Skip to content
International regulation

AI regulation in the United Kingdom

In a nutshell

The UK has no AI law: it applies five principles through each sector’s regulators (ICO, CMA, FCA, Ofcom) and is preparing sandboxes.

The UK has chosen not to pass a general AI law. Instead it applies five cross-cutting principles (safety and robustness; transparency and explainability; fairness; accountability and governance; and contestability and redress) through existing regulators: the ICO for data, the CMA for competition, the FCA for finance and Ofcom for communications.

The 2025 data law changed the UK GDPR rules on automated decision-making, and the ICO announced a code on AI and automated decisions. In 2026 the government announced a bill with powers to create regulatory sandboxes.

For European companies, the AI Act still applies if their systems are used in the EU; in the UK, the key is the UK GDPR and each sector regulator's guidance.

Track updates: news for every country, with date and source, in our Regulatory Radar.

Reference: Enfoque pro-innovación del Gobierno británico; UK GDPR

Related terms

Automated decision-making (GDPR Art. 22)AI regulation in the United StatesAI Act (EU Artificial Intelligence Act)
What applies to you?

Take the free assessment and find out in a few minutes which obligations your company has and where to start.

Take the free assessment

← Back to the glossaryUpdated: October 2026 · Informational content, not legal advice.