Regulations monitor
AI law in force, and the guidance, consultations and decisions UK departments and regulators issue under it.
Law in force
The UK has no cross-sector AI Act. These are the statutes with AI-specific provisions; the AI (Regulation) Bill is a Private Member's Bill, not law.
- Data Protection Act 2018 (Code of Practice on AI and Automated Decision-Making) Regulations 2026SI 2026/425 · In force 12 May 2026
Puts the ICO code of practice on AI and automated decision-making on a statutory footing.
- Data (Use and Access) Act 20252025 c. 18 · ADM rules in force 5 February 2026
Replaces UK GDPR Article 22 with new automated decision-making rules and safeguards (Articles 22A to 22D).
- Crime and Policing Act 20262026 c. 20 · Royal Assent 29 April 2026
Creates offences for making or supplying AI models built to generate child sexual abuse material, and nudification tools.
- Automated Vehicles Act 20242024 c. 10 · Royal Assent 20 May 2024
Sets the legal framework for self-driving vehicles, including authorisation, operator licensing and who is liable when the vehicle drives itself.
- Online Safety Act 20232023 c. 50 · Royal Assent 26 October 2023
Ofcom safety duties apply to generative AI chatbots and AI-generated content on regulated services.
Regulator guidance & consultations
Coverage begins 1 January 2025. News, speeches and transparency records are in the Policy Explorer.
New this month
1
Recent (3 months)
2
Most active (3 months)
ICO1
Tracked documents
15
Recent changes
15 documents
| Document | Status | Department | Sector | Published |
|---|---|---|---|---|
| Agentic AI call for evidence | Open consultation | ICO | Cross-Sector | 8 Oct 2026 |
| Google search publisher conduct requirement | Other | CMA | Technology | 4 Aug 2026 |
| Data regulation in the age of AI and other data‑intensive technologies | Open consultation | DSIT | Cross-Sector | 15 Jul 2026 |
| ICO consultation on the draft guidance about automated decision-making, including profiling | Closed consultation | ICO | Cross-Sector | 31 Mar 2026 |
| AI and other digital technology in children’s social care | Closed consultation | DfE | Public Sector | 9 Mar 2026 |
| Complying with consumer law when using AI agents | Guidance | CMA | Cross-Sector | 9 Mar 2026 |
| AI Management Essentials tool | Closed consultation | DSIT | Cross-Sector | 6 Feb 2026 |
| How will regulators support safe AI-powered innovation: joint letter from DSIT and DBT | Notices & decisions | DSIT | Cross-Sector | 28 Jan 2026 |
| Generative AI: product safety standards | Guidance | DfE | Education | 19 Jan 2026 |
| AI Growth Lab | Closed consultation | DSIT | Cross-Sector | 29 Oct 2025 |
| Data Use and Access Act 2025: plans for commencement | Guidance | DSIT | Cross-Sector | 11 Sept 2025 |
| The regulation of artificial intelligence as a medical device: government response to the RHC | Policy paper | DHSC | Healthcare | 10 Mar 2025 |
| PPN 017: Improving transparency of AI use in procurement | Guidance | Cabinet Office | Public Sector | 17 Feb 2025 |
| AI Cyber Security Code of Practice | Guidance | DSIT | Technology | 31 Jan 2025 |
| Cyber security of AI: a call for views | Closed consultation | DSIT | Cross-Sector | 31 Jan 2025 |