AI law and policy in United Kingdom
7 instruments relevant to AI in United Kingdom are indexed here, 4 of them binding law, none of which names AI or deepfakes in its title.
Governance readiness 6 of 10 points on the governance readiness index, which records how much machinery exists, not how strict it is. AI Governance Readiness Index This site Our own editorial coding from primary legal sources, not an objective measurement. Every score cites a specific instrument and article. "Readiness" means the machinery exists to govern AI. It is emphatically not a judgement that the resulting rules are good, proportionate, or well enforced. Cite AI Safety Tracker, "AI Governance Readiness Index". https://aisafetytracker.org/methodology/governance-readiness/. Retrieved 23 October 2026.
Use of AI, AI datacentres and governance readiness beside this index: AI in the United Kingdom
Statutes
Act of Parliament. Binding on everyone it applies to.
-
Parliament of the United Kingdom
Relaxes the automated-decision rules outside special-category data, moving from a general prohibition toward a safeguards model. The direction of travel is opposite to the EU's, which matters to anyone assuming the two regimes still track each other.
- privacy
- transparency
-
Parliament of the United Kingdom
Duties of care on user-to-user and search services, enforced by Ofcom. Generative AI chatbots that let users share content fall inside scope, which is the main route by which UK law reaches consumer AI products.
- safety
- children
-
Parliament of the United Kingdom
With the UK GDPR, the binding constraint on most AI systems processing personal data, including the restriction on solely automated decisions with legal or similarly significant effects.
- privacy
- transparency
-
Equality Act 2010 2010
Parliament of the United Kingdom
The indirect discrimination provisions apply to automated decisions without naming them. In a jurisdiction with no AI statute, this is what an unfair hiring or credit model is most likely to be challenged under.
- discrimination
Binding on government only
Binds government agencies only, not the wider market.
-
Department for Science, Innovation and Technology
State capacity to test frontier models, established before any comparable body elsewhere and renamed from AI Safety Institute in 2025. It cannot compel access: testing happens by agreement with developers.
- safety
Regulator guidance
How a regulator states it will apply existing law. Creates no obligations of its own.
-
Information Commissioner's Office
How the data regulator says it will apply existing law to AI. Not law, and the closest thing to an operational compliance standard the UK has.
- privacy
- transparency
Voluntary standards
Guidance with no legal force. Compliance is a choice.
-
Department for Science, Innovation and Technology
The white paper setting out the decision not to legislate horizontally, and to have existing regulators apply five cross-sectoral principles inside their own remits instead. Everything else in this list follows from it.
- safety
- government use
About this index
Compiled here from primary instruments and licensed MIT.
4 of the 7 instruments here are binding law, and 0 of those name AI. The remainder apply to AI without naming it, so a keyword search of the statute book does not find them.
Topics covered: children, discrimination, government use, privacy, safety, transparency. A build check probes every citation on this page, because a link that returns a 404 looks like evidence and is not.
This is not legal advice. It is not a compliance checklist and it is not exhaustive. Commencement dates, proposals and enforcement positions move; the review date is on every record. If something here is wrong, say so and it gets fixed and listed rather than quietly patched.