Search and filter every tracked AI policy, regulation and guidance document.
27 policiesCoverage from 1 Jan 2025 · Data current as of 16 Oct 2026
ICO
This speech addresses the importance of data governance and public trust in innovation. UK organisations are encouraged to engage with the ICO for guidance on responsible AI use.
ICO
This document is a call for evidence regarding agentic AI and data protection law. UK organisations are invited to provide feedback by 20 November 2026.
ICO
This document reports on changes secured from AI developers regarding data protection. UK organisations must respond to the call for evidence by 20 November 2026.
ICO
This document discusses the governance of facial recognition technology in policing. UK police forces must improve data protection governance based on audit findings.
ICO
This document discusses the evolution of regulatory sandboxes for AI and emerging technologies. UK organisations should monitor developments as they may impact regulatory compliance and innovation opportunities.
ICO
The document marks the one-year anniversary of the Data Use and Access Act's commencement. UK organisations must comply with new operational requirements and guidance related to data protection and automated decision-making.
ICO
This statement discusses the launch of the advisory AI Growth Lab to support AI innovation in the legal sector. UK organisations must navigate data protection requirements confidently to ensure compliance while adopting AI technologies.
ICO
This document is the ICO's response to the government regarding safe AI-powered innovation. UK organisations must comply with evolving data protection laws as they develop and deploy AI technologies.
ICO
This document provides steps to protect organizations from AI-powered cyber threats. UK organizations must implement technical and organizational measures to safeguard personal data under UK GDPR.
ICO
New guidance has been published to assist public authorities in handling AI-generated Freedom of Information requests. UK organisations must apply existing FOI principles consistently to manage the complexities introduced by AI tools.
ICO
This document discusses the use of automated decision-making in recruitment. UK organisations must ensure safeguards are in place to protect jobseeker data rights and ensure fairness in decisions.
ICO
This document provides information on automated decision making in recruitment. UK organisations must ensure compliance with data protection rights and mitigate bias in automated decisions.
ICO
This document is a consultation on draft guidance about automated decision-making and profiling. UK organisations must respond to the consultation by 29 May 2026.
ICO
This blog discusses the importance of data protection in the use of facial recognition technology by police. UK police forces must ensure compliance with data protection laws to maintain public trust and protect civil liberties.
ICO
This document is a joint statement from international data protection authorities regarding AI-generated imagery. UK organizations should monitor the implications of privacy risks associated with AI-generated content.
ICO
The ICO has opened investigations into XIUC and X.AI regarding the Grok AI system's processing of personal data. UK organisations must ensure compliance with data protection laws to avoid significant penalties.
ICO
The report discusses the potential of agentic AI in personal shopping. UK organisations must ensure compliance with data protection laws to build public trust in these technologies.
ICO
This is a statement regarding compliance with UK data protection law by Grok AI. UK organisations must ensure they handle personal data lawfully and respect individuals' rights.
ICO
This speech addresses the importance of data protection and the role of AI in enhancing services. UK organisations should be aware of the evolving regulatory landscape and the need for responsible innovation.
ICO
The UK Upper Tribunal has upheld the Information Commissioner's appeal against Clearview AI Inc regarding data protection violations. UK organizations must ensure compliance with UK data protection law when processing personal information of UK residents, regardless of their location.