Does the UK have an AI Act?

No. As of the last check the UK relies on existing laws applied by sector regulators under five non-statutory principles. The government has said it intends to legislate for the most powerful AI models, but no bill has been introduced to Parliament.

What UK laws already apply to AI systems?

UK GDPR and the Data Protection Act 2018 for personal data and automated decisions, the Equality Act 2010 for discrimination, consumer and product-safety law, the Online Safety Act 2023 for platforms, and sector-specific rules in financial services, health and telecoms.

Country · Europe

AI regulation in the United Kingdom

Source-linked 4 instruments · 0 binding

Overview

The United Kingdom has not enacted a cross-sector AI statute. Its approach, set out in the March 2023 white paper "A pro-innovation approach to AI regulation" and confirmed in the February 2024 government response, asks existing regulators to apply five cross-cutting principles within their remits, supported by central functions and the AI Security Institute. Binding obligations for AI therefore come mainly from existing law: UK GDPR and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), equality, consumer, financial-services, competition and online-safety legislation.

What is the current regulatory status?

Principles-based, regulator-led framework; no AI-specific Act in force. The government has signalled a future bill targeting the most powerful AI models, but as of the last check no such bill had been introduced. Sector regulators (ICO, FCA, CMA, Ofcom, MHRA, EHRC) publish AI guidance and enforce existing law.

Binding rules versus guidance

Binding: UK GDPR and Data Protection Act 2018 (including rules on automated decision-making), Equality Act 2010, Consumer Rights Act 2015, Online Safety Act 2023, sector rules such as FCA Consumer Duty. Guidance: the AI regulation white paper principles, ICO guidance on AI and data protection, DSIT and regulator AI guidance, the Algorithmic Transparency Recording Standard for public bodies.

Key policy instruments

United Kingdom Policy Guidance

UK AI regulation framework

A pro-innovation approach to AI regulation (white paper and government response)

The UK white paper sets out a principles-based, context-specific approach to regulating AI. Instead of a single AI law, it asks existing regulators to interpret and apply five cross-cutting principles within their remits: safety, security and robustness; appropriate transparency and explainability; fairness; accountability and governance; and contestability and redress. Central government provides coordination, monitoring and guidance.

Adopted 29 Mar 2023 Source-linked Official source

United Kingdom National strategy Adopted

AI Opportunities Action Plan

The AI Opportunities Action Plan is an independent report by Matt Clifford commissioned by the government, containing 50 recommendations organised under three aims: laying foundations (compute, data, skills and regulation), driving AI adoption across the public and private sectors, and securing homegrown frontier AI capability. The government published a response accepting the recommendations and treats the plan as its roadmap for AI-led growth.

Adopted 13 Jan 2025 Source-linked · checked 11 Sep 2026 Official source

United Kingdom Guidance Guidance

Artificial Intelligence Playbook for the UK Government

The AI Playbook is official guidance for UK public-sector organisations on selecting, buying, building and deploying AI. It sets ten principles covering legality, security, human oversight, transparency and accountability, and explains AI capabilities, limitations and risks in plain terms. It expands and replaces the January 2024 Generative AI Framework for HMG to cover a broader range of AI technologies.

Adopted 10 Feb 2025 Source-linked · checked 11 Sep 2026 Official source

United Kingdom Guidance Guidance

ICO AI guidance

ICO Guidance on AI and data protection

The ICO's guidance explains how UK GDPR and the Data Protection Act 2018 apply when organisations develop or use AI that processes personal data. It covers accountability and governance, lawfulness and fairness, transparency, data minimisation, security, individual rights, and automated decision-making. The guidance is not itself law, but it reflects how the regulator interprets binding obligations and is the reference point in ICO enforcement.

Source-linked Official source

Filter all United Kingdom policies

Upcoming deadlines

No scheduled future dates recorded. Past milestones are listed on each policy page.

Current priorities

Delivering the AI Opportunities Action Plan (January 2025), AI Growth Zones and compute, the AI Security Institute's evaluation work, regulator capacity through the Regulatory Innovation Office, and implementation of the Data (Use and Access) Act 2025 changes to automated decision-making rules.

Latest changes

10 Feb 2025 United Kingdom Routine

AI Playbook published, superseding the Generative AI Framework for HMG

Artificial Intelligence Playbook for the UK Government AI Playbook published, superseding the Generative AI Framework for HMG Source-linked · checked 11 Sep 2026

13 Jan 2025 United Kingdom Routine

Action Plan and government response published

AI Opportunities Action Plan Action Plan and government response published Source-linked · checked 11 Sep 2026

Applicable sectors, use cases and obligation areas

Use cases: AI in finance, credit and insurance AI in hiring and employment AI in public services Generative AI and foundation models
Sectors: Cross-sector / all sectors
Obligation areas: governance accountability (2)human oversight (2)impact assessment (1)risk management (1)transparency (1)

How to use this information

Identify which UK regulators cover your sector and read their AI guidance; that is where enforcement will come from.
Treat UK GDPR as the primary binding constraint for AI using personal data, including automated decision-making rules.
Check whether you supply the EU as well; the EU AI Act may apply extraterritorially and set the higher bar.
Public bodies should use the Algorithmic Transparency Recording Standard for algorithmic tools.
Watch for a frontier-AI bill and record the date of every regulator publication you rely on.

Official government and regulator sources

A pro-innovation approach to AI regulation (white paper)
Department for Science, Innovation and Technology · 2023-03-29 · Tier 1 source
AI Opportunities Action Plan
Department for Science, Innovation and Technology · 2025-01-13 · Tier 1 source
Guidance on AI and data protection
Information Commissioner's Office · Tier 2 source

Frequently asked questions

Does the UK have an AI Act?: No. As of the last check the UK relies on existing laws applied by sector regulators under five non-statutory principles. The government has said it intends to legislate for the most powerful AI models, but no bill has been introduced to Parliament.
What UK laws already apply to AI systems?: UK GDPR and the Data Protection Act 2018 for personal data and automated decisions, the Equality Act 2010 for discrimination, consumer and product-safety law, the Online Safety Act 2023 for platforms, and sector-specific rules in financial services, health and telecoms.

Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.