, the Equality Act 2010 for discrimination, consumer and product-safety law, the Online Safety Act 2023 for platforms, and sector-specific rules in financial services, health and telecoms.
Does the United Kingdom have an AI law?
No binding AI-specific law is recorded for the United Kingdom. The instruments recorded are non-binding: strategies, guidance or standards.
Who regulates AI in the United Kingdom?
Department for Science, Innovation and Technology (DSIT) (AI policy lead); Information Commissioner's Office (ICO) (Data protection, including AI guidance); AI Security Institute (Evaluation of advanced AI models); Competition and Markets Authority (CMA) (Competition and consumer aspects of AI and foundation models).
What is the status of AI regulation in the United Kingdom?
Principles-based, regulator-led framework; no AI-specific Act in force. The government has signalled a future bill targeting the most powerful AI models, but as of the last check no such bill had been introduced. Sector regulators (ICO, FCA, CMA, Ofcom, MHRA, EHRC) publish AI guidance and enforce existing law.
Is there a national AI strategy in the United Kingdom?
Yes: AI Opportunities Action Plan (2025).
What is binding and what is only guidance in the United Kingdom?
Binding: UK GDPR and Data Protection Act 2018 (including rules on automated decision-making), Equality Act 2010, Consumer Rights Act 2015, Online Safety Act 2023, sector rules such as FCA Consumer Duty. Guidance: the AI regulation white paper principles, ICO guidance on AI and data protection, DSIT and regulator AI guidance, the Algorithmic Transparency Recording Standard for public bodies.
Is there a federal AI law in the United Kingdom?
No binding national AI instrument is recorded for the United Kingdom; the rules on record come from individual sub-national jurisdictions.
Which sub-national jurisdictions in the United Kingdom have AI laws?
None of the 3 sub-national jurisdictions recorded here has a binding AI instrument adopted or in force yet.
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.
