Skip to main content
NOPE
In Effect Guidance AI Safety

UK AI Approach

UK AI Regulation Framework

Sector-specific, principles-based approach using existing regulators. Five cross-sector principles guide regulatory application rather than horizontal AI legislation.

Jurisdiction

United Kingdom

Enacted

Mar 29, 2023

Effective

Mar 29, 2023

Enforcement

Existing sector regulators (CMA, FCA, ICO, Ofcom) via DRCF coordination

GOV.UK

Why It Matters

UK taking "pro-innovation" voluntary approach contrasts with EU's prescriptive model. May shift if Online Safety Act enforcement reveals gaps.

Recent Developments

Government AI Bill delayed until potentially May 2026. AI Security Institute (formerly AI Safety Institute) focuses on evaluation, not regulation.

Who Must Comply

  • AI developers and deployers (via sector regulators)

Obligations fall on:

Safety Provisions

  • Principle: Safety, security, robustness
  • Principle: Transparency, explainability
  • Principle: Fairness
  • Principle: Accountability, governance
  • Principle: Contestability, redress

View on map

United Kingdom

Focus Areas

General regulation

Cite This

APA

United Kingdom. (2023). UK AI Regulation Framework.

Related Regulations

In Effect UK

UK OSA

One of the most comprehensive platform content moderation regimes globally. Creates specific duties around suicide, self-harm, and eating disorder content for children with 'highly effective' age assurance requirements.

In Effect UK

UK Children's Code

UK's enforceable "privacy-by-design for kids" regime. Applies to online services likely to be accessed by children under 18. Forces high-privacy defaults, limits on profiling/nudges, DPIA-style risk work, safety-by-design.

In Effect CN

China CSL Amendments

First major revision of China's foundational Cybersecurity Law since 2017. Introduces formal AI governance provisions, significantly increases penalties, and expands extraterritorial application to all cybersecurity violations.

In Effect US-CA

CA SB 524

Requires law enforcement agencies to disclose when AI is used to write or assist in creating official police reports, maintain audit trails, and preserve AI-generated first drafts.

In Effect NP

Nepal AI Policy

Nepal national AI policy establishing governance framework and development priorities. Creates AI Governance Council (chaired by Minister for Communications and IT), AI Regulation Council, National AI Centre, and AI Regulatory Authority. Six pillars including ethics, human resource development, and sectoral application.

In Effect GB

UK DPA 2018

The UK's foundational data protection law, incorporating the UK GDPR (retained EU GDPR post-Brexit). Substantively mirrors EU GDPR with ICO as sole enforcer. Article 22 restricts automated decision-making; Article 9 classifies mental health as special category data; children's consent age set at 13. Parent framework for UK Children's Code; amended by DUA Act 2025.

All regulations Check if this applies to you

Last updated January 24, 2026. Verify against primary sources before relying on this information.