Provide appropriate transparency and explainability
Under UK AI regulation framework, Principle 2, Part 3
Source-linked
Open official source
What does it require?
Organisations should communicate when and how AI is used and provide explanations proportionate to the risk, so that people can understand decisions affecting them. For personal data, UK GDPR transparency and automated decision-making rights make this binding in practice.
Practical action
Publish AI use notices and keep explainability documentation for decisions about individuals.
Who does it apply to?
All AI uses; binding where UK GDPR applies.
- Sectors
- Cross-sector / all sectors
Evidence examples
- AI transparency notice (document)
Framework mappings
Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.
| Framework | Reference | Note | Confidence |
|---|---|---|---|
| NIST AI RMF 1.0 | GOVERN 4.x, MAP 1.x | Original editorial mapping. | medium |
Similar obligations in other instruments
- Notify consumers and explain adverse consequential decisions — Colorado AI Act, Colorado (United States)
- Publish an annual AI use-case inventory — OMB M-25-21, United States
- Disclose AI interaction and label synthetic content — EU AI Act, European Union
- Provide deployers with clear instructions for use — EU AI Act, European Union
- Notify individuals about the use of personal data in AI recommendations and decisions — PDPC AI advisory guidelines, Singapore
- Report incidents and mark AI-generated content (generative AI framework) — Singapore Model AI Governance Framework, Singapore (voluntary)
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.