# United Kingdom - **Record type**: Jurisdiction profile - **Short name**: UK - **ISO code**: GB - **Type**: country - **Region**: Europe ## In brief The United Kingdom has 4 recorded AI policy instruments, none of them binding. Principles-based, regulator-led framework; no AI-specific Act in force. Regulators include Department for Science, Innovation and Technology (DSIT), Information Commissioner's Office (ICO), AI Security Institute. The United Kingdom has not enacted a cross-sector AI statute. ## Overview The United Kingdom has not enacted a cross-sector AI statute. Its approach, set out in the March 2023 white paper "A pro-innovation approach to AI regulation" and confirmed in the February 2024 government response, asks existing regulators to apply five cross-cutting principles within their remits, supported by central functions and the AI Security Institute. Binding obligations for AI therefore come mainly from existing law: UK GDPR and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), equality, consumer, financial-services, competition and online-safety legislation. ## Regulatory status Principles-based, regulator-led framework; no AI-specific Act in force. The government has signalled a future bill targeting the most powerful AI models, but as of the last check no such bill had been introduced. Sector regulators (ICO, FCA, CMA, Ofcom, MHRA, EHRC) publish AI guidance and enforce existing law. ## What is binding and what is guidance Binding: UK GDPR and Data Protection Act 2018 (including rules on automated decision-making), Equality Act 2010, Consumer Rights Act 2015, Online Safety Act 2023, sector rules such as FCA Consumer Duty. Guidance: the AI regulation white paper principles, ICO guidance on AI and data protection, DSIT and regulator AI guidance, the Algorithmic Transparency Recording Standard for public bodies. ## Current priorities Delivering the AI Opportunities Action Plan (January 2025), AI Growth Zones and compute, the AI Security Institute's evaluation work, regulator capacity through the Regulatory Innovation Office, and implementation of the Data (Use and Access) Act 2025 changes to automated decision-making rules. ## Regulators - Department for Science, Innovation and Technology (DSIT) — AI policy lead — https://www.gov.uk/government/organisations/department-for-science-innovation-and-technology - Information Commissioner's Office (ICO) — Data protection, including AI guidance — https://ico.org.uk/ - AI Security Institute — Evaluation of advanced AI models — https://www.aisi.gov.uk/ - Competition and Markets Authority (CMA) — Competition and consumer aspects of AI and foundation models — https://www.gov.uk/government/organisations/competition-and-markets-authority ## How to use this profile - Identify which UK regulators cover your sector and read their AI guidance; that is where enforcement will come from. - Treat UK GDPR as the primary binding constraint for AI using personal data, including automated decision-making rules. - Check whether you supply the EU as well; the EU AI Act may apply extraterritorially and set the higher bar. - Public bodies should use the Algorithmic Transparency Recording Standard for algorithmic tools. - Watch for a frontier-AI bill and record the date of every regulator publication you rely on. ## Official sources - A pro-innovation approach to AI regulation (white paper) — Department for Science, Innovation and Technology — https://www.gov.uk/government/publications/ai-regulation-a-pro-innovation-approach - AI Opportunities Action Plan — Department for Science, Innovation and Technology — https://www.gov.uk/government/publications/ai-opportunities-action-plan - Guidance on AI and data protection — Information Commissioner's Office — https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/ ## Instruments recorded for this jurisdiction (4) - **A pro-innovation approach to AI regulation (white paper and government response)** — Policy, Guidance, non-binding - Record: https://aipolicytracker.org/policies/uk-ai-regulation-white-paper - Context file: https://aipolicytracker.org/policies/uk-ai-regulation-white-paper.md - **AI Opportunities Action Plan** — National strategy, Adopted, non-binding - Record: https://aipolicytracker.org/policies/uk-ai-opportunities-action-plan - Context file: https://aipolicytracker.org/policies/uk-ai-opportunities-action-plan.md - **Artificial Intelligence Playbook for the UK Government** — Guidance, Guidance, non-binding - Record: https://aipolicytracker.org/policies/uk-artificial-intelligence-playbook-for-the-uk-government - Context file: https://aipolicytracker.org/policies/uk-artificial-intelligence-playbook-for-the-uk-government.md - **ICO Guidance on AI and data protection** — Guidance, Guidance, non-binding - Record: https://aipolicytracker.org/policies/uk-ico-ai-data-protection-guidance - Context file: https://aipolicytracker.org/policies/uk-ico-ai-data-protection-guidance.md ## Provenance - **Record page**: https://aipolicytracker.org/jurisdictions/uk - **Official source**: https://www.gov.uk/government/publications/ai-regulation-a-pro-innovation-approach - **Source document**: A pro-innovation approach to AI regulation - **Published by**: UK Government, Department for Science, Innovation and Technology - **Provision**: Command Paper CP 815 - **Review status**: verified - **Confidence**: high - **Facts last confirmed**: 2026-09-26 - **Confirmed by**: Bhaskar Bhatt (see https://aipolicytracker.org/reviewers) - **Retrieved**: 2026-10-27 - **Licence**: https://creativecommons.org/licenses/by/4.0/ > This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.