United Kingdom AI Regulation Framework Explained

Key dates

29 Mar 2023AI Regulation White Paper published
31 Jan 2025AI Cyber Security Code of Practice published
14 Feb 2025AI Safety Institute renamed AI Security Institute
19 Jun 2025Data (Use and Access) Act Royal Assent
12 Nov 2025Cyber Security and Resilience Bill introduced

Contribute

Spot an error, or know a record we should add? Members can propose additions and submit corrections.

Add regulation Report a correction or request removal

Related in Regulation Tracker

UK Cyber Security and Resilience (Network and Information Systems) Bill

The UK's NIS2-equivalent reform, still before the House of Lords in September 2026 with Royal Assent expected late in the year, extends cyber duties to data centres and managed service providers hosting AI workloads.

United KingdomIn legislative process

Getty Images v Stability AI [2025] EWHC — UK judgment on AI training and outputs

The first major AI copyright judgment in the UK: Stability AI's image model was held not to be an infringing copy of Getty's photographs, leaving the legality of training itself to Parliament's pending reform.

United KingdomIn force

Data (Use and Access) Act 2025 — automated decision-making provisions

The UK's post-Brexit data law relaxes the ban on solely automated decisions for ordinary personal data in exchange for mandatory safeguards, reshaping how automated decision-making is regulated in the UK. Commenced…

United KingdomIn force, applied in stages