Global AI Governance Law and Policy: UK
This article analyzes the laws, policies, and broader contextual history and developments relevant to AI governance in the United Kingdom.
Contributors:
Joe Jones
Research and Insights Director
IAPP
Alexander Milner-Smith
CIPP/E
Partner
Lewis Silkin LLP
Lee Ramsay
CIPP/E
Managing Knowledge Lawyer (Data, Privacy & Cyber)
Lewis Silkin LLP
Sunny Athwal
CIPP/E, CIPM, FIP
Chief Privacy Officer
HCL Technologies
This article is part of a series on global AI governance law and policy.
Though the U.K. does not have any legislation specific to the regulation or governance of artificial intelligence, it does have an AI Security Institute and a variety of relevant principles-based soft law and policy initiatives, as well as binding regulations in other domains like data protection and online safety. The AI Security Institute, which started life as the AI Safety Institute, launched at the world's first global AI Safety Summit held in the U.K. in November 2023. However, in February 2025 AISI changed its name to reflect its change in focus to serious AI risks with security implications, such as using AI for developing weapons, as opposed to safety issues and risks, e.g., bias and discrimination.
The U.K. has taken a decentralized, principles-based approach with cross-sector regulators expected to set binding guidelines and enforce the core principle set by the U.K. government. The development, integration and responsible governance of AI is a strategic priority across U.K. policymaking and regulatory capacity building with a focus on enabling existing regulators to enforce their core principles. An AI bill was announced in the King's Speech in July 2025, but it would only regulate the most powerful AI models. The timing and scope of such a bill has since changed, with no formal bill expected until the next King's Speech, reportedly in May 2026.
History and context
Contributors:
Joe Jones
Research and Insights Director
IAPP
Alexander Milner-Smith
CIPP/E
Partner
Lewis Silkin LLP
Lee Ramsay
CIPP/E
Managing Knowledge Lawyer (Data, Privacy & Cyber)
Lewis Silkin LLP
Sunny Athwal
CIPP/E, CIPM, FIP
Chief Privacy Officer
HCL Technologies