Home › Answers › UK law, tax and HMRC
Is AI regulated in the UK?
Short answer
The UK has no single AI law. As of October 2026 there's no AI bill before Parliament, and the government regulates AI through existing laws and regulators: UK GDPR and the ICO for personal data, consumer law for misleading claims, equality law for discrimination, and copyright law. The EU AI Act can apply if you sell into the EU.
What applies to a UK small business today
| Law | What it means when you use AI |
|---|---|
| UK GDPR and Data Protection Act 2018 | Lawful basis, data minimisation, transparency and human review for significant automated decisions. Regulated by the ICO. |
| Consumer protection law | Don't mislead customers, for example with AI images of work you didn't do or fake reviews. |
| Equality Act 2010 | You're responsible if an AI tool you use for hiring or pricing discriminates. |
| Copyright, Designs and Patents Act 1988 | Covers who owns AI output and whether you're copying someone else's work. See who owns AI-generated content? |
| Employment law | Monitoring staff with AI or using it in hiring still has to be fair and transparent. |
What the government is doing
A private member's bill, the Artificial Intelligence (Regulation) Bill, started in the House of Lords in the 2024 to 2026 session but didn't become law. In October 2026 officials told MPs the government was still considering whether, and how, to legislate on AI more broadly, including possible AI-related amendments to the Cyber Security and Resilience Bill. Nothing there places new duties on small businesses yet.
The EU AI Act
The EU AI Act applies to businesses that put AI systems on the EU market or whose AI output is used in the EU. For most UK sole traders using ChatGPT for emails, it won't apply. Key dates from the EU's AI Act Service Desk:
- 2 August 2026: transparency rules (Article 50) and enforcement of most rules began.
- 2 December 2026: new prohibitions on AI-generated non-consensual intimate content and child sexual abuse material apply.
- 2 December 2027: rules for stand-alone high-risk AI systems apply, after the Digital Omnibus delay.
What to do
Write a short AI policy, keep personal data out of consumer tools, check AI output before customers see it, and don't use AI to make decisions about people without a human review. Our AI policy template covers it.
Related questions
Does the UK have an AI Act?
No. The UK hasn't passed an AI Act and, as of October 2026, has no AI-specific bill before Parliament.
Who regulates AI in the UK?
No single regulator. The ICO covers personal data, the CMA covers competition and consumer protection, and sector regulators (such as the FCA for financial services) cover their own areas.
Sources
- [Artificial Intelligence (Regulation) Bill [HL], UK Parliament](https://bills.parliament.uk/bills/3942)
- Hansard: Artificial Intelligence Policy, 12 October 2026
- EU AI Act Service Desk: implementation timeline
- ICO: guidance on AI and data protection
Checked 17 October 2026. Rules and prices change, so check the source before you rely on it. This is general information, not legal, tax or financial advice.
More on uk law, tax and hmrc
- Can AI images be illegal in the UK?
- Can ChatGPT do my tax return?
- Can ChatGPT write a contract?
- Do I have to tell customers I use AI?
- Does HMRC use AI?
- How can solicitors use AI in the UK?
All uk law, tax and hmrc answers · All answers · Guides · AI tools directory
Get one useful AI tool in your inbox each weekday
Free, plain English, five minutes to read. Unsubscribe any time.
See our privacy notice.