Regulatory guidance / voluntary codes in the United Kingdom
On 29 March 2023, the UK Government published a White Paper: A pro-innovation approach to AI regulation (White Paper) elaborating on the approach to AI set out in its 18 July 2022 AI Governance and Regulation Policy Statement. The White Paper set out proposals for implementing a proportionate, future-proof and pro-innovation legislative framework for regulating AI and identified five key principles (para 48, section 3.2.3):
- Safety, security and robustness.
- Appropriate transparency and explainability.
- Fairness.
- Accountability and governance.
- Contestability and redress.
On 31 January 2025, the UK Government published a Code of Practice for the Cyber Security of AI (Code) setting out cyber security requirements applying throughout the lifecycle of AI systems. The Code consists of 13 principles to be voluntarily applied by relevant groups within the AI Supply chain, namely system operators, developers, data custodians, end-users and other affected entities, with each principle linked to a particular stage of the AI system lifecycle.
On 31 July 2025, the British Standards Institution (BSI) launched the world’s first international standard for independent audits of AI systems aiming to ensure consistent evaluation of AI reliability, fairness and safety.
Additionally, in July 2025, the Government signed non-binding arrangements with several frontier AI model providers, to foster adoption in public services including deployment in ‘AI Growth Zones’.
The AI Security Institute continues to publish evaluations of frontier AI models and released an inaugural capabilities report assessing the most advanced AI systems in December 2025.
In April 2026, the Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 were made, coming into force on 12 May 2026. These Regulations require the Information Commissioner to prepare a statutory code of practice on the processing of personal data in relation to developing and using AI and automated decision-making systems.
In June 2026, the Government established the AI Economics Institute (AIEI), a joint unit between HM Treasury and the Department for Science, Innovation and Technology, to analyse the economic impacts of advanced AI. The AIEI aims to strengthen the evidence base on how AI affects productivity, labour markets, firms and income distribution, supporting a proactive UK approach to shaping AI’s economic impact.
In March 2026, the Government published a report and impact assessment on Copyright and Artificial Intelligence, fulfilling its commitment under the Data (Use and Access) Act 2025. The report addresses how copyright law should apply to the training of AI models, including consideration of whether to introduce a text and data mining exception for commercial purposes. Following extensive consultation, the Government confirmed that it no longer has a preferred policy option, and is gathering further evidence while engaging stakeholders on potential approaches.
