How is AI regulated in the UK?
The UK does not have a single AI law like the EU AI Act. AI is regulated through existing law and existing regulators applying shared principles: safety, security and robustness; transparency and explainability; fairness; accountability and governance; and contestability and redress. UK GDPR and the Data Protection Act govern personal data and automated decisions, the Online Safety Act covers online platforms, and sector regulators such as the FCA, ICO, CMA and MHRA apply their own rules to AI in their areas.
How it works
- Map which regulators cover your use of AI: ICO for personal data, FCA for financial services, Ofcom for online safety, MHRA for medical devices.
- Follow their guidance on AI, for example the ICO's guidance on AI and data protection.
- If you also serve EU customers, the EU AI Act applies to that activity.
- Keep evidence of fairness, oversight and decisions. That serves every regulator.