--- title: "United Kingdom — Global AI Monitor" canonical: https://artificial-intelligence.gi/jurisdictions/united-kingdom/ source_html: /jurisdictions/united-kingdom/index.html description: "United Kingdom AI governance record: 43 instruments, 23 obligations and 140 evidenced claims across 12 modules. Research as of 8 Oct 2026." generated_at: 2026-10-25T22:24:54Z content_sha256: 85b9419c0e3e1195c958b4acc0918e431489fa9c939b0029c9183ceca0b3f74b generator: "fe-fleet/md-twin@1.0" --- # United Kingdom UK 10 active modules 2 quiet [Build report with United Kingdom](/reports/?t=entry&j=UK)[Ask Co-Pilot](/reports/?t=copilot&j=UK)[Request deeper dive](/reports/?ask=UK#ask) Framework status Artificial Intelligence (Regulation) Bill [HL] (Lord Holmes of Richmond) (Draft, no legal force): House of Lords Private Member's Bill sponsored by Lord Holmes of Richmond to make provision for the regulation of artificial intelligence. Main regulator Regulator [No cross-sector AI regulator. Policy lead: Department for Science, Innovation and Technology (DSIT); frontier-risk body: AI Security Institute](https://www.gov.uk/government/organisations/department-for-science-innovation-and-technology) Next milestone 6 Nov 2026 : Ofcom evidence request on protections for women and girls closes ([05 Transparency & Synthetic Content](#sec-mod-transparency_and_synthetic_content)) Record status Preview · baseline record · 117 sources (117 retrieved) · 28 Probable (R-3/R-4) · Not yet expert-reviewed AI-assembled from cited sources · evidence-gated · Not yet expert-reviewed · Not legal, compliance or investment advice · [Methodology →](/methodology/#ai-content-disclosure) Disclosure details Facts are machine-assembled from cited public sources. Individual claims have not each been independently verified by a human reviewer. See [methodology](/methodology/). Research checked 8 Oct 2026 · Updated 9 Oct 2026 Record history Research as of 8 Oct 2026 · Record last changed 9 Oct 2026 · Publication date pending · Page built 23 Oct 2026 43 Instruments 43 Current instruments 7 Binding, in force +5 more binding, in-force date not recorded 23 Obligations 140 Claims 4 Upcoming milestones 117 Sources Summary counts across modules ? A claim can sit in more than one module; the totals above count each once. ## Next milestones in this record - 6 Nov 2026Ofcom evidence request on protections for women and girls closes Scheduled · [05 Transparency & Synthetic Content](#sec-mod-transparency_and_synthetic_content) - 6 Nov 2026Ofcom evidence request on protections for women and girls closes Scheduled · [10 Authorities & Enforcement](#sec-mod-authorities_and_enforcement) - 13 Nov 2026Second reading of the Artificial Superintelligence Bill listed Scheduled · [01 AI Framework Law](#sec-mod-ai_framework_law) - 13 Nov 2026Second reading of the Artificial Superintelligence Bill listed Scheduled · [02 Prohibited Practices](#sec-mod-prohibited_practices) - 31 Dec 2026First regulations (social media for under-16s) to be laid before Parliament "by the end of the year"; AI chatbot measures later by regulations Scheduled · [07 Sectoral & Public-Sector AI](#sec-mod-sectoral_and_public_sector_ai) Jump to module (12) × 12 of 12 modules View options & filters Show Active Quiet Has items under review Density Comfortable Compact Expand all sources Reset all ### 01AI Framework LawActive Derived: Probable▾# Artificial Intelligence (Regulation) Bill [HL] (Lord Holmes of Richmond) (Draft, no legal force): House of Lords Private Member's Bill sponsored by Lord Holmes of Richmond to make provision for the regulation of artificial intelligence. 6 instruments · 0 obligations · 20 claims · Next: 13 Nov 2026 (Second reading of the Artificial Superintelligence Bill listed) 6 instruments (6 current) · 0 obligations · 20 claims · 3 milestones Instruments - Artificial Intelligence (Regulation) Bill [HL] (Lord Holmes of Richmond) Draft, no legal forceHouse of Lords Private Member's Bill sponsored by Lord Holmes of Richmond to make provision for the regulation of artificial intelligence. Parliament's stages page lists a first reading in the Lords on 4 March 2025 and a second reading with "Date to be announced"; the Bill Papers page shows it in the 2024-26 session. A tracker reports it fell at the end of the session on 30 April 2026; Parliament's own pages do not state this.Authority: UK Parliament · Verified 8 Oct 2026 · [Official text](https://bills.parliament.uk/bills/3942) - Artificial Superintelligence Bill (Commons Private Member's Bill, Alex Sobel) Draft, no legal forceCommons Private Member's Bill under the Ten Minute Rule, introduced by Alex Sobel MP, that would prohibit the development, deployment and operation of artificial superintelligence systems and set up monitoring and control powers. UK Parliament's Bill Papers page records it as a Ten Minute Rule Bill in the 2026-27 session; BBC Parliament covered its introduction on 8 September 2026; second reading is listed by a tracker for 13 November 2026.Authority: UK Parliament · Verified 8 Oct 2026 · [Official text](https://api.parliament.uk/bill-papers/sessions/40) - Council of Europe Framework Convention on AI and Human Rights, Democracy and the Rule of Law (CETS 225) Adopted 2024-09-05; entry into force not recordedInternational treaty opened for signature at Vilnius on 5 September 2024; the UK is among the signatories but the Convention has not yet entered into force.Conditionally binding · Verified 8 Oct 2026 · [Official text](https://rm.coe.int/1680afae3c) - EU Artificial Intelligence Act (applies to UK providers and deployers whose output is used in the EU) Applies since 2025-02-02EU regulation that reaches providers and deployers established in third countries, including the UK, where AI system output is used in the Union. Its prohibited-practices chapter has applied since 2 February 2025.Binding · Verified 8 Oct 2026 · [Official text](https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng) - Joint Committee on Human Rights report on human rights and the regulation of AI (HC 160) Date not recordedCommittee report calling for a dedicated AI Bill and a new single AI regulator, finding AISI engages with developers voluntarily and has no statutory power. Not binding; Government is expected to respond.Non-binding · Authority: Joint Committee on Human Rights · Verified 8 Oct 2026 · [Official text](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) - UK pro-innovation, regulator-led approach to AI regulation (non-statutory cross-sectoral principles) Published 2023-03-29Non-statutory framework under which existing sector regulators apply cross-sectoral AI principles at their own discretion; the UK has no horizontal AI Act.Non-binding · Authority: Department for Science, Innovation and Technology · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/ai-regulation-a-pro-innovation-approach/white-paper) Milestones - 2 Feb 2025EU AI Act Chapters I and II (including Art 5 prohibitions) apply MetEU Artificial Intelligence Act (applies to UK providers and deployers whose output is used in the EU) - 4 Mar 2025HL Bill 76 (as introduced) published MetArtificial Intelligence (Regulation) Bill [HL] (Lord Holmes of Richmond) - 13 Nov 2026Second reading of the Artificial Superintelligence Bill listed UpcomingArtificial Superintelligence Bill (Commons Private Member's Bill, Alex Sobel) Claims and evidence (20) - The Joint Committee on Human Rights recommended on 14 September 2026 that the government introduce a dedicated AI Bill, stating that no jurisdiction, including the UK, currently has a fit-for-purpose legislative and regulatory approach to AI.Confidence: Confirmed · As of 14 Sep 2026 · evidencedEvidence and sources[Joint Committee on Human Rights, Human Rights and the Regulation of AI (HC/HL 160)](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) T1 · retrieved · retrieved 8 Oct 2026 · JCHR report, recommendation (para 178)The government should introduce a new AI Bill, as promised in the 2024 King's Speech, to place AI regulation on a sound basis and give full effect to the Framework Convention. - [Wide-ranging AI Bill needed to address severe human rights risks posed by AI (JCHR press release)](https://committees.parliament.uk/committee/93/human-rights-joint-committee/news/217859/wideranging-ai-bill-needed-to-address-severe-human-rights-risks-posed-by-ai) T1 · retrieved · retrieved 8 Oct 2026 · Chair's commentNowhere in the world, including the UK, has a current legislative and regulatory approach to AI that is fit for purpose. - No standalone horizontal AI statute was announced in the May 2026 King's Speech; the UK continues to govern AI through existing data protection, online safety, copyright, competition, product and sector-specific law and regulator-led non-statutory principles.Confidence: Confirmed · As of 13 May 2026 · evidencedEvidence and sources[AI in the King's Speech 2026: Regulating for Growth Bill announced](https://www.twobirds.com/en/insights/2026/ai-in-the-kings-speech-2026-regulating-for-growth-bill-announced) T3 · retrieved · retrieved 8 Oct 2026 · Bird & Bird, section 1No standalone AI bill was announced today. This was expected, based on repeated statements from Liz - The UK has no horizontal AI statute: its framework relies on non-statutory cross-sectoral principles applied at regulators' discretion, and no AI bill was announced in the May 2026 King's Speech.Confidence: Confirmed · As of 14 Sep 2026 · evidencedEvidence and sources[A pro-innovation approach to AI regulation (White Paper, CP 815)](https://www.gov.uk/government/publications/ai-regulation-a-pro-innovation-approach/white-paper) T1 · retrieved · retrieved 8 Oct 2026 · White Paper, executive summaryFollowing this initial non-statutory period of implementation, and when parliamentary time allows, we anticipate introducing a statutory duty requiring regulators to have due regard to the principles. - [A pro-innovation approach to AI regulation (White Paper, CP 815)](https://www.gov.uk/government/publications/ai-regulation-a-pro-innovation-approach/white-paper) T1 · retrieved · retrieved 8 Oct 2026 · White Paper, executive summaryThe application of the principles will initially be at the discretion of the regulators, allowing prioritisation according to the needs of their sectors. - [Joint Committee on Human Rights, Human Rights and the Regulation of AI (HC/HL 160)](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) T1 · retrieved · retrieved 8 Oct 2026 · JCHR report, recommendation (para 178)The government should introduce a new AI Bill, as promised in the 2024 King's Speech, to place AI regulation on a sound basis and give full effect to the Framework Convention. - [AI in the King's Speech 2026: Regulating for Growth Bill announced](https://www.twobirds.com/en/insights/2026/ai-in-the-kings-speech-2026-regulating-for-growth-bill-announced) T3 · retrieved · retrieved 8 Oct 2026 · Bird & Bird, section 1No standalone AI bill was announced today. This was expected, based on repeated statements from Liz - The White Paper proposed that regulators use a set of cross-sectoral principles to guide responses to AI risks, applied initially at their discretion.Confidence: Probable · As of 29 Mar 2023 · evidencedEvidence and sources[A pro-innovation approach to AI regulation (White Paper, CP 815)](https://www.gov.uk/government/publications/ai-regulation-a-pro-innovation-approach/white-paper) T1 · retrieved · retrieved 8 Oct 2026 · White Paper, executive summaryProviding a set of cross-sectoral principles to guide regulator responses to AI risks and opportunities(section 3.2.3). - [A pro-innovation approach to AI regulation (White Paper, CP 815)](https://www.gov.uk/government/publications/ai-regulation-a-pro-innovation-approach/white-paper) T1 · retrieved · retrieved 8 Oct 2026 · White Paper, executive summaryThe application of the principles will initially be at the discretion of the regulators, allowing prioritisation according to the needs of their sectors. - Derived: Probable The EU AI Act applies to UK-based providers and deployers of AI systems where the system's output is used in the Union.Confidence: Probable · As of 2 Feb 2025 · evidencedEvidence and sources[Regulation (EU) 2024/1689 (Artificial Intelligence Act), Official Journal text](https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng) T1 · retrieved · retrieved 8 Oct 2026 · Regulation (EU) 2024/1689, Art 2(1)(c)providers and deployers of AI systems that have their place of establishment or are located in a third country, where the output produced by the AI system is used in the Union;| - Derived: Probable The UK signed the Council of Europe Framework Convention on AI on 5 September 2024, but it has not been ratified by the UK and has not entered into force.Confidence: Confirmed · As of 5 Sep 2024 · evidencedEvidence and sources[CETS 225 - Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law](https://rm.coe.int/1680afae3c) T1 · retrieved · retrieved 8 Oct 2026 · CETS 225, Art 30(3)This Convention shall enter into force on the first day of the month following the expiration of a - [Joint Committee on Human Rights, Human Rights and the Regulation of AI (HC/HL 160)](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) T1 · retrieved · retrieved 8 Oct 2026 · JCHR report (Council of Europe Framework Convention section)legally binding international instrument targeting AI, although it has not yet entered into force. Seventeen states and organisations have signed the Convention so far, including the UK, the USA, the - [Joint Committee on Human Rights, Human Rights and the Regulation of AI (HC/HL 160)](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) T1 · retrieved · retrieved 8 Oct 2026 · JCHR report (Council of Europe Framework Convention section)Seventeen states and organisations have signed the Convention so far, including the UK, the USA, the EU and many European states. It therefore represents a widely accepted international understanding of how AI systems might adversely affect human rig - The Joint Committee on Human Rights' report of 14 September 2026 recommended the Government introduce a new AI Bill to place AI regulation on a sound statutory basis and give effect to the Council of Europe Framework Convention on AI.Confidence: Confirmed · As of 14 Sep 2026 · evidencedEvidence and sources[Joint Committee on Human Rights, Human Rights and the Regulation of AI (HC/HL 160)](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) T1 · retrieved · retrieved 8 Oct 2026 · JCHR report, recommendation (para 178)The government should introduce a new AI Bill, as promised in the 2024 King's Speech, to place AI regulation on a sound basis and give full effect to the Framework Convention. - [Wide-ranging AI Bill needed to address severe human rights risks posed by AI (JCHR press release)](https://committees.parliament.uk/committee/93/human-rights-joint-committee/news/217859/wideranging-ai-bill-needed-to-address-severe-human-rights-risks-posed-by-ai) T1 · retrieved · retrieved 8 Oct 2026 · Chair's commentNowhere in the world, including the UK, has a current legislative and regulatory approach to AI that is fit for purpose. - The Artificial Superintelligence Bill is a Commons Private Member's Bill under the Ten Minute Rule in the 2026-27 session (UK Parliament Bill Papers, updated 9 September 2026).Confidence: Confirmed · evidencedEvidence and sources[2nd session of the 59th Parliament (Bill Papers: list of bills)](https://api.parliament.uk/bill-papers/sessions/40) T1 · retrieved · retrieved 8 Oct 2026 · List of bills, 2nd session of the 59th Parliament, item 54. Arm's-Length Bodies (Review) Bill 5. Artificial Superintelligence Bill 6. Automated Online Software (Access and Transparency) Bill 7. Bailiffs (Warrants of - [Private Members' Bill (under the Ten Minute Rule) (Bill Papers: bill type)](https://api.parliament.uk/bill-papers/bill-types/5) T1 · retrieved · retrieved 8 Oct 2026 · Ten Minute Rule Private Members' Bills list, items 52-5352. Artificial Intelligence (Regulation and Workers' Rights) Bill 53. Artificial Superintelligence Bill 54. Asbestos (national register) Bil - [Private Members' Bill (under the Ten Minute Rule) (Bill Papers: bill type)](https://api.parliament.uk/bill-papers/bill-types/5) T1 · retrieved · retrieved 8 Oct 2026 · Bill type descriptionTen Minute Rule Bills are a type of Private Members' Bill. Ten Minute Rule bills are often an opportunity for Members to voice an opinion on - [Artificial Superintelligence Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4288) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Bill type:|Private Members' Bill (under the Ten Minute Rule)| |--|--| |Originating House:|House of Commons| |Current House:|House of Commons| |Originating session (bill syste - [Artificial Superintelligence Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4288) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Originating session (bill system ID):|Parliament 59 - Session 2 (2026-27)| |Is Act:|false| |Is with - [BBC Parliament: Ten Minute Rule Bill, Artificial Superintelligence](https://www.bbc.co.uk/programmes/m0031z8t) T2 · retrieved · retrieved 8 Oct 2026 · Programme descriptionCoverage of the introduction to the House of Commons of a ten minute rule bill, tabled by Labour MP Alex Sobel, on banning the development, deployment and operation of artificial superintelligence systems, from Tuesday 8 September. - The Artificial Superintelligence Bill is a Private Member's Bill awaiting second reading and has no legal force.Confidence: Probable · As of 8 Sep 2026 · evidencedEvidence and sources[Private Members' Bill (under the Ten Minute Rule) (Bill Papers: bill type)](https://api.parliament.uk/bill-papers/bill-types/5) T1 · retrieved · retrieved 8 Oct 2026 · Ten Minute Rule Private Members' Bills list, items 52-5352. Artificial Intelligence (Regulation and Workers' Rights) Bill 53. Artificial Superintelligence Bill 54. Asbestos (national register) Bil - [Private Members' Bill (under the Ten Minute Rule) (Bill Papers: bill type)](https://api.parliament.uk/bill-papers/bill-types/5) T1 · retrieved · retrieved 8 Oct 2026 · Bill type descriptionTen Minute Rule Bills are a type of Private Members' Bill. Ten Minute Rule bills are often an opportunity for Members to voice an opinion on - [Artificial Superintelligence Bill (Order Paper bill tracker)](https://orderpaper.co.uk/bill/artificial-superintelligence-bill) T3 · retrieved · retrieved 8 Oct 2026 · Progress through ParliamentCommons 1st reading 08 Sept Commons 2nd reading 13 Nov DocumentsOpen on pa - [Artificial Superintelligence Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4288) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Bill type:|Private Members' Bill (under the Ten Minute Rule)| |--|--| |Originating House:|House of Commons| |Current House:|House of Commons| |Originating session (bill syste - [Artificial Superintelligence Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4288) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Originating session (bill system ID):|Parliament 59 - Session 2 (2026-27)| |Is Act:|false| |Is with - The Artificial Superintelligence Bill was introduced in the House of Commons on Tuesday 8 September 2026 (BBC Parliament coverage of the Ten Minute Rule introduction; Parliament Bill Papers page created by 9 September).Confidence: Probable · As of 8 Sep 2026 · evidencedEvidence and sources[BBC Parliament: Ten Minute Rule Bill, Artificial Superintelligence](https://www.bbc.co.uk/programmes/m0031z8t) T2 · retrieved · retrieved 8 Oct 2026 · Programme descriptionCoverage of the introduction to the House of Commons of a ten minute rule bill, tabled by Labour MP Alex Sobel, on banning the development, deployment and operation of artificial superintelligence systems, from Tuesday 8 September. - [Artificial Superintelligence Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4288) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Is defeated:|false| |Updated:|2026-09-09 10:40:05 UTC| - [Artificial Superintelligence Bill (Order Paper bill tracker)](https://orderpaper.co.uk/bill/artificial-superintelligence-bill) T3 · retrieved · retrieved 8 Oct 2026 · Progress through ParliamentCommons 1st reading 08 Sept Commons 2nd reading 13 Nov DocumentsOpen on pa - [AI judgment day on the horizon, while UK lawmakers play catch-up (Lewis Silkin)](https://www.lewissilkin.com/insights/2026/09/14/ai-judgment-day-on-the-horizon-while-uk-lawmakers-play-catch-up) T3 · retrieved · retrieved 8 Oct 2026 · Section "Private Member's Bill on AI superintelligence"Prior to Jones’ letter, Labour MP Alex Sobel introduced a Private Member’s Bill in the House of Commons proposing to prohibit the development, deployment and operation of artificial superintelligence systems. The Bill sets out to define superintelligent AI by - [2nd session of the 59th Parliament (Bill Papers: list of bills)](https://api.parliament.uk/bill-papers/sessions/40) T1 · retrieved · retrieved 8 Oct 2026 · List of bills, 2nd session of the 59th Parliament, item 54. Arm's-Length Bodies (Review) Bill 5. Artificial Superintelligence Bill 6. Automated Online Software (Access and Transparency) Bill 7. Bailiffs (Warrants of - The bill's long title says it would prohibit the development, deployment and operation of artificial superintelligence systems and establish monitoring and control powers over such systems; a law-firm note adds that it defines superintelligence by outcomes.Confidence: Uncertain · As of 8 Sep 2026 · evidencedEvidence and sources[Artificial Superintelligence Bill (Order Paper bill tracker)](https://orderpaper.co.uk/bill/artificial-superintelligence-bill) T3 · retrieved · retrieved 8 Oct 2026 · Long titleA Bill to make provision to prohibit the development, deployment and operation of artificial superintelligence systems; to establish monitoring and control powers in respect of such systems; and for connected purposes. - [AI judgment day on the horizon, while UK lawmakers play catch-up (Lewis Silkin)](https://www.lewissilkin.com/insights/2026/09/14/ai-judgment-day-on-the-horizon-while-uk-lawmakers-play-catch-up) T3 · retrieved · retrieved 8 Oct 2026 · Section "Private Member's Bill on AI superintelligence"Prior to Jones’ letter, Labour MP Alex Sobel introduced a Private Member’s Bill in the House of Commons proposing to prohibit the development, deployment and operation of artificial superintelligence systems. The Bill sets out to define superintelligent AI by - [2nd session of the 59th Parliament (Bill Papers: list of bills)](https://api.parliament.uk/bill-papers/sessions/40) T1 · retrieved · retrieved 8 Oct 2026 · List of bills, 2nd session of the 59th Parliament, item 54. Arm's-Length Bodies (Review) Bill 5. Artificial Superintelligence Bill 6. Automated Online Software (Access and Transparency) Bill 7. Bailiffs (Warrants of - [BBC Parliament: Ten Minute Rule Bill, Artificial Superintelligence](https://www.bbc.co.uk/programmes/m0031z8t) T2 · retrieved · retrieved 8 Oct 2026 · Programme descriptionCoverage of the introduction to the House of Commons of a ten minute rule bill, tabled by Labour MP Alex Sobel, on banning the development, deployment and operation of artificial superintelligence systems, from Tuesday 8 September. - A tracker and a law-firm note list second reading of the Artificial Superintelligence Bill for 13 November 2026 and observe that Private Members' Bills rarely become law.Confidence: Uncertain · As of 13 Nov 2026 · evidencedEvidence and sources[Artificial Superintelligence Bill (Order Paper bill tracker)](https://orderpaper.co.uk/bill/artificial-superintelligence-bill) T3 · retrieved · retrieved 8 Oct 2026 · Progress through ParliamentCommons 1st reading 08 Sept Commons 2nd reading 13 Nov DocumentsOpen on pa - [AI judgment day on the horizon, while UK lawmakers play catch-up (Lewis Silkin)](https://www.lewissilkin.com/insights/2026/09/14/ai-judgment-day-on-the-horizon-while-uk-lawmakers-play-catch-up) T3 · retrieved · retrieved 8 Oct 2026 · Section "Private Member's Bill on AI superintelligence"The Bill is scheduled for its second reading on 13 November 2026, but given the government’s current legislative priorit - [AI judgment day on the horizon, while UK lawmakers play catch-up (Lewis Silkin)](https://www.lewissilkin.com/insights/2026/09/14/ai-judgment-day-on-the-horizon-while-uk-lawmakers-play-catch-up) T3 · retrieved · retrieved 8 Oct 2026 · Section "Private Member's Bill on AI superintelligence"Those familiar with UK parliamentary procedure will know that Private Members’ Bills rarely make it into law. They are often used as a vehic - [2nd session of the 59th Parliament (Bill Papers: list of bills)](https://api.parliament.uk/bill-papers/sessions/40) T1 · retrieved · retrieved 8 Oct 2026 · List of bills, 2nd session of the 59th Parliament, item 54. Arm's-Length Bodies (Review) Bill 5. Artificial Superintelligence Bill 6. Automated Online Software (Access and Transparency) Bill 7. Bailiffs (Warrants of - Derived: Probable BBC News reports that the Cabinet Office, which leads on AI safety, said the UK "cannot simply turn AI off" and that the Government opposes the legislation, which makes it unlikely to become law.Confidence: Uncertain · As of 11 Sep 2026 · evidencedEvidence and sources[UK government rejects 'kill switch' idea for dangerous AI (BBC News)](https://www.bbc.com/news/articles/c3eq7kl5l00o) T2 · retrieved · retrieved 8 Oct 2026 · Article bodyBut the Cabinet Office - the part of government which leads on AI safety - said the UK "cannot simply turn AI off". - [UK government rejects 'kill switch' idea for dangerous AI (BBC News)](https://www.bbc.com/news/articles/c3eq7kl5l00o) T2 · retrieved · retrieved 8 Oct 2026 · Article bodyThe government's opposition to the legislation does not prevent it from progressing through parliament, but makes it unlikely it will become law. - The Artificial Intelligence (Regulation) Bill [HL], sponsored by Lord Holmes of Richmond, is recorded on bills.parliament.uk with its current version HL Bill 76 as introduced.Confidence: Probable · As of 4 Mar 2025 · evidencedEvidence and sources[Artificial Intelligence (Regulation) Bill [HL] - Parliamentary Bills](https://bills.parliament.uk/bills/3942) T1 · retrieved · retrieved 8 Oct 2026 · Long titleA bill to make provision for the regulation of artificial intelligence; and for connected purposes. - [Artificial Intelligence (Regulation) Bill [HL] - Parliamentary Bills](https://bills.parliament.uk/bills/3942) T1 · retrieved · retrieved 8 Oct 2026 · Sponsor and current versionSponsor Lord Holmes of Richmond Conservative Life peer Current version of the Bill HL Bill 76 (as introduced) Get File View PDF document Opens in new window Vie - The Artificial Intelligence (Regulation) Bill [HL] is a bill with only its introduced text recorded and has no legal force.Confidence: Probable · As of 4 Mar 2025 · evidencedEvidence and sources[Artificial Intelligence (Regulation) Bill [HL] - Parliamentary Bills](https://bills.parliament.uk/bills/3942) T1 · retrieved · retrieved 8 Oct 2026 · Sponsor and current versionSponsor Lord Holmes of Richmond Conservative Life peer Current version of the Bill HL Bill 76 (as introduced) Get File View PDF document Opens in new window Vie - [Artificial Intelligence (Regulation) Bill [HL] - Parliamentary Bills](https://bills.parliament.uk/bills/3942) T1 · retrieved · retrieved 8 Oct 2026 · Version date and stagesDownload document 4 March 2025 Lords Bill passage Bill started in the House of Lords 1st reading 2nd reading Committee stage Report stage 3r - HL Bill 76, the Artificial Intelligence (Regulation) Bill [HL], is dated 4 March 2025 on its Parliament page.Confidence: Probable · As of 4 Mar 2025 · evidencedEvidence and sources[Artificial Intelligence (Regulation) Bill [HL] - Parliamentary Bills](https://bills.parliament.uk/bills/3942) T1 · retrieved · retrieved 8 Oct 2026 · Version date and stagesDownload document 4 March 2025 Lords Bill passage Bill started in the House of Lords 1st reading 2nd reading Committee stage Report stage 3r - [Artificial Intelligence (Regulation) Bill [HL] - Parliamentary Bills](https://bills.parliament.uk/bills/3942) T1 · retrieved · retrieved 8 Oct 2026 · Sponsor and current versionSponsor Lord Holmes of Richmond Conservative Life peer Current version of the Bill HL Bill 76 (as introduced) Get File View PDF document Opens in new window Vie - Parliament's stages page for the Artificial Intelligence (Regulation) Bill [HL] lists a first reading in the Lords on 4 March 2025 and a second reading with "Date to be announced"; the bill is in the 2024-26 session and is not marked withdrawn or defeated.Confidence: Probable · As of 4 Mar 2025 · evidencedEvidence and sources[Artificial Intelligence (Regulation) Bill [HL]: stages (UK Parliament)](https://bills.parliament.uk/bills/3942/stages) T1 · retrieved · retrieved 8 Oct 2026 · Stages tabSession 2024-25 (2) 2 2nd reading Date to be announced Lords 1 1st reading 4 March 2025 Lords - [Artificial Intelligence (Regulation) Bill [HL] (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/3942) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Bill type:|Private Members' Bill (Starting in the House of Lords)| |--|--| |Originating House:|House of Lords| |Current House:|House of Lords| |Originating session (bill - [Artificial Intelligence (Regulation) Bill [HL] (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/3942) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Originating session (bill system ID):|Parliament 59 - Session 1 (2024-26)| |Is Act:|false| |Is with - Derived: Probable A tracker reports that the Artificial Intelligence (Regulation) Bill [HL] fell at the end of the parliamentary session on 30 April 2026 without reaching second reading.Confidence: Uncertain · As of 30 Apr 2026 · evidencedEvidence and sources[UK AI Regulation, September 2026 (Vorp Labs country page)](https://vorplabs.com/ai-regulatory-updates/united-kingdom) T3 · retrieved · retrieved 8 Oct 2026 · Page summaryThe Lords private member's AI Regulation Bill fell on April 30, 2026 and is not pending law. - [UK AI Regulation, September 2026 (Vorp Labs country page)](https://vorplabs.com/ai-regulatory-updates/united-kingdom) T3 · retrieved · retrieved 8 Oct 2026 · Key dates, 30 April 2026The Artificial Intelligence (Regulation) Bill [HL] fell at the end of the parliamentary session without reaching Second Reading - [Artificial Intelligence (Regulation) Bill [HL]: stages (UK Parliament)](https://bills.parliament.uk/bills/3942/stages) T1 · retrieved · retrieved 8 Oct 2026 · Stages tabSession 2024-25 (2) 2 2nd reading Date to be announced Lords 1 1st reading 4 March 2025 Lords - The Joint Committee on Human Rights published a report on human rights and the regulation of AI (HC 160).Confidence: Confirmed · evidencedEvidence and sources[Joint Committee on Human Rights, Human Rights and the Regulation of AI (HC/HL 160)](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) T1 · retrieved · retrieved 8 Oct 2026 · SummaryIt must bring in a dedicated AI Bill, and set up a new regulator, to create tailored, effective protection for human rights in the UK. - [Wide-ranging AI Bill needed to address severe human rights risks posed by AI (JCHR press release)](https://committees.parliament.uk/committee/93/human-rights-joint-committee/news/217859/wideranging-ai-bill-needed-to-address-severe-human-rights-risks-posed-by-ai) T1 · retrieved · retrieved 8 Oct 2026 · Chair's commentNowhere in the world, including the UK, has a current legislative and regulatory approach to AI that is fit for purpose. - The Committee recommends that the Government introduce a dedicated AI Bill and establish a new single AI regulator.Confidence: Confirmed · evidencedEvidence and sources[Joint Committee on Human Rights, Human Rights and the Regulation of AI (HC/HL 160)](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) T1 · retrieved · retrieved 8 Oct 2026 · SummaryIt must bring in a dedicated AI Bill, and set up a new regulator, to create tailored, effective protection for human rights in the UK. - [Wide-ranging AI Bill needed to address severe human rights risks posed by AI (JCHR press release)](https://committees.parliament.uk/committee/93/human-rights-joint-committee/news/217859/wideranging-ai-bill-needed-to-address-severe-human-rights-risks-posed-by-ai) T1 · retrieved · retrieved 8 Oct 2026 · Chair's commentNowhere in the world, including the UK, has a current legislative and regulatory approach to AI that is fit for purpose. Open evidence ### 02Prohibited PracticesActive Derived: Probable▾# Artificial Superintelligence Bill (Commons Private Member's Bill, Alex Sobel) (Draft, no legal force): Commons Private Member's Bill under the Ten Minute Rule, introduced by Alex Sobel MP, that would prohibit the development, deployment and operation of artificial superintelligence systems and set up monitoring and control powers. 4 instruments · 5 obligations · 6 claims · Next: 13 Nov 2026 (Second reading of the Artificial Superintelligence Bill listed) 4 instruments (4 current) · 5 obligations · 6 claims · 6 milestones Instruments - Artificial Superintelligence Bill (Commons Private Member's Bill, Alex Sobel) Draft, no legal forceCommons Private Member's Bill under the Ten Minute Rule, introduced by Alex Sobel MP, that would prohibit the development, deployment and operation of artificial superintelligence systems and set up monitoring and control powers. UK Parliament's Bill Papers page records it as a Ten Minute Rule Bill in the 2026-27 session; BBC Parliament covered its introduction on 8 September 2026; second reading is listed by a tracker for 13 November 2026.Authority: UK Parliament · Verified 8 Oct 2026 · [Official text](https://api.parliament.uk/bill-papers/sessions/40) - Crime and Policing Act 2026 In force since 2026-04-29Creates an offence of making AI models optimised for CSA images (s.72, uncommenced), an offence of supplying purported-intimate-image generators (s.99, in force 29 June 2026), and a power to extend Online Safety Act duties to AI services (s.248, in force at Royal Assent).Binding · Authority: Office of Communications (Ofcom) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2026/20) - Data (Use and Access) Act 2025 In force since 2025-08-20Act amending UK data protection law; for AI governance it creates the s.138 purported-intimate-image offences, the ss.135-137 copyright-and-AI reporting duties, and establishes the Information Commission.Binding · Authority: Information Commission (successor to the Information Commissioner's Office) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2025/18) - EU Artificial Intelligence Act (applies to UK providers and deployers whose output is used in the EU) Applies since 2025-02-02EU regulation that reaches providers and deployers established in third countries, including the UK, where AI system output is used in the Union. Its prohibited-practices chapter has applied since 2 February 2025.Binding · Verified 8 Oct 2026 · [Official text](https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng) Obligations - Sexual Offences Act 2003 s.66E (inserted by DUAA s.138)It is an offence to intentionally create a purported intimate image of another person without consent and without reasonable belief in consent.prohibition · Applies to: other · Data (Use and Access) Act 2025 - Sexual Offences Act 2003 s.66F (inserted by DUAA s.138)It is an offence to intentionally request the creation of a purported intimate image of another person who does not consent.prohibition · Applies to: other · Data (Use and Access) Act 2025 - Sexual Offences Act 2003 s.46A (inserted by CPA 2026 s.72)It is an offence to make, adapt, possess, supply or offer to supply a CSA image-generator, an AI model or file designed to create child sexual abuse images; s.72 had not been brought into force on the evidence found at 5 October 2026.prohibition · Applies to: other · Crime and Policing Act 2026 - Sexual Offences Act 2003 s.66I (inserted by CPA 2026 s.99)It is an offence to make or adapt, or supply or offer to supply, a thing (including a program or service) for use as a generator of purported intimate images; it is a defence to show all reasonable steps were taken to prevent use without consent.prohibition · Applies to: provider · Crime and Policing Act 2026 - Article 5(1)Placing on the market, putting into service or use of listed prohibited AI practices is banned; the Act reaches UK providers and deployers whose output is used in the Union.prohibition · Applies to: provider · EU Artificial Intelligence Act (applies to UK providers and deployers whose output is used in the EU) Milestones - 2 Feb 2025EU AI Act Chapters I and II (including Art 5 prohibitions) apply MetEU Artificial Intelligence Act (applies to UK providers and deployers whose output is used in the EU) - 6 Feb 2026Sexual Offences Act 2003 ss.66E-66F (purported intimate image offences) in force MetData (Use and Access) Act 2025 - 18 Mar 2026Section 136 report on copyright works and AI due within nine months of 19 June 2025; report published 18 March 2026 MetData (Use and Access) Act 2025 - 29 Apr 2026Section 248 power to extend Online Safety Act duties to AI services in force at Royal Assent MetCrime and Policing Act 2026 - 29 Jun 2026Section 99 (purported intimate image generators) and ss.100-101 in force MetCrime and Policing Act 2026 - 13 Nov 2026Second reading of the Artificial Superintelligence Bill listed UpcomingArtificial Superintelligence Bill (Commons Private Member's Bill, Alex Sobel) Claims and evidence (6) - Derived: Probable Section 138 of the Data (Use and Access) Act 2025, creating offences of intentionally creating or requesting the creation of a purported intimate image of another person without consent, came into force on 6 February 2026 under SI 2026/31.Confidence: Confirmed · As of 6 Feb 2026 · evidencedEvidence and sources[Data (Use and Access) Act 2025, section 138 (Creating, or requesting the creation of, purported intimate image of adult)](https://www.legislation.gov.uk/ukpga/2025/18/section/138) T1 · retrieved · retrieved 8 Oct 2026 · s.138 commencement informationS. 138 in force at 6.2.2026 by S.I. 2026/31, reg. 2 - [The Data (Use and Access) Act 2025 (Commencement No. 5) Regulations 2026 (SI 2026/31)](https://www.legislation.gov.uk/uksi/2026/31/made) T1 · retrieved · retrieved 8 Oct 2026 · SI 2026/31 reg 2Section 138 of the Data (Use and Access) Act 2025 (creating, or requesting the creation of, purported intimate image of adult) comes into force on 6th February 2026. - Sexual Offences Act 2003 section 66F, inserted by section 138, makes it an offence to intentionally request the creation of a purported intimate image of a non-consenting person.Confidence: Probable · As of 6 Feb 2026 · evidencedEvidence and sources[Data (Use and Access) Act 2025, section 138 (Creating, or requesting the creation of, purported intimate image of adult)](https://www.legislation.gov.uk/ukpga/2025/18/section/138) T1 · retrieved · retrieved 8 Oct 2026 · SOA 2003 s.66E(1) (inserted by DUAA s.138)A intentionally creates a purported intimate image of another person (B), - [Data (Use and Access) Act 2025, section 138 (Creating, or requesting the creation of, purported intimate image of adult)](https://www.legislation.gov.uk/ukpga/2025/18/section/138) T1 · retrieved · retrieved 8 Oct 2026 · SOA 2003 s.66F(1)A intentionally requests the creation of a purported intimate image of another person (B) (either in general or specific terms), - [Data (Use and Access) Act 2025, section 138 (Creating, or requesting the creation of, purported intimate image of adult)](https://www.legislation.gov.uk/ukpga/2025/18/section/138) T1 · retrieved · retrieved 8 Oct 2026 · SOA 2003 s.66E(6)A person who commits an offence under this section is liable on summary conviction to imprisonment for a term not exceeding the maximum term for summary offences or a fine (or both). - Derived: Probable Section 72 of the Crime and Policing Act 2026, which would create an offence of making, adapting, possessing or supplying AI models designed to create child sexual abuse images, had not been commenced as at 5 October 2026.Confidence: Probable · As of 5 Oct 2026 · evidencedEvidence and sources[Crime and Policing Act 2026, section 72 (Child sexual abuse image-generators: England and Wales)](https://www.legislation.gov.uk/ukpga/2026/20/section/72) T1 · retrieved · retrieved 8 Oct 2026 · s.72 (inserting SOA 2003 s.46A(1))(a)to make or adapt a thing for use for creating, or facilitating the creation of, CSA images; - [Crime and Policing Act 2026, section 72 (Child sexual abuse image-generators: England and Wales)](https://www.legislation.gov.uk/ukpga/2026/20/section/72) T1 · retrieved · retrieved 8 Oct 2026 · s.72 commencement informationS. 72 not in force at Royal Assent, see s. 255(1) - [Crime and Policing Act 2026, Explanatory Notes (Part 5, section 72 and related provisions)](https://www.legislation.gov.uk/ukpga/2026/20/notes/division/11/index.htm) T1 · retrieved · retrieved 8 Oct 2026 · Explanatory Notes, s.72 (new s.46A(5))New section 46A(5) provides for the maximum penalty for the offence namely, on conviction on indictment, five years’ imprisonment, or a fine, or both. - [Crime and Policing Act 2026, Part 5 Chapter 1 (child sexual abuse), sections 72-79](https://www.legislation.gov.uk/ukpga/2026/20/part/5/chapter/1) T1 · retrieved · retrieved 8 Oct 2026 · CPA 2026 s.72 commencement note (Part 5 Chapter 1)S. 72 not in force at Royal Assent, see s. 255(1) - [Crime and Policing Act 2026, contents (up to date to 5 October 2026)](https://www.legislation.gov.uk/ukpga/2026/20/contents) T1 · retrieved · retrieved 8 Oct 2026 · Contents page, "Changes to legislation" bannerCrime and Policing Act 2026 is up to date with all changes known to be in force on or before 05 October 2026. There are changes that may be brought into force at a future date. - Derived: Probable Section 99 of the Crime and Policing Act 2026 inserts Sexual Offences Act 2003 section 66I, making it an offence to make, adapt, supply or offer to supply a 'nudification' tool for generating purported intimate images; section 99 came into force on 29 June 2026.Confidence: Confirmed · As of 29 Jun 2026 · evidencedEvidence and sources[Crime and Policing Act 2026, section 99 (purported intimate image generators)](https://www.legislation.gov.uk/ukpga/2026/20/section/99) T1 · retrieved · retrieved 8 Oct 2026 · CPA 2026 s.99 commencement noteS. 99 in force at 29.6.2026 by S.I. 2026/689, reg. 2(1)(i) - [Crime and Policing Act 2026, section 99 (purported intimate image generators)](https://www.legislation.gov.uk/ukpga/2026/20/section/99) T1 · retrieved · retrieved 8 Oct 2026 · CPA 2026 s.99, inserting SOA 2003 s.66I(1)A person commits an offence if the person— (a)makes or adapts a thing, or (b)supplies or offers to supply a thing, for use as a generator of purported intimate images. - [Crime and Policing Act 2026, section 99 (purported intimate image generators)](https://www.legislation.gov.uk/ukpga/2026/20/section/99) T1 · retrieved · retrieved 8 Oct 2026 · SOA 2003 s.66I(2)A “generator of purported intimate images” is a thing for creating, or facilitating the creation of, purported intimate images of a person. - [Crime and Policing Act 2026, section 99 (purported intimate image generators)](https://www.legislation.gov.uk/ukpga/2026/20/section/99) T1 · retrieved · retrieved 8 Oct 2026 · SOA 2003 s.66I(5)(b)(b)on conviction on indictment, to imprisonment for a term not exceeding 3 years or a fine (or both). - The Artificial Superintelligence Bill is a Commons Private Member's Bill under the Ten Minute Rule in the 2026-27 session (UK Parliament Bill Papers, updated 9 September 2026).Confidence: Confirmed · evidencedEvidence and sources[2nd session of the 59th Parliament (Bill Papers: list of bills)](https://api.parliament.uk/bill-papers/sessions/40) T1 · retrieved · retrieved 8 Oct 2026 · List of bills, 2nd session of the 59th Parliament, item 54. Arm's-Length Bodies (Review) Bill 5. Artificial Superintelligence Bill 6. Automated Online Software (Access and Transparency) Bill 7. Bailiffs (Warrants of - [Private Members' Bill (under the Ten Minute Rule) (Bill Papers: bill type)](https://api.parliament.uk/bill-papers/bill-types/5) T1 · retrieved · retrieved 8 Oct 2026 · Ten Minute Rule Private Members' Bills list, items 52-5352. Artificial Intelligence (Regulation and Workers' Rights) Bill 53. Artificial Superintelligence Bill 54. Asbestos (national register) Bil - [Private Members' Bill (under the Ten Minute Rule) (Bill Papers: bill type)](https://api.parliament.uk/bill-papers/bill-types/5) T1 · retrieved · retrieved 8 Oct 2026 · Bill type descriptionTen Minute Rule Bills are a type of Private Members' Bill. Ten Minute Rule bills are often an opportunity for Members to voice an opinion on - [Artificial Superintelligence Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4288) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Bill type:|Private Members' Bill (under the Ten Minute Rule)| |--|--| |Originating House:|House of Commons| |Current House:|House of Commons| |Originating session (bill syste - [Artificial Superintelligence Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4288) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Originating session (bill system ID):|Parliament 59 - Session 2 (2026-27)| |Is Act:|false| |Is with - [BBC Parliament: Ten Minute Rule Bill, Artificial Superintelligence](https://www.bbc.co.uk/programmes/m0031z8t) T2 · retrieved · retrieved 8 Oct 2026 · Programme descriptionCoverage of the introduction to the House of Commons of a ten minute rule bill, tabled by Labour MP Alex Sobel, on banning the development, deployment and operation of artificial superintelligence systems, from Tuesday 8 September. - The bill's long title says it would prohibit the development, deployment and operation of artificial superintelligence systems and establish monitoring and control powers over such systems; a law-firm note adds that it defines superintelligence by outcomes.Confidence: Uncertain · As of 8 Sep 2026 · evidencedEvidence and sources[Artificial Superintelligence Bill (Order Paper bill tracker)](https://orderpaper.co.uk/bill/artificial-superintelligence-bill) T3 · retrieved · retrieved 8 Oct 2026 · Long titleA Bill to make provision to prohibit the development, deployment and operation of artificial superintelligence systems; to establish monitoring and control powers in respect of such systems; and for connected purposes. - [AI judgment day on the horizon, while UK lawmakers play catch-up (Lewis Silkin)](https://www.lewissilkin.com/insights/2026/09/14/ai-judgment-day-on-the-horizon-while-uk-lawmakers-play-catch-up) T3 · retrieved · retrieved 8 Oct 2026 · Section "Private Member's Bill on AI superintelligence"Prior to Jones’ letter, Labour MP Alex Sobel introduced a Private Member’s Bill in the House of Commons proposing to prohibit the development, deployment and operation of artificial superintelligence systems. The Bill sets out to define superintelligent AI by - [2nd session of the 59th Parliament (Bill Papers: list of bills)](https://api.parliament.uk/bill-papers/sessions/40) T1 · retrieved · retrieved 8 Oct 2026 · List of bills, 2nd session of the 59th Parliament, item 54. Arm's-Length Bodies (Review) Bill 5. Artificial Superintelligence Bill 6. Automated Online Software (Access and Transparency) Bill 7. Bailiffs (Warrants of - [BBC Parliament: Ten Minute Rule Bill, Artificial Superintelligence](https://www.bbc.co.uk/programmes/m0031z8t) T2 · retrieved · retrieved 8 Oct 2026 · Programme descriptionCoverage of the introduction to the House of Commons of a ten minute rule bill, tabled by Labour MP Alex Sobel, on banning the development, deployment and operation of artificial superintelligence systems, from Tuesday 8 September. Open evidence ### 03High-Risk SystemsActive▾# Personal Data (Digital Twins) Bill (Commons Private Member's Bill) (Draft, no legal force): Commons Private Member's Bill under the Ten Minute Rule on software using personal data to model individuals' preferences or behaviour; no text papers published; no legal force. 1 instrument · 0 obligations · 3 claims 1 instrument (1 current) · 0 obligations · 3 claims · 0 milestones Instruments - Personal Data (Digital Twins) Bill (Commons Private Member's Bill) Draft, no legal forceCommons Private Member's Bill under the Ten Minute Rule on software using personal data to model individuals' preferences or behaviour; no text papers published; no legal force.Authority: UK Parliament · Verified 8 Oct 2026 · [Official text](https://api.parliament.uk/bill-papers/bills/4295) Claims and evidence (3) - The Personal Data (Digital Twins) Bill is a Commons Private Member's Bill under the Ten Minute Rule in the 2026-27 session; it is not an Act and has not been withdrawn or defeated.Confidence: Probable · evidencedEvidence and sources[Personal Data (Digital Twins) Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4295) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page header and tablePersonal Data (Digital Twins) Bill 1. Bill Papers 2. Bills 3. Personal Data (Digital Twins) Bill # Personal Data (Digital Twins) Bill Parliament bill page |Bill type:|Private Members' Bill (under the Ten Minute Rule)| |--|--| |Originating House:|House of C - [Personal Data (Digital Twins) Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4295) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Originating session (bill system ID):|Parliament 59 - Session 2 (2026-27)| |Is Act:|false| |Is with - The Bill is a Private Member's Bill with no published papers and no legal force.Confidence: Probable · evidencedEvidence and sources[Personal Data (Digital Twins) Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4295) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page header and tablePersonal Data (Digital Twins) Bill 1. Bill Papers 2. Bills 3. Personal Data (Digital Twins) Bill # Personal Data (Digital Twins) Bill Parliament bill page |Bill type:|Private Members' Bill (under the Ten Minute Rule)| |--|--| |Originating House:|House of C - [Personal Data (Digital Twins) Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4295) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Originating session (bill system ID):|Parliament 59 - Session 2 (2026-27)| |Is Act:|false| |Is with - A tracker reports that Dame Chi Onwurah MP introduced the Bill under the Ten Minute Rule on 9 September 2026.Confidence: Uncertain · As of 9 Sep 2026 · evidencedEvidence and sources[United Kingdom AI Regulation tracker (Deep Lex)](https://www.deep-lex.com/ai-regulation-tracker/united-kingdom) T3 · retrieved · retrieved 8 Oct 2026 · Legislative sectionDame Chi Onwurah MP introduced the Personal Data (Digital Twins) Bill under the Ten Minute Rule on 9 September 2026; Open evidence ### 04General-Purpose AIQuiet▾# Nothing recorded for this module in the research of 2026-10-08. 0 instruments · 0 obligations · 0 claims Nothing recorded for this module in the research of 2026-10-08. ### 05Transparency & Synthetic ContentActive Derived: Probable▾# CAP and ASA guidance on AI-generated advertising and deepfakes (Published 2026-06-11): Self-regulatory guidance from CAP and the ASA saying the CAP and BCAP Codes contain no AI-specific rules but apply media-neutrally: misleading deepfake endorsements, harmful AI-generated images and automated ad campaigns are judged under the existing Codes and the advertiser stays responsible. 5 instruments · 6 obligations · 16 claims · Next: 6 Nov 2026 (Ofcom evidence request on protections for women and girls closes) 5 instruments (5 current) · 6 obligations · 16 claims · 6 milestones Instruments - CAP and ASA guidance on AI-generated advertising and deepfakes Published 2026-06-11Self-regulatory guidance from CAP and the ASA saying the CAP and BCAP Codes contain no AI-specific rules but apply media-neutrally: misleading deepfake endorsements, harmful AI-generated images and automated ad campaigns are judged under the existing Codes and the advertiser stays responsible.Regulatory expectation · Authority: Advertising Standards Authority and Committee of Advertising Practice · Verified 8 Oct 2026 · [Official text](https://www.asa.org.uk/news/ai-and-deepfakes-four-things-advertisers-need-to-know-before-they-hit-run.html) - CMA guidance: Complying with consumer law when using AI agents Published 2026-03-09CMA guidance of 9 March 2026 telling businesses that they are responsible for what an AI agent does as for an employee, that they should consider labelling AI agents, and that they should train, monitor and quickly refine agents, with a human in the loop. It sits alongside CMA research on agentic AI and consumers.Non-binding · Authority: Competition and Markets Authority · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) - CMA publisher conduct requirement on Google general search (generative AI controls) Published 2026-06-03; entry into force not recordedConduct requirement imposed by the CMA on Google requiring publisher controls over use of search content in generative AI, clear information, engagement metrics and attribution.Binding · Authority: Competition and Markets Authority · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/find-digital-markets-measures/google-search-publisher-conduct-requirement) - Data (Use and Access) Act 2025 In force since 2025-08-20Act amending UK data protection law; for AI governance it creates the s.138 purported-intimate-image offences, the ss.135-137 copyright-and-AI reporting duties, and establishes the Information Commission.Binding · Authority: Information Commission (successor to the Information Commissioner's Office) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2025/18) - Online Safety Act 2023 Date not recordedAct imposing illegal-content risk assessment and safety duties on regulated user-to-user and search services, enforced by Ofcom with penalties of up to the greater of £18 million or 10% of qualifying worldwide revenue. Ofcom has said it applies to generative AI chatbots and platforms.Binding · Authority: Office of Communications (Ofcom) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2023/50) Obligations - Sexual Offences Act 2003 s.66E (inserted by DUAA s.138)It is an offence to intentionally create a purported intimate image of another person without consent and without reasonable belief in consent.prohibition · Applies to: other · Data (Use and Access) Act 2025 - Online Safety Act 2023 s.9(2)Providers of regulated user-to-user services must carry out a suitable and sufficient illegal content risk assessment.risk management · Applies to: provider · Online Safety Act 2023 - Publisher conduct requirement (final decision and notice)Google must provide publishers with effective controls over use of their search content in generative AI and related transparency, metrics and attribution measures.transparency disclosure · Applies to: provider · CMA publisher conduct requirement on Google general search (generative AI controls) - Guidance section "Tell your customers if you use an AI agent"Businesses using AI agents with customers should consider labelling them so customers are not misled into thinking a real person provides the service, and should not overstate the role of AI.transparency disclosure · Applies to: deployer · CMA guidance: Complying with consumer law when using AI agents - CAP Code (media-neutral application to AI-generated ads); CAP News 11 June 2026Advertisers using AI to create or distribute ads, including deepfakes and automated ad platforms, must make the ads comply with the CAP Code and remain responsible for AI output used in their ads.other · Applies to: deployer · CAP and ASA guidance on AI-generated advertising and deepfakes - Automated Vehicles Act 2024 s.79 (Part 4)It is an offence to make, in the course of business, a communication about a product or service likely to confuse end-users in Great Britain as to whether a vehicle that is not an authorised automated vehicle can travel autonomously, safely and legally; due-diligence defences apply.transparency disclosure · Applies to: provider · Automated Vehicles Act 2024 Milestones - 6 Feb 2026Sexual Offences Act 2003 ss.66E-66F (purported intimate image offences) in force MetData (Use and Access) Act 2025 - 9 Mar 2026CMA guidance on complying with consumer law when using AI agents published MetCMA guidance: Complying with consumer law when using AI agents - 18 Mar 2026Section 136 report on copyright works and AI due within nine months of 19 June 2025; report published 18 March 2026 MetData (Use and Access) Act 2025 - 11 Jun 2026CAP guidance "AI and Deepfakes: Four Things Advertisers Need to Know" published MetCAP and ASA guidance on AI-generated advertising and deepfakes - 30 Sep 2026Ofcom expectation that platforms have hash-matching for illegal intimate images and deepfakes in place Status not recordedOnline Safety Act 2023 - 6 Nov 2026Ofcom evidence request on protections for women and girls closes UpcomingOnline Safety Act 2023 Claims and evidence (16) - Derived: Probable Section 138 of the Data (Use and Access) Act 2025, creating offences of intentionally creating or requesting the creation of a purported intimate image of another person without consent, came into force on 6 February 2026 under SI 2026/31.Confidence: Confirmed · As of 6 Feb 2026 · evidencedEvidence and sources[Data (Use and Access) Act 2025, section 138 (Creating, or requesting the creation of, purported intimate image of adult)](https://www.legislation.gov.uk/ukpga/2025/18/section/138) T1 · retrieved · retrieved 8 Oct 2026 · s.138 commencement informationS. 138 in force at 6.2.2026 by S.I. 2026/31, reg. 2 - [The Data (Use and Access) Act 2025 (Commencement No. 5) Regulations 2026 (SI 2026/31)](https://www.legislation.gov.uk/uksi/2026/31/made) T1 · retrieved · retrieved 8 Oct 2026 · SI 2026/31 reg 2Section 138 of the Data (Use and Access) Act 2025 (creating, or requesting the creation of, purported intimate image of adult) comes into force on 6th February 2026. - Derived: Probable Section 99 of the Crime and Policing Act 2026 inserts Sexual Offences Act 2003 section 66I, making it an offence to make, adapt, supply or offer to supply a 'nudification' tool for generating purported intimate images; section 99 came into force on 29 June 2026.Confidence: Confirmed · As of 29 Jun 2026 · evidencedEvidence and sources[Crime and Policing Act 2026, section 99 (purported intimate image generators)](https://www.legislation.gov.uk/ukpga/2026/20/section/99) T1 · retrieved · retrieved 8 Oct 2026 · CPA 2026 s.99 commencement noteS. 99 in force at 29.6.2026 by S.I. 2026/689, reg. 2(1)(i) - [Crime and Policing Act 2026, section 99 (purported intimate image generators)](https://www.legislation.gov.uk/ukpga/2026/20/section/99) T1 · retrieved · retrieved 8 Oct 2026 · CPA 2026 s.99, inserting SOA 2003 s.66I(1)A person commits an offence if the person— (a)makes or adapts a thing, or (b)supplies or offers to supply a thing, for use as a generator of purported intimate images. - [Crime and Policing Act 2026, section 99 (purported intimate image generators)](https://www.legislation.gov.uk/ukpga/2026/20/section/99) T1 · retrieved · retrieved 8 Oct 2026 · SOA 2003 s.66I(2)A “generator of purported intimate images” is a thing for creating, or facilitating the creation of, purported intimate images of a person. - [Crime and Policing Act 2026, section 99 (purported intimate image generators)](https://www.legislation.gov.uk/ukpga/2026/20/section/99) T1 · retrieved · retrieved 8 Oct 2026 · SOA 2003 s.66I(5)(b)(b)on conviction on indictment, to imprisonment for a term not exceeding 3 years or a fine (or both). - CAP confirmed on 11 June 2026 that the media-neutral CAP Code applies to AI-generated advertising content, including deepfakes, and the ASA has upheld rulings against harmful AI-generated images on that basis.Confidence: Probable · As of 11 Jun 2026 · evidencedEvidence and sources[AI and Deepfakes: Four Things Advertisers Need to Know Before They Hit "Run" (CAP News)](https://www.asa.org.uk/news/ai-and-deepfakes-four-things-advertisers-need-to-know-before-they-hit-run.html) T1 · retrieved · retrieved 8 Oct 2026 · Point 1: The CAP Code is media-neutralAI might change how ads are made, but it doesn't change how they're regulated. The Code is media-neutral, meaning the rules apply regardless of how the content - [AI, advertising, and the policy landscape - CAP proactive monitoring (CAP News)](https://www.asa.org.uk/news/ai-advertising-and-the-policy-landscape-cap-proactive-monitoring.html) T1 · retrieved · retrieved 8 Oct 2026 · CAP News 7 February 2025Recent rulings have demonstrated that harmful, offensive, and socially irresponsible AI-generated images will breach the Code, just as any other type of image would. The ASA also has a Scam Ad Alert System, which it oper - Derived: Probable Ofcom published an open letter reminding providers what the Online Safety Act regulates and how it applies to generative AI chatbot tools and platforms.Confidence: Probable · evidencedEvidence and sources[Open letter to UK online service providers regarding Generative AI and chatbots](https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/open-letter-to-uk-online-service-providers-regarding-generative-ai-and-chatbots) T1 · retrieved · retrieved 8 Oct 2026 · Ofcom open letter (intro)published an open letter to online service providers operating in the UK about how the UK's Online Safety Act will apply to Generative AI and chatbots. - Section 9 of the Online Safety Act 2023 requires providers of regulated user-to-user services to carry out a suitable and sufficient illegal content risk assessment.Confidence: Probable · evidencedEvidence and sources[Online Safety Act 2023, section 9 (Illegal content risk assessment duties)](https://www.legislation.gov.uk/ukpga/2023/50/section/9) T1 · retrieved · retrieved 8 Oct 2026 · OSA s.9(1)(1)This section sets out the duties about risk assessments which apply in relation to all regulated user-to-user services. - [Online Safety Act 2023, section 9 (Illegal content risk assessment duties)](https://www.legislation.gov.uk/ukpga/2023/50/section/9) T1 · retrieved · retrieved 8 Oct 2026 · OSA s.9(2)(2)A duty to carry out a suitable and sufficient illegal content risk assessment at a time set out in, or as provided by, Schedule 3. - The publisher conduct requirement requires Google to provide publishers with effective controls over the use of their search content in generative AI, among other transparency and attribution obligations.Confidence: Probable · As of 3 Jun 2026 · evidencedEvidence and sources[Google search publisher conduct requirement (CMA)](https://www.gov.uk/find-digital-markets-measures/google-search-publisher-conduct-requirement) T1 · retrieved · retrieved 8 Oct 2026 · CMA page: publisher CR requires Google toprovide publishers with effective controls over the use of their search content in generative AI - The ASA/CAP state that the media-neutral CAP Code applies in full to AI-generated advertising, and recent rulings have found harmful AI-generated images in breach of the Code on the same basis as any other image.Confidence: Probable · As of 11 Jun 2026 · evidencedEvidence and sources[AI and Deepfakes: Four Things Advertisers Need to Know Before They Hit "Run" (CAP News)](https://www.asa.org.uk/news/ai-and-deepfakes-four-things-advertisers-need-to-know-before-they-hit-run.html) T1 · retrieved · retrieved 8 Oct 2026 · Point 1: The CAP Code is media-neutralAI might change how ads are made, but it doesn't change how they're regulated. The Code is media-neutral, meaning the rules apply regardless of how the content - [AI, advertising, and the policy landscape - CAP proactive monitoring (CAP News)](https://www.asa.org.uk/news/ai-advertising-and-the-policy-landscape-cap-proactive-monitoring.html) T1 · retrieved · retrieved 8 Oct 2026 · CAP News 7 February 2025Recent rulings have demonstrated that harmful, offensive, and socially irresponsible AI-generated images will breach the Code, just as any other type of image would. The ASA also has a Scam Ad Alert System, which it oper - The guidance says businesses should consider labelling AI agents so they do not mislead customers into thinking they deal with a real person, and should keep a human in the loop checking the agent's decisions.Confidence: Probable · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Section "Tell your customers if you use an AI agent"If you use an AI agent, consider whether you need to label it so you do not mislead customers into thinking that a service is being provided by a real person – if the fact they are dealing with AI rather than a person might affect people's decisions then you should tell them. Do not overstate the ro - [Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Section "Monitor how your AI agents are performing"Make sure there is a human in the loop, actively checking that the AI agent is making correct decisions and generating expected results. Regular human oversight is important to catch mistakes and ensure that AI agents are completing tasks in a legally complian - The guidance applies the DMCCA to AI agents running marketing campaigns, processing refunds, answering customer queries and providing comparison services, including accurate pricing, labelled paid endorsements and genuine offers.Confidence: Probable · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Example: using an AI agent to run your latest marketing campaignThink about the requirements of the Digital Markets, Competition and Consumers Act 2024 when you design and train the AI. For example: - [Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Section "When it comes to dealing with your customers, the same rules apply whether using AI or human agents"It's important to remember that you are responsible for what an AI agent does in the same way you are responsible for what an employee does. This is true even if someone else designed or provides the AI agent on your behalf - so make sure you think about compliance with consumer law if you are procu - CAP published "AI and Deepfakes: Four Things Advertisers Need to Know Before They Hit Run" on 11 June 2026, following earlier AI and deepfake guidance of 8 February 2024, 7 February 2025 and 12 June 2025.Confidence: Probable · As of 11 Jun 2026 · evidencedEvidence and sources[AI and Deepfakes: Four Things Advertisers Need to Know Before They Hit "Run" (CAP News)](https://www.asa.org.uk/news/ai-and-deepfakes-four-things-advertisers-need-to-know-before-they-hit-run.html) T1 · retrieved · retrieved 8 Oct 2026 · Page headerAI and Deepfakes: Four Things Advertisers Need to Know Before They Hit “Run” - CAP News - 11 Jun 2026 - Home - Advice and resources - News - [In at the Deep(fake) End (CAP News)](https://www.asa.org.uk/news/in-at-the-deep-fake-end.html) T1 · retrieved · retrieved 8 Oct 2026 · Page headerIn at the Deep(fake) End - CAP News - 08 Feb 2024 - Home - Advice and resources - CAP said on 12 June 2025 that the CAP and BCAP Codes do not contain specific rules relating to AI and that marketers must ensure AI use does not breach the existing rules; there is no separate Code section for AI-generated or deepfake ads.Confidence: Confirmed · As of 12 Jun 2025 · evidencedEvidence and sources["Write a useful article helping marketers with tips for using AI" (CAP News)](https://www.asa.org.uk/news/write-a-useful-article-helping-marketers-with-tips-for-using-ai.html) T1 · retrieved · retrieved 8 Oct 2026 · CAP News 12 June 2025Whilst the CAP and BCAP Codes do not contain specific rules relating to AI at this time, marketers should ensure that their use of AI doesn’t generate an issue with the existing rules. Download the latest advice for marketers on using AI in ads. - [In at the Deep(fake) End (CAP News)](https://www.asa.org.uk/news/in-at-the-deep-fake-end.html) T1 · retrieved · retrieved 8 Oct 2026 · CAP News 8 February 2024, section "CAP Code vs Coding?"There isn’t a separate section of the CAP Code that deals with AI-generated ads. This means any ads the ASA might assess that use deepfake t - [AI and Deepfakes: Four Things Advertisers Need to Know Before They Hit "Run" (CAP News)](https://www.asa.org.uk/news/ai-and-deepfakes-four-things-advertisers-need-to-know-before-they-hit-run.html) T1 · retrieved · retrieved 8 Oct 2026 · Point 1: The CAP Code is media-neutralAI might change how ads are made, but it doesn't change how they're regulated. The Code is media-neutral, meaning the rules apply regardless of how the content - CAP says an AI-generated celebrity endorsement that looks real enough to mislead consumers is likely to breach the Code, and that marketers must ensure deepfake content complies with the rules on misleadingness, testimonials and endorsements; personality and intellectual property rights are not ASA matters.Confidence: Confirmed · As of 11 Jun 2026 · evidencedEvidence and sources[AI and Deepfakes: Four Things Advertisers Need to Know Before They Hit "Run" (CAP News)](https://www.asa.org.uk/news/ai-and-deepfakes-four-things-advertisers-need-to-know-before-they-hit-run.html) T1 · retrieved · retrieved 8 Oct 2026 · Point 2: Deepfakes do not get a free passIf an AI‑generated celebrity “endorsement” looks real enough to mislead consumers, it’s likely breaching the Code. - ["Write a useful article helping marketers with tips for using AI" (CAP News)](https://www.asa.org.uk/news/write-a-useful-article-helping-marketers-with-tips-for-using-ai.html) T1 · retrieved · retrieved 8 Oct 2026 · CAP News 12 June 2025, section "Deepfake it 'til you make it"Marketers should ensure that content created in this way complies with the rules, especially on misleadingness, testimonials and endorsements. Implying an endorsement that simply doesn’t exist will be - Derived: Probable CAP says the advertiser remains responsible for any AI output used in its ads, and the ASA found that an advertiser was still primarily responsible for CAP Code compliance although the ad was produced with Google's automated tools.Confidence: Probable · As of 11 Jun 2026 · evidencedEvidence and sources[AI and Deepfakes: Four Things Advertisers Need to Know Before They Hit "Run" (CAP News)](https://www.asa.org.uk/news/ai-and-deepfakes-four-things-advertisers-need-to-know-before-they-hit-run.html) T1 · retrieved · retrieved 8 Oct 2026 · Point 3: AI bias is a compliance problemIf an AI tool produces something problematic, the advertiser remains responsible for any output used in their ads. They should therefore sense‑check AI outputs - [AI and Deepfakes: Four Things Advertisers Need to Know Before They Hit "Run" (CAP News)](https://www.asa.org.uk/news/ai-and-deepfakes-four-things-advertisers-need-to-know-before-they-hit-run.html) T1 · retrieved · retrieved 8 Oct 2026 · Point 4: Automated campaignsCrucially, the ASA stated that even though the ad was produced using Google’s automated tools, the advertiser was still primarily responsible for ensuring compliance with the CAP Code. - The ASA applies the CAP Code to ads within its remit, so AI-generated ads must comply with it; the guidance itself adds no new rule.Confidence: Probable · As of 11 Jun 2026 · evidencedEvidence and sources[AI and Deepfakes: Four Things Advertisers Need to Know Before They Hit "Run" (CAP News)](https://www.asa.org.uk/news/ai-and-deepfakes-four-things-advertisers-need-to-know-before-they-hit-run.html) T1 · retrieved · retrieved 8 Oct 2026 · Point 1If an ad falls within the ASA’s remit, it must comply with all relevant rules. - ["Write a useful article helping marketers with tips for using AI" (CAP News)](https://www.asa.org.uk/news/write-a-useful-article-helping-marketers-with-tips-for-using-ai.html) T1 · retrieved · retrieved 8 Oct 2026 · CAP News 12 June 2025Whilst the CAP and BCAP Codes do not contain specific rules relating to AI at this time, marketers should ensure that their use of AI doesn’t generate an issue with the existing rules. Download the latest advice for marketers on using AI in ads. - Derived: Probable CAP said on 7 February 2025 that it is closely monitoring AI policy developments and that the rules in Section 6 of the CAP and BCAP Codes on depicting or referring to living persons would likely apply to generative AI replicas.Confidence: Probable · As of 7 Feb 2025 · evidencedEvidence and sources[AI, advertising, and the policy landscape - CAP proactive monitoring (CAP News)](https://www.asa.org.uk/news/ai-advertising-and-the-policy-landscape-cap-proactive-monitoring.html) T1 · retrieved · retrieved 8 Oct 2026 · CAP News 7 February 2025Recent rulings have demonstrated that harmful, offensive, and socially irresponsible AI-generated images will breach the Code, just as any other type of image would. The ASA also has a Scam Ad Alert System, which it oper - [AI, advertising, and the policy landscape - CAP proactive monitoring (CAP News)](https://www.asa.org.uk/news/ai-advertising-and-the-policy-landscape-cap-proactive-monitoring.html) T1 · retrieved · retrieved 8 Oct 2026 · CAP News 7 February 2025it is likely that the rules in Section 6 of the CAP and BCAP Codes (which include rules about permissions for depicting or referring to living persons in ads) would apply, and it important that CAP tracks relevant developments. - Derived: Probable Part 4 of the Act (marketing restrictions), so far as not already in force, comes into force on 7 January 2027 under SI 2026/731 made 1 July 2026.Confidence: Confirmed · As of 7 Jan 2027 · evidencedEvidence and sources[The Automated Vehicles Act 2024 (Commencement No. 3) Regulations 2026 (SI 2026/731)](https://www.legislation.gov.uk/uksi/2026/731/made) T1 · retrieved · retrieved 8 Oct 2026 · SI 2026/731 reg 2Part 4 of the Automated Vehicles Act 2024 (marketing restrictions), so far as not already in force, comes into force on 7th January 2027. - [The Automated Vehicles Act 2024 (Commencement No. 3) Regulations 2026 (SI 2026/731)](https://www.legislation.gov.uk/uksi/2026/731/made) T1 · retrieved · retrieved 8 Oct 2026 · SI 2026/731 explanatory noteThey bring into force Part 4 of the Act, so far as not already in force, on 7th January 2027. Part 4 of the Act makes provision for marketing restrictions in relation to automated vehicles. Section 78 of the Act came int Open evidence ### 06AI & Intellectual PropertyActive Derived: Probable▾# Copyright, Designs and Patents Act 1988 (Date not recorded): Core UK copyright statute; s.29A permits copying for text and data analysis only for non-commercial research by a person with lawful access. 3 instruments · 1 obligation · 6 claims 3 instruments (3 current) · 1 obligation · 6 claims · 2 milestones Instruments - Copyright, Designs and Patents Act 1988 Date not recordedCore UK copyright statute; s.29A permits copying for text and data analysis only for non-commercial research by a person with lawful access. No commercial AI training exception has been enacted. Getty v Stability AI tested secondary infringement over model weights.Binding · Authority: UK Parliament · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/1988/48) - Data (Use and Access) Act 2025 In force since 2025-08-20Act amending UK data protection law; for AI governance it creates the s.138 purported-intimate-image offences, the ss.135-137 copyright-and-AI reporting duties, and establishes the Information Commission.Binding · Authority: Information Commission (successor to the Information Commissioner's Office) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2025/18) - Report on Copyright and Artificial Intelligence (section 136 Data (Use and Access) Act 2025) Published 2026-03-18Government report laid under DUAA s.136 stating that a broad text-and-data-mining exception with opt-out is no longer its preferred way forward.Non-binding · Authority: Department for Science, Innovation and Technology · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/report-and-impact-assessment-on-copyright-and-artificial-intelligence/report-on-copyright-and-artificial-intelligence) Obligations - Copyright, Designs and Patents Act 1988 s.29A(1)Copying for computational analysis is non-infringing only if made by a person with lawful access for the sole purpose of non-commercial research and accompanied by sufficient acknowledgement.other · Applies to: other · Copyright, Designs and Patents Act 1988 Milestones - 6 Feb 2026Sexual Offences Act 2003 ss.66E-66F (purported intimate image offences) in force MetData (Use and Access) Act 2025 - 18 Mar 2026Section 136 report on copyright works and AI due within nine months of 19 June 2025; report published 18 March 2026 MetData (Use and Access) Act 2025 Claims and evidence (6) - The copyright and AI reporting duties in sections 135-137 of the Data (Use and Access) Act 2025 came into force on 20 August 2025.Confidence: Probable · As of 20 Aug 2025 · evidencedEvidence and sources[Data (Use and Access) Act 2025, sections 135-137 (Copyright works and artificial intelligence systems)](https://www.legislation.gov.uk/ukpga/2025/18/part/7/crossheading/copyright-works-and-artificial-intelligence-systems) T1 · retrieved · retrieved 8 Oct 2026 · s.135(1) (economic impact assessment)must, before the end of the period of 9 months beginning with the day on which this Act is passed— - [Data (Use and Access) Act 2025, sections 135-137 (Copyright works and artificial intelligence systems)](https://www.legislation.gov.uk/ukpga/2025/18/part/7/crossheading/copyright-works-and-artificial-intelligence-systems) T1 · retrieved · retrieved 8 Oct 2026 · s.136 commencement informationS. 136 in force at 20.8.2025 by S.I. 2025/904, reg. 2(w) - Sections 135-136 required the Secretary of State to publish an economic impact assessment and a report on the use of copyright works in AI development within nine months of Royal Assent; the report was published on 18 March 2026.Confidence: Probable · As of 18 Mar 2026 · evidencedEvidence and sources[Data (Use and Access) Act 2025, sections 135-137 (Copyright works and artificial intelligence systems)](https://www.legislation.gov.uk/ukpga/2025/18/part/7/crossheading/copyright-works-and-artificial-intelligence-systems) T1 · retrieved · retrieved 8 Oct 2026 · s.135(1) (economic impact assessment)must, before the end of the period of 9 months beginning with the day on which this Act is passed— - [Data (Use and Access) Act 2025, sections 135-137 (Copyright works and artificial intelligence systems)](https://www.legislation.gov.uk/ukpga/2025/18/part/7/crossheading/copyright-works-and-artificial-intelligence-systems) T1 · retrieved · retrieved 8 Oct 2026 · s.136(1)(a)(a)prepare and publish a report on the use of copyright works in the development of AI systems, and - Derived: Probable The High Court's judgment in Getty Images v Stability AI, handed down 4 November 2025, held that Stability AI's model weights do not themselves store or reproduce Getty's copyright works, while finding limited trade mark infringement.Confidence: Probable · As of 4 Nov 2025 · evidencedEvidence and sources[Getty Images (US) Inc and others v Stability AI Ltd [2025] EWHC 2863 (Ch), approved judgment](https://www.judiciary.uk/wp-content/uploads/2025/11/Getty-Images-v-Stability-AI.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Approved judgment, cover pageIN THE HIGH COURT OF JUSTICE BUSINESS AND PROPERTY COURTS OF ENGLAND AND WALES INTELLECTUAL PROPERTY LIST (ChD) Royal Courts of Justice Rolls Building, Fetter Lane, London, EC4A 1NL Date: 04/1 - In its section 136 report published 18 March 2026 the Government said a broad copyright exception with opt-out is no longer its preferred way forward and proposed to gather further evidence.Confidence: Probable · As of 18 Mar 2026 · evidencedEvidence and sources[Report on Copyright and Artificial Intelligence](https://www.gov.uk/government/publications/report-and-impact-assessment-on-copyright-and-artificial-intelligence/report-on-copyright-and-artificial-intelligence) T1 · retrieved · retrieved 8 Oct 2026 · Report on Copyright and AI, executive summarya broad copyright exception with opt-out is no longer the government's preferred way forward. We propose to gather further evidence on how copyright laws are impacting the development and deployment of AI across the economy. - [Report on Copyright and Artificial Intelligence](https://www.gov.uk/government/publications/report-and-impact-assessment-on-copyright-and-artificial-intelligence/report-on-copyright-and-artificial-intelligence) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK publication headerPublished 18 March 2026 This was published under the 2024 to 2026 Starmer Labour government ## Contents 1. Section A: - [Report on Copyright and Artificial Intelligence](https://www.gov.uk/government/publications/report-and-impact-assessment-on-copyright-and-artificial-intelligence/report-on-copyright-and-artificial-intelligence) T1 · retrieved · retrieved 8 Oct 2026 · Report, introductionThis report has been prepared pursuant to section 136 of the Data (Use and Access) Act 2025 ("the D(UA) Act"). It considers the use of copyright works in the development of artificial in - Section 29A of the Copyright, Designs and Patents Act 1988 permits a copy made for computational analysis only where the sole purpose is non-commercial research and the person has lawful access.Confidence: Probable · evidencedEvidence and sources[Copyright, Designs and Patents Act 1988, section 29A](https://www.legislation.gov.uk/ukpga/1988/48/section/29A) T1 · retrieved · retrieved 8 Oct 2026 · CDPA s.29A(1)(1)The making of a copy of a work by a person who has lawful access to the work does not infringe copyright in the work provided that— - [Copyright, Designs and Patents Act 1988, section 29A](https://www.legislation.gov.uk/ukpga/1988/48/section/29A) T1 · retrieved · retrieved 8 Oct 2026 · CDPA s.29A(1)(a)(a)the copy is made in order that a person who has lawful access to the work may carry out a computational analysis of anything recorded in the work for the sole purpose of research for a non-commercial purpose, and - Derived: Probable In its judgment of 4 November 2025 the High Court held that Stability AI's trained Stable Diffusion model does not store Getty's copyright works and that the model weights are not themselves an infringing copy; Getty has sought permission to appeal.Confidence: Probable · As of 4 Nov 2025 · evidencedEvidence and sources[Getty Images (US) Inc and others v Stability AI Ltd [2025] EWHC 2863 (Ch), approved judgment](https://www.judiciary.uk/wp-content/uploads/2025/11/Getty-Images-v-Stability-AI.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Approved judgment, cover pageIN THE HIGH COURT OF JUSTICE BUSINESS AND PROPERTY COURTS OF ENGLAND AND WALES INTELLECTUAL PROPERTY LIST (ChD) Royal Courts of Justice Rolls Building, Fetter Lane, London, EC4A 1NL Date: 04/1 Open evidence ### 07Sectoral & Public-Sector AIActive Derived: Probable▾# AI Action Plan for Justice: one year on (Ministry of Justice, 24 September 2026) (Published 2026-09-24): Ministry of Justice progress report published 24 September 2026 introducing a fourth strategic priority to strengthen the response to emerging AI risks in the justice system. 24 instruments · 12 obligations · 56 claims · Next: 31 Dec 2026 (First regulations (social media for under-16s) to be laid before Parliament "by the end of the year"; AI chatbot measures later by regulations) 24 instruments (24 current) · 12 obligations · 56 claims · 9 milestones Instruments - AI Action Plan for Justice: one year on (Ministry of Justice, 24 September 2026) Published 2026-09-24Ministry of Justice progress report published 24 September 2026 introducing a fourth strategic priority to strengthen the response to emerging AI risks in the justice system.Non-binding · Authority: Ministry of Justice · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/ai-action-plan-for-justice-one-year-on/ai-action-plan-for-justice-one-year-on) - AI Opportunities Action Plan Published 2026-01-29; valid from 2025-01-01Government plan launched in January 2025; the January 2026 update reports that commitments on 38 of 50 actions have been met.Non-binding · Authority: Department for Science, Innovation and Technology · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/ai-opportunities-action-plan-one-year-on) - AI Risk Management Toolkit (DSIT guidance, 8 September 2026) Published 2026-09-08DSIT guidance and workbook to help anyone involved in AI projects understand, assess and manage risks when designing, procuring or delivering AI products; aligned with the Orange Book risk management framework.Non-binding · Authority: Department for Science, Innovation and Technology · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/ai-risk-management-toolkit) - Algorithmic Transparency Recording Standard (ATRS) mandatory scope and exemptions policy Published 2024-12-17; entry into force not recordedNon-statutory cross-government policy requiring central government organisations to complete ATRS records for in-scope algorithmic tools. Mandated across government departments on 6 February 2024.Binding · Authority: Cabinet Office · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/algorithmic-transparency-recording-standard-mandatory-scope-and-exemptions-policy/algorithmic-transparency-recording-standard-atrs-mandatory-scope-and-exemptions-policy) - Artificial Intelligence (AI) Guidance for Judicial Office Holders (October 2025) Published 2025-10-31Judiciary guidance for judicial office holders, clerks and support staff on responsible use of AI in courts and tribunals, replacing earlier versions; requires AI use to be consistent with protecting the integrity of the administration of justice.Non-binding · Authority: Courts and Tribunals Judiciary · Verified 8 Oct 2026 · [Official text](https://www.judiciary.uk/guidance-and-resources/artificial-intelligence-ai-judicial-guidance-october-2025/) - Automated Vehicles Act 2024 In force since 2026-07-01Act on authorisation and use of self-driving vehicles in Great Britain; s.1 sets the self-driving test; s.79 (Part 4) makes it an offence to communicate in a way likely to confuse end-users about autonomous capability, commencing 7 January 2027 under SI 2026/731.Binding · Authority: UK Parliament · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2024/10) - Bank of England response to Treasury Committee report on AI in financial services (1 April 2026) Published 2026-04-01Letter of 1 April 2026 from Sarah Breeden to the Treasury Committee Chair rejecting the Committee's characterisation that the Bank takes a "wait and see" approach to AI and responding to its call for AI-specific stress testing.Non-binding · Authority: Bank of England · Verified 8 Oct 2026 · [Official text](https://www.bankofengland.co.uk/-/media/boe/files/letter/2026/response-to-tsc-inquiry-report-on-ai-in-financial-services) - Bank of England, FCA and HM Treasury joint statement on frontier AI models and cyber resilience Published 2026-05-15Joint statement of 15 May 2026 saying that, in line with operational resilience rules, regulated firms and financial market infrastructures need to act on frontier-AI cyber risk across governance, vulnerability management, third-party risk, protection, and response and recovery.Regulatory expectation · Authority: Bank of England, Financial Conduct Authority · Verified 8 Oct 2026 · [Official text](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) - Children's Wellbeing and Schools Act 2026 In force since 2026-04-29Act of 29 April 2026 whose Part 3 inserts a power into the Online Safety Act 2023 (s.214A) for the Secretary of State to require providers of internet services to prevent or restrict access by children to services or features. The Government says it will use these powers for under-16 social media limits and, in July 2026, for measures on AI chatbots.Binding · Authority: Office of Communications (Ofcom) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2026/21) - CMA guidance: Complying with consumer law when using AI agents Published 2026-03-09CMA guidance of 9 March 2026 telling businesses that they are responsible for what an AI agent does as for an employee, that they should consider labelling AI agents, and that they should train, monitor and quickly refine agents, with a human in the loop. It sits alongside CMA research on agentic AI and consumers.Non-binding · Authority: Competition and Markets Authority · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) - Crime and Policing Act 2026 In force since 2026-04-29Creates an offence of making AI models optimised for CSA images (s.72, uncommenced), an offence of supplying purported-intimate-image generators (s.99, in force 29 June 2026), and a power to extend Online Safety Act duties to AI services (s.248, in force at Royal Assent).Binding · Authority: Office of Communications (Ofcom) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2026/20) - Cyber Security and Resilience (Network and Information Systems) Bill Draft, no legal forceGovernment Bill reforming the NIS Regulations 2018, bringing managed service providers, data centres and other critical suppliers into scope; AI relevance is indirect (data-centre infrastructure that hosts AI).Authority: UK Parliament · Verified 8 Oct 2026 · [Official text](https://api.parliament.uk/bill-papers/bills/4035) - Digital Markets, Competition and Consumers Act 2024 (consumer enforcement regime) In force since 2025-04-06Act whose consumer protection provisions prohibit unfair commercial practices and let the CMA decide infringements directly and impose penalties of up to the greater of £300,000 or 10% of turnover. The consumer regime has applied since 6 April 2025, and CMA guidance of 9 March 2026 says it governs AI agents used with consumers.Binding · Authority: Competition and Markets Authority · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2024/13) - FCA approach to AI: no new AI-specific rules and AI Live Testing Published 2026-06-08FCA position that it will not introduce new regulations for AI and will rely on existing frameworks such as the Consumer Duty and SM&CR, supported by an AI Live Testing programme whose second cohort was announced on 21 April 2026.Non-binding · Authority: Financial Conduct Authority · Verified 8 Oct 2026 · [Official text](https://www.fca.org.uk/news/blogs/ai-financial-services-approach) - FCA Mills Review: impact of AI on retail financial services (6 July 2026) Published 2026-07-06FCA-commissioned review led by executive director Sheldon Mills, published 6 July 2026, on how AI could reshape retail financial services; makes 7 recommendations for the FCA Board and Executive to consider, including adapting the regulatory perimeter. Advisory; the FCA has not adopted the recommendations in the sources read.Non-binding · Authority: Financial Conduct Authority · Verified 8 Oct 2026 · [Official text](https://www.fca.org.uk/news/press-releases/fca-publishes-landmark-review-impact-ai-retail-financial-services) - FCA multi-firm review: Frontier AI and cyber resilience (September 2026) Published 2026-09-02FCA publication of 2 September 2026 summarising what firms reported about using, testing and preparing for frontier AI models with cyber capabilities; it states that it does not introduce new rules, guidance or regulatory expectations.Non-binding · Authority: Financial Conduct Authority · Verified 8 Oct 2026 · [Official text](https://www.fca.org.uk/publications/multi-firm-reviews/frontier-ai-cyber-resilience) - Financial Policy Committee judgement on frontier AI and financial stability (July 2026) Published 2026-07-07In July 2026 the Financial Policy Committee judged that rapid progress in frontier AI capabilities significantly increases financial stability risks from cyber and operational vulnerabilities, and urged firms to act on the May 2026 joint statement.Non-binding · Authority: Financial Policy Committee (Bank of England) · Verified 8 Oct 2026 · [Official text](https://www.bankofengland.co.uk/financial-stability-report/2026/july-2026) - Growing up in the online world: government response (July 2026), AI chatbot measures Published 2026-07-15Government response of 15 July 2026 to a national consultation on children's online safety. It commits to require AI chatbots to introduce mandatory breaks for under-18s, to stop under-18s accessing chatbot services that primarily offer sexualised content, and to consider banning children from certain chatbots, using powers in the Children's Wellbeing and Schools Act 2026; definitions will follow in regulations.Non-binding · Authority: Office of Communications (Ofcom) · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation/outcome/growing-up-in-the-online-world-government-response-july-2026) - JSP 936: Dependable Artificial Intelligence (AI) in defence (part 1: directive) Published 2024-11-13MOD policy framework for the safe and responsible use of AI in defence, with directives on governance, development and assurance across the AI lifecycle.Legal force not established · Authority: Ministry of Defence · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/jsp-936-dependable-artificial-intelligence-ai-in-defence-part-1-directive) - National Commission into the Regulation of AI in Healthcare: recommendations and Government response Published 2026-10-06The National Commission's 44 recommendations on regulating AI in healthcare were published on 10 September 2026, and on 6 October 2026 the Government said it accepts all of them. The MHRA is to consult on classification and then use secondary legislation to update the medical device definition.Non-binding · Authority: Medicines and Healthcare products Regulatory Agency · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/government-response-to-the-national-commissions-recommendations-on-the-regulation-of-ai-in-healthcare/government-response-to-the-national-commissions-recommendations-on-the-regulation-of-ai-in-healthcare) - PRA Supervisory Statement SS1/23: Model risk management principles for banks Published 2023-05-17; valid from 2024-05-17PRA supervisory statement setting five model risk management principles for banks, including managing risks from AI and machine learning models. Current version published and effective from 23 April 2026.Regulatory expectation · Authority: Prudential Regulation Authority (Bank of England) · Verified 8 Oct 2026 · [Official text](https://www.bankofengland.co.uk/prudential-regulation/publication/2023/may/model-risk-management-principles-for-banks-ss) - SRA warning notice: misuse of AI Published 2026-08-17Warning notice on misuse of AI in legal services, including false citations; states reliance on AI output is not a defence and existing professional standards still apply. The SRA reports 42 AI-misuse reports from July 2025 to July 2026 and ongoing investigations.Non-binding · Authority: Solicitors Regulation Authority · Verified 8 Oct 2026 · [Official text](https://www.sra.org.uk/solicitors/guidance/misuse-ai/) - The Medical Devices Regulations 2002 Date not recordedUK medical devices regulations whose definition of medical device expressly includes software intended for diagnosis or therapy. The Government has accepted proposals to update the definition and classification for AI-enabled devices by secondary legislation.Binding · Authority: Medicines and Healthcare products Regulatory Agency · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/uksi/2002/618) - UK Government and Google DeepMind Memorandum of Understanding on AI opportunities and security Published 2025-12-11Voluntary, non-binding memorandum between DSIT and Google DeepMind to collaborate on public services, scientific discovery and AI security. Published on 11 December 2025.Non-binding · Authority: Department for Science, Innovation and Technology · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/memorandum-of-understanding-between-the-uk-and-google-deepmind-on-ai-opportunities-and-security/memorandum-of-understanding-between-the-uk-and-google-deepmind-on-ai-opportunities-and-security) Obligations - Medical Devices Regulations 2002 reg 11A person must not affix a UK marking to a general medical device unless the relevant requirements of other applicable product safety legislation are also satisfied.conformity assessment · Applies to: product manufacturer · The Medical Devices Regulations 2002 - ATRS policy sections 2-3Central government departments and in-scope arm's-length bodies must complete ATRS records for in-scope algorithmic tools.transparency disclosure · Applies to: deployer · Algorithmic Transparency Recording Standard (ATRS) mandatory scope and exemptions policy - SS1/23 Principles 1-5PRA expects banks to maintain a model risk management framework under five principles, including identifying and managing risks from AI and machine learning models.risk management · Applies to: deployer · PRA Supervisory Statement SS1/23: Model risk management principles for banks - BoE/FCA/HMT joint statement, 15 May 2026Regulated firms and financial market infrastructures must plan for and mitigate cybersecurity risks posed by frontier AI, consistent with existing operational resilience rules and expectations.risk management · Applies to: deployer · Bank of England, FCA and HM Treasury joint statement on frontier AI models and cyber resilience - DMCCA s.225(1) (Part 4 Chapter 1)Traders must not engage in unfair commercial practices; the prohibition applies whether the practice is carried out by a person or by a system acting for the trader (CMA guidance applies it to AI agents).prohibition · Applies to: other · Digital Markets, Competition and Consumers Act 2024 (consumer enforcement regime) - DMCCA s.226(1) (misleading actions)A commercial practice involving false or misleading information, or an overall presentation likely to deceive the average consumer, is a misleading action and is an unfair commercial practice.transparency disclosure · Applies to: other · Digital Markets, Competition and Consumers Act 2024 (consumer enforcement regime) - Guidance section "Tell your customers if you use an AI agent"Businesses using AI agents with customers should consider labelling them so customers are not misled into thinking a real person provides the service, and should not overstate the role of AI.transparency disclosure · Applies to: deployer · CMA guidance: Complying with consumer law when using AI agents - Guidance sections "Train", "Monitor" and "Refine"Businesses should train AI agents to comply with consumer law, monitor them with a human in the loop, and refine them quickly if problems arise; the business remains responsible for what the agent does.human oversight · Applies to: deployer · CMA guidance: Complying with consumer law when using AI agents - Statement section "What this means for regulated firms"Regulated firms and financial market infrastructures need to take action to plan for and mitigate cybersecurity risks posed by frontier AI, including board understanding, faster vulnerability remediation and automated defences.risk management · Applies to: deployer · Bank of England, FCA and HM Treasury joint statement on frontier AI models and cyber resilience - Statement domain "Managing risks from third parties"Firms should manage frontier-AI cyber risks from third parties and supply chains, including open-source software, and be able to identify, monitor and manage external applications, libraries and services.risk management · Applies to: deployer · Bank of England, FCA and HM Treasury joint statement on frontier AI models and cyber resilience - Online Safety Act 2023 s.214A (inserted by CWSA 2026 s.70)The Secretary of State may by regulations require providers of specified internet services to prevent or restrict access by children of specified ages to services or features, including time-of-day and daily-time limits; the Act itself imposes no duty until regulations are made.other · Applies to: provider · Children's Wellbeing and Schools Act 2026 - Automated Vehicles Act 2024 s.79 (Part 4)It is an offence to make, in the course of business, a communication about a product or service likely to confuse end-users in Great Britain as to whether a vehicle that is not an authorised automated vehicle can travel autonomously, safely and legally; due-diligence defences apply.transparency disclosure · Applies to: provider · Automated Vehicles Act 2024 Milestones - 6 Apr 2025DMCCA consumer enforcement regime (unfair commercial practices; CMA direct enforcement) in force MetDigital Markets, Competition and Consumers Act 2024 (consumer enforcement regime) - 9 Mar 2026CMA guidance on complying with consumer law when using AI agents published MetCMA guidance: Complying with consumer law when using AI agents - 23 Apr 2026Current version of SS1/23 published and effective MetPRA Supervisory Statement SS1/23: Model risk management principles for banks - 29 Apr 2026Section 248 power to extend Online Safety Act duties to AI services in force at Royal Assent MetCrime and Policing Act 2026 - 15 May 2026Joint statement on frontier AI models and cyber resilience published MetBank of England, FCA and HM Treasury joint statement on frontier AI models and cyber resilience - 29 Jun 2026Section 99 (purported intimate image generators) and ss.100-101 in force MetCrime and Policing Act 2026 - 14 Jul 2026Lords second reading (tracker) MetCyber Security and Resilience (Network and Information Systems) Bill - 31 Dec 2026 (year)First regulations (social media for under-16s) to be laid before Parliament "by the end of the year"; AI chatbot measures later by regulations UpcomingGrowing up in the online world: government response (July 2026), AI chatbot measures - 7 Jan 2027Part 4 (marketing restrictions, incl. s.79 offence) in force UpcomingAutomated Vehicles Act 2024 Claims and evidence (56) - Section 248 of the Crime and Policing Act 2026, in force at Royal Assent (29 April 2026), gives the Secretary of State a power to amend the Online Safety Act 2023 to address risks of harm from AI services.Confidence: Confirmed · As of 29 Apr 2026 · evidencedEvidence and sources[Crime and Policing Act 2026, section 248 (Power to amend Online Safety Act 2023: AI)](https://www.legislation.gov.uk/ukpga/2026/20/section/248) T1 · retrieved · retrieved 8 Oct 2026 · s.248 (inserting OSA s.216A)the Secretary of State may by regulations amend any provision of this Act for or in connection with the purposes of minimising or mitigating the risks of harm to individuals in the United Kingdom presented by— - [Crime and Policing Act 2026, section 248 (Power to amend Online Safety Act 2023: AI)](https://www.legislation.gov.uk/ukpga/2026/20/section/248) T1 · retrieved · retrieved 8 Oct 2026 · s.248 commencement informationS. 248 in force at Royal Assent, see s. 255(2)(k) - [Crime and Policing Act 2026, section 248 (Power to amend Online Safety Act 2023: AI)](https://www.legislation.gov.uk/ukpga/2026/20/section/248) T1 · retrieved · retrieved 8 Oct 2026 · s.248 (OSA s.216A definitions)“AI service” means an internet service that is capable (or part of which is capable) of generating AI-generated content (no matter what proportion of content on the service is AI-generated). - The Bank of England, FCA and HM Treasury issued a joint statement on 15 May 2026 setting expectations that regulated firms plan for and mitigate cybersecurity risks posed by frontier AI.Confidence: Probable · As of 15 May 2026 · evidencedEvidence and sources[The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Section "What this means for regulated firms"In line with our operational resilience rules and expectations, regulated firms and financial market infrastructures (FMIs) (referred to as 'firms'), need to take action to plan for and mitigate cybersecurity risks posed by frontier AI. - [The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Statement headerStatement from the Bank of England, Financial Conduct Authority and HM Treasury Published on 15 May 2026 ## Statement ### Why frontier AI - The PRA's SS1/23 model risk management principles for banks, confirmed as technology-neutral and covering AI models, remained the Bank of England's primary AI model-risk supervisory expectation as at April 2026.Confidence: Probable · As of 1 Apr 2026 · evidencedEvidence and sources[Bank of England letter: Response to TSC inquiry report on AI in financial services](https://www.bankofengland.co.uk/-/media/boe/files/letter/2026/response-to-tsc-inquiry-report-on-ai-in-financial-services) T1 · retrieved · retrieved 8 Oct 2026 · BoE letter to Treasury Committee (AI approach)issued new Model Risk Management Principles for banks, which are technology- - [SS1/23 - Model risk management principles for banks](https://www.bankofengland.co.uk/prudential-regulation/publication/2023/may/model-risk-management-principles-for-banks-ss) T1 · retrieved · retrieved 8 Oct 2026 · SS1/23 introductionThe expectations are in the form of five principles considered key to implement a robust MRM framework and to manage the risk effectively across all model and risk types. The principles are intended to support firms to strengthen their policies, proc - The CMA published guidance on 9 March 2026 stating that a business is responsible under consumer law for what an AI agent does, as it would be for an employee, even where a third party designed or provides the agent.Confidence: Probable · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Section "When it comes to dealing with your customers, the same rules apply whether using AI or human agents"It's important to remember that you are responsible for what an AI agent does in the same way you are responsible for what an employee does. This is true even if someone else designed or provides the AI agent on your behalf - so make sure you think about compliance with consumer law if you are procu - Regulation 2 of the Medical Devices Regulations 2002 defines a medical device to include software intended by the manufacturer to be used specifically for diagnosis or therapeutic purposes.Confidence: Probable · evidencedEvidence and sources[The Medical Devices Regulations 2002, regulation 2](https://www.legislation.gov.uk/uksi/2002/618/regulation/2) T1 · retrieved · retrieved 8 Oct 2026 · MDR 2002 reg 2(1) "medical device"any instrument, apparatus, appliance, software, material or other article, whether used alone or in combination, together with any accessories, including the software intended by its manufacturer to be used specifically for diagnosis or therapeutic p - The FCA has said it will not introduce new AI-specific regulation and will instead rely on existing frameworks such as the Consumer Duty and SM&CR.Confidence: Probable · As of 8 Jun 2026 · evidencedEvidence and sources[AI in financial services: shaping our approach through industry engagement](https://www.fca.org.uk/news/blogs/ai-financial-services-approach) T1 · retrieved · retrieved 8 Oct 2026 · FCA blog, paragraph 2We have been clear that we are not going to introduce new regulations for AI. Instead, we'll rely on existing frameworks, including the Consumer Duty, - The PRA's SS1/23 model risk management principles for banks are technology-neutral and the Bank of England has confirmed they apply to AI models.Confidence: Probable · As of 17 May 2023 · evidencedEvidence and sources[Bank of England letter: Response to TSC inquiry report on AI in financial services](https://www.bankofengland.co.uk/-/media/boe/files/letter/2026/response-to-tsc-inquiry-report-on-ai-in-financial-services) T1 · retrieved · retrieved 8 Oct 2026 · BoE letter to Treasury Committee (AI approach)issued new Model Risk Management Principles for banks, which are technology- - [SS1/23 - Model risk management principles for banks](https://www.bankofengland.co.uk/prudential-regulation/publication/2023/may/model-risk-management-principles-for-banks-ss) T1 · retrieved · retrieved 8 Oct 2026 · SS1/23 introductionThe expectations are in the form of five principles considered key to implement a robust MRM framework and to manage the risk effectively across all model and risk types. The principles are intended to support firms to strengthen their policies, proc - The Bank of England, FCA and HM Treasury jointly stated on 15 May 2026 that frontier AI poses cyber and operational risks firms must manage under existing operational resilience rules.Confidence: Confirmed · As of 15 May 2026 · evidencedEvidence and sources[The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Statement headerStatement from the Bank of England, Financial Conduct Authority and HM Treasury Published on 15 May 2026 ## Statement ### Why frontier AI - [FCA, Bank of England and Treasury joint statement on frontier AI models and cyber resilience](https://www.fca.org.uk/news/statements/fca-boe-treasury-joint-statement-frontier-ai-models-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Statement headerStatements First published: 15/05/2026 Last updated: 15/05/2026 - The FCA stated on 8 June 2026 that it will not introduce new AI-specific regulation and will rely on existing frameworks including the Consumer Duty and SM&CR, and on 21 April 2026 announced a second AI Live Testing cohort.Confidence: Probable · As of 8 Jun 2026 · evidencedEvidence and sources[AI in financial services: shaping our approach through industry engagement](https://www.fca.org.uk/news/blogs/ai-financial-services-approach) T1 · retrieved · retrieved 8 Oct 2026 · FCA blog, paragraph 2We have been clear that we are not going to introduce new regulations for AI. Instead, we'll rely on existing frameworks, including the Consumer Duty, - [AI in financial services: shaping our approach through industry engagement](https://www.fca.org.uk/news/blogs/ai-financial-services-approach) T1 · retrieved · retrieved 8 Oct 2026 · FCA blog, paragraph 2Instead, we’ll rely on existing frameworks, including the Consumer Duty, the Senior Managers and Certification Regime (SM&CR), and our expectations on governance and controls. - [FCA announces second cohort for AI Live Testing](https://www.fca.org.uk/news/press-releases/fca-announces-second-cohort-ai-live-testing) T1 · retrieved · retrieved 8 Oct 2026 · FCA press release (opening paragraph)Speaking at UK FinTech Week, Jessica Rusu, chief data, information and intelligence officer at the FCA, has confirmed the second group of firms selected to join AI Live Testing. - JSP 936 (part 1: directive) is the MOD's principal policy framework governing safe and responsible use of AI in defence.Confidence: Probable · As of 13 Nov 2024 · evidencedEvidence and sources[JSP 936: Dependable Artificial Intelligence (AI) in defence (part 1: directive)](https://www.gov.uk/government/publications/jsp-936-dependable-artificial-intelligence-ai-in-defence-part-1-directive) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK publication summaryJSP 936 (part 1: directive) is the principal policy framework governing the safe and responsible adoption of AI in MOD. - The AI Opportunities Action Plan One Year On update, dated 29 January 2026, reports the Government has met its commitments on 38 of the plan's 50 actions.Confidence: Probable · As of 29 Jan 2026 · evidencedEvidence and sources[AI Opportunities Action Plan: One Year On](https://www.gov.uk/government/publications/ai-opportunities-action-plan-one-year-on) T1 · retrieved · retrieved 8 Oct 2026 · Action Plan One Year On (introduction)Since then, the government has met its commitments on 38 of the plan’s 50 actions. - On 6 October 2026 the Government accepted all 44 recommendations of the National Commission into the Regulation of AI in Healthcare; the MHRA will consult on classification of software and AI-enabled devices before using secondary legislation to update the medical device definition.Confidence: Confirmed · As of 6 Oct 2026 · evidencedEvidence and sources[Government backs recommendations of NHS doctors-led AI Commission](https://www.gov.uk/government/news/government-backs-recommendations-of-nhs-doctors-led-ai-commission) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK news story (opening paragraph)The government has today, 6 October 2026, confirmed it will accept all 44 recommendations made by the National Commission into the Regulation of AI in Healthcare, published 10 September, and has set out how they will be delivered across the UK. Alongside the response, the MHRA is opening the call fo - [Government Response to the National Commission's Recommendations on the Regulation of AI in Healthcare](https://www.gov.uk/government/publications/government-response-to-the-national-commissions-recommendations-on-the-regulation-of-ai-in-healthcare/government-response-to-the-national-commissions-recommendations-on-the-regulation-of-ai-in-healthcare) T1 · retrieved · retrieved 8 Oct 2026 · Government response, ministerial forewordintends to accept all of the recommendations it put forward. Delivering the full benefits of AI in healthcare should be viewed as a shared endeavour a - [Government Response to the National Commission's Recommendations on the Regulation of AI in Healthcare](https://www.gov.uk/government/publications/government-response-to-the-national-commissions-recommendations-on-the-regulation-of-ai-in-healthcare/government-response-to-the-national-commissions-recommendations-on-the-regulation-of-ai-in-healthcare) T1 · retrieved · retrieved 8 Oct 2026 · Government response, Recommendation 1 (Modernising the Regulation)launch a consultation on a new, proportionate approach to classification and qualification for software and AI-enabled devices. The MHRA will then use secondary legislation to introduce: - An upda - [Government Response to the National Commission's Recommendations on the Regulation of AI in Healthcare](https://www.gov.uk/government/publications/government-response-to-the-national-commissions-recommendations-on-the-regulation-of-ai-in-healthcare/government-response-to-the-national-commissions-recommendations-on-the-regulation-of-ai-in-healthcare) T1 · retrieved · retrieved 8 Oct 2026 · Government response, Recommendation 1 (Modernising the Regulation)The MHRA will then use secondary legislation to introduce: - An updated definition of a medical device that builds u - The Digital Markets, Competition and Consumers Act 2024 (c. 13) contains the UK consumer-enforcement regime in Part 3 Chapters 3-4 and Part 4 Chapter 1.Confidence: Probable · As of 24 May 2024 · evidencedEvidence and sources[Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 3 (public enforcement of consumer protection law: court proceedings)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/3) T1 · retrieved · retrieved 8 Oct 2026 · Part 3 Chapter 3, status bannerThere are currently no known outstanding effects for the Digital Markets, Competition and Consumers Act 2024, Chapter 3. - [Digital Markets, Competition and Consumers Act 2024, Part 4 Chapter 1 (unfair commercial practices)](https://www.legislation.gov.uk/ukpga/2024/13/part/4/chapter/1) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.225(1)-(2)(1)Unfair commercial practices are prohibited. (2)The promotion of unfair commercial practices in, or in connection with, a code of conduct by— (a)a person responsible for the content of a code of c - Section 225 prohibits unfair commercial practices and section 226 defines misleading actions, which cover the provision of false or misleading information about a product, trader or other matter relevant to a transactional decision.Confidence: Probable · As of 6 Apr 2025 · evidencedEvidence and sources[Digital Markets, Competition and Consumers Act 2024, Part 4 Chapter 1 (unfair commercial practices)](https://www.legislation.gov.uk/ukpga/2024/13/part/4/chapter/1) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.225(1)-(2)(1)Unfair commercial practices are prohibited. (2)The promotion of unfair commercial practices in, or in connection with, a code of conduct by— (a)a person responsible for the content of a code of c - [Digital Markets, Competition and Consumers Act 2024, Part 4 Chapter 1 (unfair commercial practices)](https://www.legislation.gov.uk/ukpga/2024/13/part/4/chapter/1) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.226(1)(1)For the purposes of this Chapter, a commercial practice involves a misleading action if the practice involves— (a)the provision of false or misleading information relating to a product, a trader or any other matter relevant to a transactional decision, (b - The CMA published its guidance "Complying with consumer law when using AI agents" and the research paper "Agentic AI and consumers" on 9 March 2026.Confidence: Confirmed · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Page headerComplying with consumer law when using AI agents Published 9 March 2026 ## Contents 1. When it comes to dealing with y - [Agentic AI and consumers (CMA research and analysis)](https://www.gov.uk/government/publications/agentic-ai-and-consumers/agentic-ai-and-consumers) T1 · retrieved · retrieved 8 Oct 2026 · Page headerAgentic AI and consumers Published 9 March 2026 ## Contents 1. Executive summa - [Using AI agents: complying with consumer law (CMA guidance landing page)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Landing page summaryGuidance from the Competition and Markets Authority (CMA) on how your business can benefit from agentic AI, while still meeting legal obligations. - Derived: Probable The CMA guidance explains how businesses can use agentic AI with customers while complying with consumer law; it is guidance and not itself legislation.Confidence: Probable · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · IntroductionThis page provides guidance on how your business can use agentic AI to engage with its customers, while staying on the right side of the law and doing right by them. - [Using AI agents: complying with consumer law (CMA guidance landing page)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Landing page summaryGuidance from the Competition and Markets Authority (CMA) on how your business can benefit from agentic AI, while still meeting legal obligations. - The CMA says a business is responsible for what an AI agent does in the same way as for an employee, even where someone else designed or provides the agent.Confidence: Confirmed · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Section "When it comes to dealing with your customers, the same rules apply whether using AI or human agents"It's important to remember that you are responsible for what an AI agent does in the same way you are responsible for what an employee does. This is true even if someone else designed or provides the AI agent on your behalf - so make sure you think about compliance with consumer law if you are procu - [Agentic AI and consumers (CMA research and analysis)](https://www.gov.uk/government/publications/agentic-ai-and-consumers/agentic-ai-and-consumers) T1 · retrieved · retrieved 8 Oct 2026 · Section on AI and pricing / collusionBusinesses remain responsible for the outcomes of pricing and commercial decisions shaped by AI systems, and must take proactive steps to understand, test and govern the technologies they deploy. As AI systems become more autonomous, ensuring that they are designed, monitored and constrained in ways - Derived: Probable The CMA warns that a business that breaks consumer protection law, including through an AI agent, could face enforcement action, be fined up to 10% of its worldwide turnover and be forced to compensate affected consumers.Confidence: Confirmed · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Same section, second paragraphIf you break consumer protection law, you could face action by enforcement authorities (including the CMA). You could be fined up to 10% of your worldwide turnover, and possibly forced to compensate affected consumers. - [Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 4 (CMA direct enforcement: infringement notices)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/4) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.182(6) (CMA final infringement notice)The amount of a monetary penalty imposed under subsection (4)(b) must be a fixed amount not exceeding £300,000 or, if higher, 10% of the total value of the turnover (if any) of the respondent. - The guidance says businesses should consider labelling AI agents so they do not mislead customers into thinking they deal with a real person, and should keep a human in the loop checking the agent's decisions.Confidence: Probable · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Section "Tell your customers if you use an AI agent"If you use an AI agent, consider whether you need to label it so you do not mislead customers into thinking that a service is being provided by a real person – if the fact they are dealing with AI rather than a person might affect people's decisions then you should tell them. Do not overstate the ro - [Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Section "Monitor how your AI agents are performing"Make sure there is a human in the loop, actively checking that the AI agent is making correct decisions and generating expected results. Regular human oversight is important to catch mistakes and ensure that AI agents are completing tasks in a legally complian - The guidance applies the DMCCA to AI agents running marketing campaigns, processing refunds, answering customer queries and providing comparison services, including accurate pricing, labelled paid endorsements and genuine offers.Confidence: Probable · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Example: using an AI agent to run your latest marketing campaignThink about the requirements of the Digital Markets, Competition and Consumers Act 2024 when you design and train the AI. For example: - [Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Section "When it comes to dealing with your customers, the same rules apply whether using AI or human agents"It's important to remember that you are responsible for what an AI agent does in the same way you are responsible for what an employee does. This is true even if someone else designed or provides the AI agent on your behalf - so make sure you think about compliance with consumer law if you are procu - The Bank of England, the FCA and HM Treasury published their joint statement on frontier AI models and cyber resilience on 15 May 2026.Confidence: Confirmed · As of 15 May 2026 · evidencedEvidence and sources[The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Statement headerStatement from the Bank of England, Financial Conduct Authority and HM Treasury Published on 15 May 2026 ## Statement ### Why frontier AI - [FCA, Bank of England and Treasury joint statement on frontier AI models and cyber resilience](https://www.fca.org.uk/news/statements/fca-boe-treasury-joint-statement-frontier-ai-models-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Statement headerStatements First published: 15/05/2026 Last updated: 15/05/2026 - Derived: Probable The joint statement says firms need to act to mitigate frontier-AI cyber risk "in line with our operational resilience rules and expectations", and that the authorities judge firms should take active steps across five domains; it sets no new rule.Confidence: Probable · As of 15 May 2026 · evidencedEvidence and sources[The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Section "What this means for regulated firms"In line with our operational resilience rules and expectations, regulated firms and financial market infrastructures (FMIs) (referred to as 'firms'), need to take action to plan for and mitigate cybersecurity risks posed by frontier AI. - [FCA, Bank of England and Treasury joint statement on frontier AI models and cyber resilience](https://www.fca.org.uk/news/statements/fca-boe-treasury-joint-statement-frontier-ai-models-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Section "What this means for regulated firms"The Government and UK financial authorities judge that firms should be taking active steps across several domains.* - The authorities say firms should ensure board understanding of frontier AI risks, remediate vulnerabilities faster and at scale, manage third-party and open-source risk, adopt automated defences and be able to respond and recover quickly.Confidence: Confirmed · As of 15 May 2026 · evidencedEvidence and sources[The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Domain "Governance and strategy"Firms should ensure their boards and senior management have sufficient understanding of frontier AI risks. This is important to set strategi - [The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Domain "Identification and risk management of vulnerabilities"Firms should be able to triage, prioritise, risk assess, and remediate vulnerabilities more quickly, more frequently, and at scale, including through automation where appropriate, while mitigating the - [The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Domain "Managing risks from third parties"Firms should effectively manage frontier AI cyber risks from third parties and supply chains, including open-source software. This means firms should have the c - [The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Section "What this means for regulated firms"In line with our operational resilience rules and expectations, regulated firms and financial market infrastructures (FMIs) (referred to as 'firms'), need to take action to plan for and mitigate cybersecurity risks posed by frontier AI. - The statement says the cyber capabilities of current frontier AI models already exceed what a skilled practitioner could achieve, at higher speed, greater scale and lower cost, which amplifies threats to firms and financial stability if used maliciously.Confidence: Probable · As of 15 May 2026 · evidencedEvidence and sources[The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Section "Why frontier AI matters for firms"The cyber capabilities of current frontier AI models are already exceeding what a skilled practitioner could achieve, and at a significantly higher speed, greater scale, and lower cost. These capabilities, if used maliciously, amplify cyber threats to firms' s - The Bank of England published the July 2026 Financial Stability Report and the FPC record, including the frontier AI judgement, on 7 July 2026.Confidence: Confirmed · As of 7 Jul 2026 · evidencedEvidence and sources[Financial Policy Committee Record - July 2026](https://www.bankofengland.co.uk/financial-policy-committee-record/2026/july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Page headerFinancial Stability Report - July 2026 Published on 07 July 2026 Financial Policy Committee Record - July 2026 (PDF 0. - [Financial Stability Report - July 2026](https://www.bankofengland.co.uk/financial-stability-report/2026/july-2026) T1 · retrieved · retrieved 8 Oct 2026 · FSR July 2026 headline summaryRapid advances in and differing access to AI capabilities have increased cyber and operational resilience risks - The FPC judged that rapid progress in frontier AI capabilities since the December Financial Stability Report presents a significant increase in financial stability risks from cyber and operational vulnerabilities.Confidence: Confirmed · As of 7 Jul 2026 · evidencedEvidence and sources[Financial Policy Committee Record - July 2026](https://www.bankofengland.co.uk/financial-policy-committee-record/2026/july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Headline judgements, "Developments in frontier AI"Rapid progress in frontier AI capabilities since the December FSR present a significant increase in the risks to financial stability from cyber and operational vulnerabilities. ** Frontier AI models are increasingly capa - [Financial Stability Report - July 2026](https://www.bankofengland.co.uk/financial-stability-report/2026/july-2026) T1 · retrieved · retrieved 8 Oct 2026 · FSR July 2026 headline summaryRapid advances in and differing access to AI capabilities have increased cyber and operational resilience risks - The FPC said the developments reinforce the importance of firms acting on the May 2026 Bank, FCA and HM Treasury joint statement and on existing cyber and operational resilience frameworks.Confidence: Probable · As of 7 Jul 2026 · evidencedEvidence and sources[Financial Policy Committee Record - July 2026](https://www.bankofengland.co.uk/financial-policy-committee-record/2026/july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Headline judgements, "Developments in frontier AI"These developments reinforce the importance of firms acting on the May 2026 joint statement from the Bank, Financial Conduct Authority (FCA) and HM Treasury on frontier models, and on existing cyber and operational resilience frameworks. UK authorities are providing further support through supervi - The FCA published its multi-firm review "Frontier AI and cyber resilience" on 2 September 2026.Confidence: Probable · As of 2 Sep 2026 · evidencedEvidence and sources[Frontier AI and cyber resilience (FCA multi-firm review)](https://www.fca.org.uk/publications/multi-firm-reviews/frontier-ai-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Publication headerMulti-firm reviews Published: 02/09/2026 Last updated: 02/09/2026 - The FCA says the review summarises observations reported by firms and does not introduce new rules, guidance or regulatory expectations.Confidence: Probable · As of 2 Sep 2026 · evidencedEvidence and sources[Frontier AI and cyber resilience (FCA multi-firm review)](https://www.fca.org.uk/publications/multi-firm-reviews/frontier-ai-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Section "What we expect from firms"This publication summarises observations reported by firms during our engagement. It does not introduce new rules, guidance or regulatory expectations. - The Children's Wellbeing and Schools Act 2026 (c. 21) received Royal Assent on 29 April 2026.Confidence: Confirmed · As of 29 Apr 2026 · evidencedEvidence and sources[Children's Wellbeing and Schools Act 2026 (whole Act)](https://www.legislation.gov.uk/ukpga/2026/21) T1 · retrieved · retrieved 8 Oct 2026 · Long title and enacting formula[29th April 2026] Be it enacted by the King’s most Excellent Majesty, by and with the advice and consent of the Lords S - The Children's Wellbeing and Schools Act 2026 is an Act of Parliament; its Part 3 online safety power is in force.Confidence: Confirmed · As of 29 Apr 2026 · evidencedEvidence and sources[Children's Wellbeing and Schools Act 2026 (whole Act)](https://www.legislation.gov.uk/ukpga/2026/21) T1 · retrieved · retrieved 8 Oct 2026 · Long title and enacting formula[29th April 2026] Be it enacted by the King’s most Excellent Majesty, by and with the advice and consent of the Lords S - [Children's Wellbeing and Schools Act 2026 (whole Act)](https://www.legislation.gov.uk/ukpga/2026/21) T1 · retrieved · retrieved 8 Oct 2026 · CWSA 2026 s.70 commencement noteS. 70 in force at Royal Assent, see s. 78(1)(b) - Derived: Probable Section 70 (power to restrict children's access to internet services) came into force at Royal Assent on 29 April 2026.Confidence: Confirmed · As of 29 Apr 2026 · evidencedEvidence and sources[Children's Wellbeing and Schools Act 2026 (whole Act)](https://www.legislation.gov.uk/ukpga/2026/21) T1 · retrieved · retrieved 8 Oct 2026 · CWSA 2026 s.70 commencement noteS. 70 in force at Royal Assent, see s. 78(1)(b) - [Children's Wellbeing and Schools Act 2026 (whole Act)](https://www.legislation.gov.uk/ukpga/2026/21) T1 · retrieved · retrieved 8 Oct 2026 · Long title and enacting formula[29th April 2026] Be it enacted by the King’s most Excellent Majesty, by and with the advice and consent of the Lords S - Section 70 inserts Online Safety Act 2023 section 214A, which lets the Secretary of State make regulations requiring providers of specified internet services to prevent or restrict access by relevant children to services or features, including daily time limits; the Explanatory Notes list AI chatbots among emerging services the consultation covers.Confidence: Confirmed · As of 29 Apr 2026 · evidencedEvidence and sources[Children's Wellbeing and Schools Act 2026, Part 3 (as enacted)](https://www.legislation.gov.uk/ukpga/2026/21/part/3/enacted) T1 · retrieved · retrieved 8 Oct 2026 · CWSA 2026 s.70 inserting Online Safety Act 2023 s.214A(1)The Secretary of State may, for the purpose of protecting relevant children from a risk of harm (including harm presented by content), make provision by regulations requiring providers of specified internet services— - [Children's Wellbeing and Schools Act 2026, Part 3 (as enacted)](https://www.legislation.gov.uk/ukpga/2026/21/part/3/enacted) T1 · retrieved · retrieved 8 Oct 2026 · OSA 2023 s.214A(4)(a)(a)limit the amount of time per day, or over the course of a specified period, for which relevant children may access the service or a specified functionality or other feature of the service; - [Children's Wellbeing and Schools Act 2026, Explanatory Notes (Part 3, online safety)](https://www.legislation.gov.uk/ukpga/2026/21/notes/division/3/index.htm) T1 · retrieved · retrieved 8 Oct 2026 · Explanatory Notes, Part 3, "VPN Services and Social Media" (consultation scope)use of emerging services such as AI chatbots, and whether changes to the digital age of consent are appropriate. - The Government published its response to the "Growing up in the online world" consultation on 15 July 2026.Confidence: Probable · As of 15 Jul 2026 · evidencedEvidence and sources[Growing up in the online world: a national consultation (GOV.UK consultation page)](https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation) T1 · retrieved · retrieved 8 Oct 2026 · Updates to this page2. 7 August 2026 Added HTML version of the July consultation response. 3. 15 July 2026 Updated with the final gove - The response announces policy and says definitions and detail will be set out in regulations; it creates no legal duty itself.Confidence: Probable · As of 15 Jul 2026 · evidencedEvidence and sources[Growing up in the online world: government response (July 2026)](https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation/outcome/growing-up-in-the-online-world-government-response-july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Chapter 3, AI chatbotsThe detailed definitions of which chatbots are in scope of these measures will be set out in regulations in due course. - [Growing up in the online world: government response (July 2026)](https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation/outcome/growing-up-in-the-online-world-government-response-july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Chapter 1we will use the powers under the Children’s Wellbeing and Schools Act 2026 to do so. - Derived: Probable The Government said it will require AI chatbots to introduce mandatory breaks for all children under 18, working with an expert panel on how frequent and how long breaks should be.Confidence: Probable · As of 15 Jul 2026 · evidencedEvidence and sources[Growing up in the online world: government response (July 2026)](https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation/outcome/growing-up-in-the-online-world-government-response-july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Chapter 3, AI chatbotsWe will therefore require AI chatbots to introduce mandatory breaks for all children under-18. - Derived: Probable The Government said it will prevent under-18s from accessing AI chatbot services that primarily offer sexualised content, and other chatbot services will not be able to offer children features enabling sexually explicit or sexual role-playing content.Confidence: Probable · As of 15 Jul 2026 · evidencedEvidence and sources[Growing up in the online world: government response (July 2026)](https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation/outcome/growing-up-in-the-online-world-government-response-july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Chapter 1, summary of measuresPrevent under-18s from accessing AI chatbot services that primarily offer sexualised content. Other AI chatbot services will not be able to offer children features that enable sexually explicit or sexual role-playing content - Business and customer-service chatbots will be exempt from the chatbot measures, with detailed definitions of in-scope chatbots to be set out in regulations in due course.Confidence: Probable · As of 15 Jul 2026 · evidencedEvidence and sources[Growing up in the online world: government response (July 2026)](https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation/outcome/growing-up-in-the-online-world-government-response-july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Chapter 3, AI chatbotsChatbots that are typically used in business or customer service settings will be exempt from the measures. - [Growing up in the online world: government response (July 2026)](https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation/outcome/growing-up-in-the-online-world-government-response-july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Chapter 3, AI chatbotsThe detailed definitions of which chatbots are in scope of these measures will be set out in regulations in due course. - Derived: Probable The Government said it will work with regulators to act on chatbots that share harmful mental health advice and will consider all options, including banning children from certain chatbots where other mechanisms are not enough.Confidence: Probable · As of 15 Jul 2026 · evidencedEvidence and sources[Growing up in the online world: government response (July 2026)](https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation/outcome/growing-up-in-the-online-world-government-response-july-2026) T1 · retrieved · retrieved 8 Oct 2026 · Chapter 3, AI chatbots, "What will change"We will work with regulators to take action on chatbots that share harmful mental health advice and will consider all options, including banning children from certain chatbots where other regulatory and safety mechanisms are not enough. - The Automated Vehicles Act 2024 (c. 10) sets a self-driving test, under section 1, for authorising vehicles that travel autonomously in Great Britain.Confidence: Confirmed · evidencedEvidence and sources[Automated Vehicles Act 2024, section 1 (the self-driving test)](https://www.legislation.gov.uk/ukpga/2024/10/section/1) T1 · retrieved · retrieved 8 Oct 2026 · AVA 2024 s.1(2)(a)it is designed or adapted with the intention that a feature of the vehicle will allow it to travel autonomously, and - [Automated Vehicles Act 2024, section 1 (the self-driving test)](https://www.legislation.gov.uk/ukpga/2024/10/section/1) T1 · retrieved · retrieved 8 Oct 2026 · AVA 2024 s.1(2)(b)it is capable of doing so, by means of that feature, safely and legally. - The Automated Vehicles Act 2024 is an Act of Parliament commenced in stages by regulations; Part 4 commences on 7 January 2027.Confidence: Confirmed · evidencedEvidence and sources[The Automated Vehicles Act 2024 (Commencement No. 3) Regulations 2026 (SI 2026/731)](https://www.legislation.gov.uk/uksi/2026/731/made) T1 · retrieved · retrieved 8 Oct 2026 · SI 2026/731 reg 2Part 4 of the Automated Vehicles Act 2024 (marketing restrictions), so far as not already in force, comes into force on 7th January 2027. - [Automated Vehicles Act 2024 (whole Act)](https://www.legislation.gov.uk/ukpga/2024/10) T1 · retrieved · retrieved 8 Oct 2026 · AVA 2024 s.79(5)(c) and commencement note(c)on conviction on indictment, to imprisonment for a term not exceeding 2 years or a fine (or both). Commencement Information I82S. 79 not in force at Royal Assent, see s. 99(1) Prospective # - Section 1 of the Act defines the self-driving test by reference to intended design, autonomous capability, and safe and lawful operation in the intended location and circumstances.Confidence: Confirmed · evidencedEvidence and sources[Automated Vehicles Act 2024, section 1 (the self-driving test)](https://www.legislation.gov.uk/ukpga/2024/10/section/1) T1 · retrieved · retrieved 8 Oct 2026 · AVA 2024 s.1(2)(a)it is designed or adapted with the intention that a feature of the vehicle will allow it to travel autonomously, and - [Automated Vehicles Act 2024, section 1 (the self-driving test)](https://www.legislation.gov.uk/ukpga/2024/10/section/1) T1 · retrieved · retrieved 8 Oct 2026 · AVA 2024 s.1(2)(b)it is capable of doing so, by means of that feature, safely and legally. - Derived: Probable Part 4 of the Act (marketing restrictions), so far as not already in force, comes into force on 7 January 2027 under SI 2026/731 made 1 July 2026.Confidence: Confirmed · As of 7 Jan 2027 · evidencedEvidence and sources[The Automated Vehicles Act 2024 (Commencement No. 3) Regulations 2026 (SI 2026/731)](https://www.legislation.gov.uk/uksi/2026/731/made) T1 · retrieved · retrieved 8 Oct 2026 · SI 2026/731 reg 2Part 4 of the Automated Vehicles Act 2024 (marketing restrictions), so far as not already in force, comes into force on 7th January 2027. - [The Automated Vehicles Act 2024 (Commencement No. 3) Regulations 2026 (SI 2026/731)](https://www.legislation.gov.uk/uksi/2026/731/made) T1 · retrieved · retrieved 8 Oct 2026 · SI 2026/731 explanatory noteThey bring into force Part 4 of the Act, so far as not already in force, on 7th January 2027. Part 4 of the Act makes provision for marketing restrictions in relation to automated vehicles. Section 78 of the Act came int - The Cyber Security and Resilience (Network and Information Systems) Bill is a Government Bill that has passed the House of Commons and is before the House of Lords; it is not yet an Act.Confidence: Probable · evidencedEvidence and sources[Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4035) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Bill type:|Government Bill| |--|--| |Originating House:|House of Commons| |Current House:|House of Lords| |Originating session (b - [Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4035) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Originating session (bill system ID):|Parliament 59 - Session 1 (2024-26)| |Is Act:|false| |Is with - The Bill has no legal force while before Parliament.Confidence: Probable · evidencedEvidence and sources[Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4035) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Bill type:|Government Bill| |--|--| |Originating House:|House of Commons| |Current House:|House of Lords| |Originating session (b - [Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Bill Papers)](https://api.parliament.uk/bill-papers/bills/4035) T1 · retrieved · retrieved 8 Oct 2026 · Parliament bill page table|Originating session (bill system ID):|Parliament 59 - Session 1 (2024-26)| |Is Act:|false| |Is with - The Government states the Bill will reform and add to the Network and Information Systems Regulations 2018, extending scope to managed service providers, data centres and supply chains.Confidence: Probable · evidencedEvidence and sources[Cyber Security and Resilience (Network and Information Systems) Bill: summary of the Bill](https://www.gov.uk/government/publications/cyber-security-and-resilience-network-and-information-systems-bill-factsheets/summary-of-the-bill) T1 · retrieved · retrieved 8 Oct 2026 · Section "What are we going to do?"The Cyber Security and Resilience (Network and Information Systems) Bill will reform and add to the existing Network and Information Systems (NIS) Regulations 2018, to increase UK defences against cyber-attacks, better protecting the services the public rely on to go about their normal lives - [Cyber Security and Resilience (Network and Information Systems) Bill: summary of the Bill](https://www.gov.uk/government/publications/cyber-security-and-resilience-network-and-information-systems-bill-factsheets/summary-of-the-bill) T1 · retrieved · retrieved 8 Oct 2026 · Section "Why is reform needed?"cyber criminals are exploiting new routes – managed service providers, data centres and critical parts of supply chains – to threaten our way of life. - A tracker reports the Bill was introduced to the Commons on 12 November 2025 and had its Lords second reading on 14 July 2026.Confidence: Uncertain · As of 12 Nov 2025 · evidencedEvidence and sources[Cyber Security and Resilience Bill: legislative timeline (tracker)](https://csrbill.co.uk/timeline/) T3 · retrieved · retrieved 8 Oct 2026 · Timeline table|Introduction to Parliament (First Reading)|12 November 2025|Done|The Bill was f - [Cyber Security and Resilience Bill: legislative timeline (tracker)](https://csrbill.co.uk/timeline/) T3 · retrieved · retrieved 8 Oct 2026 · Timeline table|Lords stages|Second Reading 14 July 2026|In progress|The Bill is now before the - The Solicitors Regulation Authority published a warning notice on misuse of AI, relevant to all firms and individuals it regulates, on 17 August 2026.Confidence: Confirmed · As of 17 Aug 2026 · evidencedEvidence and sources[Misuse of AI: warning notice (Solicitors Regulation Authority)](https://www.sra.org.uk/solicitors/guidance/misuse-ai/) T1 · retrieved · retrieved 8 Oct 2026 · Section "Who is this warning notice relevant to?"This warning notice is relevant to all firms and individuals we regulate. - The SRA says use of AI does not change the professional standards expected of solicitors and law firms, and reports 42 AI-misuse reports between July 2025 and July 2026 with ongoing investigations.Confidence: Confirmed · As of 17 Aug 2026 · evidencedEvidence and sources[SRA cautions profession about safe and responsible use of AI in legal sector](https://www.sra.org.uk/news/news/releases/responsible-use-ai/) T1 · retrieved · retrieved 8 Oct 2026 · Press release bodythe use of AI does not change the professional standards expected of solicitors and law firms. - [SRA cautions profession about safe and responsible use of AI in legal sector](https://www.sra.org.uk/news/news/releases/responsible-use-ai/) T1 · retrieved · retrieved 8 Oct 2026 · Press release bodyThe SRA received 42 reports related to the potential misuse of AI between July 2025 and July 2026. - [SRA cautions profession about safe and responsible use of AI in legal sector](https://www.sra.org.uk/news/news/releases/responsible-use-ai/) T1 · retrieved · retrieved 8 Oct 2026 · Press release bodyThere are a number of ongoing investigations relating to misuse of AI, including on issues relating to inaccurate legal citations, supervision and confidentiality. - The Courts and Tribunals Judiciary issued refreshed AI guidance for judicial office holders dated 31 October 2025.Confidence: Confirmed · As of 31 Oct 2025 · evidencedEvidence and sources[Artificial Intelligence (AI) Guidance for Judicial Office Holders (31 October 2025)](https://www.judiciary.uk/wp-content/uploads/2025/10/Artificial-Intelligence-AI-Guidance-for-Judicial-Office-Holders-2.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Section 1, IntroductionAny use of AI by or on behalf of the judiciary must be consistent with the judiciary's overarching obligation to protect the integrity of the administration of justice. This gu - [Artificial Intelligence (AI) Judicial Guidance (October 2025)](https://www.judiciary.uk/guidance-and-resources/artificial-intelligence-ai-judicial-guidance-october-2025/) T1 · retrieved · retrieved 8 Oct 2026 · Foreword by Lord Justice BirssThe use of AI by the judiciary must be consistent with its overarching obligation to protect the integrity of the administration of justice and uphold the rule of law. - The guidance states that any use of AI by or on behalf of the judiciary must be consistent with the judiciary's overarching obligation to protect the integrity of the administration of justice.Confidence: Confirmed · As of 31 Oct 2025 · evidencedEvidence and sources[Artificial Intelligence (AI) Guidance for Judicial Office Holders (31 October 2025)](https://www.judiciary.uk/wp-content/uploads/2025/10/Artificial-Intelligence-AI-Guidance-for-Judicial-Office-Holders-2.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Section 1, IntroductionAny use of AI by or on behalf of the judiciary must be consistent with the judiciary's overarching obligation to protect the integrity of the administration of justice. This gu - [Artificial Intelligence (AI) Judicial Guidance (October 2025)](https://www.judiciary.uk/guidance-and-resources/artificial-intelligence-ai-judicial-guidance-october-2025/) T1 · retrieved · retrieved 8 Oct 2026 · Foreword by Lord Justice BirssThe use of AI by the judiciary must be consistent with its overarching obligation to protect the integrity of the administration of justice and uphold the rule of law. - The document is judicial guidance for office holders and does not create statutory duties.Confidence: Probable · As of 31 Oct 2025 · evidencedEvidence and sources[Artificial Intelligence (AI) Guidance for Judicial Office Holders (31 October 2025)](https://www.judiciary.uk/wp-content/uploads/2025/10/Artificial-Intelligence-AI-Guidance-for-Judicial-Office-Holders-2.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Section 1, IntroductionAny use of AI by or on behalf of the judiciary must be consistent with the judiciary's overarching obligation to protect the integrity of the administration of justice. This gu - DSIT published the AI Risk Management Toolkit on 8 September 2026 to help AI project teams understand, assess and manage risks when designing, procuring or delivering AI products.Confidence: Confirmed · As of 8 Sep 2026 · evidencedEvidence and sources[AI Risk Management Toolkit (DSIT)](https://www.gov.uk/government/publications/ai-risk-management-toolkit) T1 · retrieved · retrieved 8 Oct 2026 · Page summaryGuidance to help anyone involved in AI projects understand, assess and manage risks when designing, procuring or delivering AI products. - [AI Risk Management Toolkit: guidance (DSIT)](https://www.gov.uk/government/publications/ai-risk-management-toolkit/ai-risk-management-toolkit-guidance) T1 · retrieved · retrieved 8 Oct 2026 · Guidance introductionThe AI Risk Management Toolkit is intended as a starting point for teams looking to implement good risk management practices. - The Ministry of Justice's AI Action Plan for Justice one-year-on update, published 24 September 2026, adds a fourth strategic priority to strengthen the response to emerging AI risks.Confidence: Probable · As of 24 Sep 2026 · evidencedEvidence and sources[AI action plan for justice: one year on (Ministry of Justice)](https://www.gov.uk/government/publications/ai-action-plan-for-justice-one-year-on/ai-action-plan-for-justice-one-year-on) T1 · retrieved · retrieved 8 Oct 2026 · Introductiona new strategic priority to strengthen our response to emerging AI risks. - The FCA-commissioned Mills Review, published 6 July 2026, sets out seven recommendations for the FCA Board and Executive, including adapting the regulatory perimeter and monitoring the transition to autonomous models.Confidence: Probable · As of 6 Jul 2026 · evidencedEvidence and sources[FCA publishes landmark review into impact of AI on retail financial services](https://www.fca.org.uk/news/press-releases/fca-publishes-landmark-review-impact-ai-retail-financial-services) T1 · retrieved · retrieved 8 Oct 2026 · Key recommendationsThe Mills Review also outlines 7 recommendations for the FCA Board and Executive to consider, which are as follows: - The Bank of England told the Treasury Committee, in a letter dated 1 April 2026, that it does not agree it is taking a 'wait and see' approach to AI in financial services, and that it agrees stress testing and scenario analysis are valuable tools for understanding AI risks.Confidence: Probable · As of 1 Apr 2026 · evidencedEvidence and sources[Bank of England letter: Response to TSC inquiry report on AI in financial services](https://www.bankofengland.co.uk/-/media/boe/files/letter/2026/response-to-tsc-inquiry-report-on-ai-in-financial-services) T1 · retrieved · retrieved 8 Oct 2026 · Letter, general responsewe do not agree with the TSC's characterisation that the Bank is taking a 'wait and see' approach to the use of AI in financial services. The Bank (including the PRA) i - [Bank of England letter: Response to TSC inquiry report on AI in financial services](https://www.bankofengland.co.uk/-/media/boe/files/letter/2026/response-to-tsc-inquiry-report-on-ai-in-financial-services) T1 · retrieved · retrieved 8 Oct 2026 · Letter, response to recommendation on stress testingfor AI-driven market shocks, the Bank of England and the Financial Conduct Authority must conduct AI-specific stress testing. As noted in Open evidence ### 08Safety & Incident ReportingQuiet▾# Nothing recorded for this module in the research of 2026-10-08. 0 instruments · 0 obligations · 0 claims Nothing recorded for this module in the research of 2026-10-08. ### 09Standards & ConformityActive▾# AI Cyber Security Code of Practice (Published 2025-01-31): Voluntary government code setting baseline cyber security principles for securing AI systems. 3 instruments · 0 obligations · 8 claims 3 instruments (3 current) · 0 obligations · 8 claims · 0 milestones Instruments - AI Cyber Security Code of Practice Published 2025-01-31Voluntary government code setting baseline cyber security principles for securing AI systems. DSIT said it would submit the Code to ETSI as the basis for a global standard.Non-binding · Authority: Department for Science, Innovation and Technology · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice) - BS EN ISO/IEC 42001:2026 Artificial intelligence management system Published 2026-03-31UK and European adoption of ISO/IEC 42001 AI management system standard, published by BSI on 31 March 2026 with no technical differences from BS ISO/IEC 42001:2023.Non-binding · Authority: BSI Group (British Standards Institution) · Verified 8 Oct 2026 · [Official text](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) - ETSI EN 304 223 V2.1.1: Baseline Cyber Security Requirements for AI Models and Systems Date not recordedEuropean standard defining baseline security requirements for AI models and systems, including generative AI. It is voluntary unless adopted or referenced by a regulator.Non-binding · Authority: European Telecommunications Standards Institute · Verified 8 Oct 2026 · [Official text](https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf) Claims and evidence (8) - ETSI published EN 304 223, defining baseline cyber security requirements for AI models and systems, based on DSIT's AI Cyber Security Code of Practice.Confidence: Probable · evidencedEvidence and sources[AI Cyber Security Code of Practice](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice) T1 · retrieved · retrieved 8 Oct 2026 · Code of Practice, next stepsFollowing support for our approach, DSIT, in close collaboration with NCSC, will submit the Code and the implementation guide in the European Telecommunications Standards Institute (ETSI) where it will be used as the basis for a new global standard (TS 104 223) and accompanying implementation guide - [ETSI EN 304 223 V2.1.1 (2025-12): Securing Artificial Intelligence (SAI); Baseline Cyber Security Requirements for AI Models and Systems](https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf) T1 · retrieved · retrieved 8 Oct 2026 · ETSI EN 304 223, clause 1 (Scope)The present document defines baseline security requirements for AI models and systems. The present document - BSI published BS EN ISO/IEC 42001:2026 on 31 March 2026 as the UK/European adoption of ISO/IEC 42001:2023 for AI management systems, with no change to requirements.Confidence: Confirmed · As of 31 Mar 2026 · evidencedEvidence and sources[BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge page titleBS EN ISO/IEC 42001:2026 | 31 Mar 2026 | BSI Knowledge - ETSI EN 304 223 defines baseline cyber security requirements for AI models and systems, developed from DSIT's AI Cyber Security Code of Practice in collaboration with NCSC.Confidence: Probable · evidencedEvidence and sources[ETSI EN 304 223 V2.1.1 (2025-12): Securing Artificial Intelligence (SAI); Baseline Cyber Security Requirements for AI Models and Systems](https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf) T1 · retrieved · retrieved 8 Oct 2026 · ETSI EN 304 223, clause 1 (Scope)The present document defines baseline security requirements for AI models and systems. The present document - BSI published BS EN ISO/IEC 42001:2026, the UK adoption of the AI management system standard, on 31 March 2026, with no technical changes from the 2023 edition.Confidence: Probable · As of 31 Mar 2026 · evidencedEvidence and sources[BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge page titleBS EN ISO/IEC 42001:2026 | 31 Mar 2026 | BSI Knowledge - The AI Cyber Security Code of Practice sets baseline cyber security principles for AI systems and is a voluntary government code.Confidence: Probable · As of 31 Jan 2025 · evidencedEvidence and sources[AI Cyber Security Code of Practice](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice) T1 · retrieved · retrieved 8 Oct 2026 · Code of Practice, introductionThis Code of Practice sets out baseline cyber security principles to help secure AI systems and the organisations which develop and deploy them. Addressing the cyber risks to AI will protect our citizens and our digital economy while ensuring the man - DSIT said it would submit the UK AI Cyber Security Code to ETSI as the basis for a global standard; ETSI later published EN 304 223.Confidence: Uncertain · As of 1 Dec 2025 · evidencedEvidence and sources[AI Cyber Security Code of Practice](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice) T1 · retrieved · retrieved 8 Oct 2026 · Code of Practice, next stepsFollowing support for our approach, DSIT, in close collaboration with NCSC, will submit the Code and the implementation guide in the European Telecommunications Standards Institute (ETSI) where it will be used as the basis for a new global standard (TS 104 223) and accompanying implementation guide - [ETSI EN 304 223 V2.1.1 (2025-12): Securing Artificial Intelligence (SAI); Baseline Cyber Security Requirements for AI Models and Systems](https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf) T1 · retrieved · retrieved 8 Oct 2026 · ETSI EN 304 223, clause 1 (Scope)The present document defines baseline security requirements for AI models and systems. The present document - DSIT published a Copper Horse mapping of 2,182 AI security requirements onto the 13 principles of ETSI EN 304 223 and states the UK Code mirrors that standard.Confidence: Probable · As of 10 Jul 2026 · evidencedEvidence and sources[Mapping global AI security standards, regulations and guidance (DSIT)](https://www.gov.uk/government/publications/mapping-global-ai-security-standards-regulations-and-guidance) T1 · retrieved · retrieved 8 Oct 2026 · Page bodyCopper Horse then undertook a mapping of the 2,182 requirements against the 13 principles set out in the European Telecommunications Standards Institute’s AI security global standard, EN 304 223. The government’s AI Cyber Security Code of Practice mirrors EN 304 223. - BSI published BS EN ISO/IEC 42001:2026 on 31 March 2026 as the UK and European adoption of ISO/IEC 42001 with no technical differences.Confidence: Probable · As of 31 Mar 2026 · evidencedEvidence and sources[BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge page titleBS EN ISO/IEC 42001:2026 | 31 Mar 2026 | BSI Knowledge - [BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge product pageThere are no technical differences between BS ISO/IEC 42001:2023 and BS EN ISO/IEC 42001:2026. The 2026 version is the European and UK adoption of the same standard, with no changes to its requirements or guidance. If you purchased **BS EN IS - [BS EN ISO/IEC 42001:2026 Information technology. Artificial intelligence. Management system](https://knowledge.bsigroup.com/products/information-technology-artificial-intelligence-management-system-1) T1 · retrieved · retrieved 8 Oct 2026 · BSI Knowledge product pageThe 2026 version is the European and UK adoption of the same standard, with no changes to its requirements or guidance. If you purchased BS EN ISO/IEC 42001:2026 in error and already hold BS ISO/IEC 42001:2023, please contact **Client Relatio Open evidence ### 10Authorities & EnforcementActive Derived: Probable▾# Bank of England, FCA and HM Treasury joint statement on frontier AI models and cyber resilience (Published 2026-05-15): Joint statement of 15 May 2026 saying that, in line with operational resilience rules, regulated firms and financial market infrastructures need to act on frontier-AI cyber risk across governance, vulnerability management, third-party risk, protection, and response and recovery. 9 instruments · 4 obligations · 28 claims · Next: 6 Nov 2026 (Ofcom evidence request on protections for women and girls closes) 9 instruments (9 current) · 4 obligations · 28 claims · 9 milestones Instruments - Bank of England, FCA and HM Treasury joint statement on frontier AI models and cyber resilience Published 2026-05-15Joint statement of 15 May 2026 saying that, in line with operational resilience rules, regulated firms and financial market infrastructures need to act on frontier-AI cyber risk across governance, vulnerability management, third-party risk, protection, and response and recovery.Regulatory expectation · Authority: Bank of England, Financial Conduct Authority · Verified 8 Oct 2026 · [Official text](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) - CMA publisher conduct requirement on Google general search (generative AI controls) Published 2026-06-03; entry into force not recordedConduct requirement imposed by the CMA on Google requiring publisher controls over use of search content in generative AI, clear information, engagement metrics and attribution.Binding · Authority: Competition and Markets Authority · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/find-digital-markets-measures/google-search-publisher-conduct-requirement) - Crime and Policing Act 2026 In force since 2026-04-29Creates an offence of making AI models optimised for CSA images (s.72, uncommenced), an offence of supplying purported-intimate-image generators (s.99, in force 29 June 2026), and a power to extend Online Safety Act duties to AI services (s.248, in force at Royal Assent).Binding · Authority: Office of Communications (Ofcom) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2026/20) - Data (Use and Access) Act 2025 In force since 2025-08-20Act amending UK data protection law; for AI governance it creates the s.138 purported-intimate-image offences, the ss.135-137 copyright-and-AI reporting duties, and establishes the Information Commission.Binding · Authority: Information Commission (successor to the Information Commissioner's Office) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2025/18) - Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 In force since 2026-05-12Requires the Information Commissioner to prepare a statutory code of practice on AI development/use and automated decision-making, including children's data.Binding · Authority: Information Commission (successor to the Information Commissioner's Office) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/uksi/2026/425/made) - Digital Markets, Competition and Consumers Act 2024 (consumer enforcement regime) In force since 2025-04-06Act whose consumer protection provisions prohibit unfair commercial practices and let the CMA decide infringements directly and impose penalties of up to the greater of £300,000 or 10% of turnover. The consumer regime has applied since 6 April 2025, and CMA guidance of 9 March 2026 says it governs AI agents used with consumers.Binding · Authority: Competition and Markets Authority · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2024/13) - Joint Committee on Human Rights report on human rights and the regulation of AI (HC 160) Date not recordedCommittee report calling for a dedicated AI Bill and a new single AI regulator, finding AISI engages with developers voluntarily and has no statutory power. Not binding; Government is expected to respond.Non-binding · Authority: Joint Committee on Human Rights · Verified 8 Oct 2026 · [Official text](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) - Online Safety Act 2023 Date not recordedAct imposing illegal-content risk assessment and safety duties on regulated user-to-user and search services, enforced by Ofcom with penalties of up to the greater of £18 million or 10% of qualifying worldwide revenue. Ofcom has said it applies to generative AI chatbots and platforms.Binding · Authority: Office of Communications (Ofcom) · Verified 8 Oct 2026 · [Official text](https://www.legislation.gov.uk/ukpga/2023/50) - SRA warning notice: misuse of AI Published 2026-08-17Warning notice on misuse of AI in legal services, including false citations; states reliance on AI output is not a defence and existing professional standards still apply. The SRA reports 42 AI-misuse reports from July 2025 to July 2026 and ongoing investigations.Non-binding · Authority: Solicitors Regulation Authority · Verified 8 Oct 2026 · [Official text](https://www.sra.org.uk/solicitors/guidance/misuse-ai/) Obligations - Regulation 2(1)-(2)The Information Commissioner must prepare a code of practice on good practice in processing personal data when developing and using AI and in automated decision-making, including children's data.documentation · Applies to: other · Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 - Publisher conduct requirement (final decision and notice)Google must provide publishers with effective controls over use of their search content in generative AI and related transparency, metrics and attribution measures.transparency disclosure · Applies to: provider · CMA publisher conduct requirement on Google general search (generative AI controls) - CMA guidance: Complying with consumer law when using AI agentsA business is responsible for the acts of an AI agent it uses towards customers to the same extent as for a human employee or agent, including compliance with consumer protection law.other · Applies to: deployer · CMA guidance: Complying with consumer law when using AI agents - DMCCA s.225(1) (Part 4 Chapter 1)Traders must not engage in unfair commercial practices; the prohibition applies whether the practice is carried out by a person or by a system acting for the trader (CMA guidance applies it to AI agents).prohibition · Applies to: other · Digital Markets, Competition and Consumers Act 2024 (consumer enforcement regime) Milestones - 6 Apr 2025DMCCA consumer enforcement regime (unfair commercial practices; CMA direct enforcement) in force MetDigital Markets, Competition and Consumers Act 2024 (consumer enforcement regime) - 6 Feb 2026Sexual Offences Act 2003 ss.66E-66F (purported intimate image offences) in force MetData (Use and Access) Act 2025 - 18 Mar 2026Section 136 report on copyright works and AI due within nine months of 19 June 2025; report published 18 March 2026 MetData (Use and Access) Act 2025 - 29 Apr 2026Section 248 power to extend Online Safety Act duties to AI services in force at Royal Assent MetCrime and Policing Act 2026 - 12 May 2026Regulations in force; Information Commissioner to prepare AI and ADM code of practice MetData Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 - 15 May 2026Joint statement on frontier AI models and cyber resilience published MetBank of England, FCA and HM Treasury joint statement on frontier AI models and cyber resilience - 29 Jun 2026Section 99 (purported intimate image generators) and ss.100-101 in force MetCrime and Policing Act 2026 - 30 Sep 2026Ofcom expectation that platforms have hash-matching for illegal intimate images and deepfakes in place Status not recordedOnline Safety Act 2023 - 6 Nov 2026Ofcom evidence request on protections for women and girls closes UpcomingOnline Safety Act 2023 Claims and evidence (28) - The Information Commission, established under the Data (Use and Access) Act 2025, took over the ICO's functions on 30 September 2026.Confidence: Probable · As of 30 Sep 2026 · evidencedEvidence and sources[Information Commission succeeds the ICO as UK's data protection regulator](https://www.gov.uk/government/news/information-commission-succeeds-the-ico-as-uks-data-protection-regulator) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK news story (standfirst)From today, the new Information Commission takes over the ICO's functions, modernising the regulator's governance while maintaining its independent oversight and existing powers to protect people's personal data. - [Information Commission succeeds the ICO as UK's data protection regulator](https://www.gov.uk/government/news/information-commission-succeeds-the-ico-as-uks-data-protection-regulator) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK news storyThe Commission will be led by the interim Chief Executive, Paul Arnold, alongside seven newly appointed non-executive members. - SI 2026/425, requiring the Information Commissioner to prepare a code of practice on AI and automated decision-making, came into force on 12 May 2026.Confidence: Probable · As of 12 May 2026 · evidencedEvidence and sources[The Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 (SI 2026/425), as made](https://www.legislation.gov.uk/uksi/2026/425/made) T1 · retrieved · retrieved 8 Oct 2026 · Header (Made / Laid / Coming into force)Made 16th April 2026 Laid before Parliament 21st April 2026 Coming into force 12th May 2026 The Secretary of State - [The Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 (SI 2026/425), as made](https://www.legislation.gov.uk/uksi/2026/425/made) T1 · retrieved · retrieved 8 Oct 2026 · reg 1(2)These Regulations come into force 21 days after the day on which they are laid. - Regulation 2(2) of SI 2026/425 requires the AI and automated decision-making code of practice to include guidance on children's personal data.Confidence: Probable · As of 12 May 2026 · evidencedEvidence and sources[The Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 (SI 2026/425), as made](https://www.legislation.gov.uk/uksi/2026/425/made) T1 · retrieved · retrieved 8 Oct 2026 · reg 2(1)The Commissioner must prepare an appropriate code of practice giving guidance as to good practice in the processing of personal data under the relevant data protection legislation in relation to— - [The Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 (SI 2026/425), as made](https://www.legislation.gov.uk/uksi/2026/425/made) T1 · retrieved · retrieved 8 Oct 2026 · reg 2(2)The code of practice must include guidance as to good practice in the processing of children’s personal data. - Kanishka Narayan was appointed Minister of State (Minister for Artificial Intelligence), jointly in the Cabinet Office and the Department for Business, Innovation, Science and Trade, on 20 July 2026.Confidence: Probable · As of 20 Jul 2026 · evidencedEvidence and sources[The Rt Hon Kanishka Narayan MP (Minister of State, Minister for Artificial Intelligence)](https://www.gov.uk/government/people/kanishka-narayan) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK ministerial biographyKanishka Narayan was appointed Minister of State (Minister for Artificial Intelligence) jointly in the Cabinet Office and the Department for Business, Innovation, Science and Trade on 20 July 2026. - Henry de Zoete is the Director of the AI Security Institute, succeeding interim director Adam Beaumont, who returned to GCHQ.Confidence: Confirmed · As of 21 Aug 2026 · evidencedEvidence and sources[AI Security Institute adds new executives to top team](https://www.uktech.news/ai/ai-security-institute-adds-new-executives-to-top-team-20260821) T2 · retrieved · retrieved 8 Oct 2026 · UKTN articleHenry de Zoete, a long-term AI, technology and investment advisor to the government, has been named as the director of the AI Security Institute. As an experienced AI government advisor, de Zoete played a key role in the initial establishment of the - [AI Security Institute adds new executives to top team](https://www.uktech.news/ai/ai-security-institute-adds-new-executives-to-top-team-20260821) T2 · retrieved · retrieved 8 Oct 2026 · UKTN articleThe onboarding of de Zoete follows the departure of interim director Adam Beaumont, who is returning to a previous position at GCHQ. - [Henry De Zoete (GOV.UK profile)](https://www.gov.uk/government/people/henry-de-zoete) T1 · retrieved · retrieved 8 Oct 2026 · Biography, first sentenceHenry de Zoete is the Director of the UK's AI Security Institute. He has worked - [About - The AI Security Institute (AISI)](https://www.aisi.gov.uk/about) T1 · retrieved · retrieved 8 Oct 2026 · AISI About page, leadership listOur Director Henry de Zoete OBE was formerly the Prime Minister's AI Advisor and a UK Government Investment and AI Adviser, and brin - Machinery-of-government changes announced on 22 July 2026 moved responsibility for AI strategy, public sector AI adoption and the AI Security Institute from DSIT to the Cabinet Office.Confidence: Confirmed · As of 22 Jul 2026 · evidencedEvidence and sources[Machinery of Government changes: Fact Sheet (Cabinet Office)](https://www.gov.uk/government/news/machinery-of-government-changes-fact-sheet) T1 · retrieved · retrieved 8 Oct 2026 · Section "Office for the Prime Minister and Cabinet"To deliver this step change, responsibility for AI strategy, public sector AI adoption and the AI Security Institute will move to the Cabinet Office. - [Machinery of Government changes: Fact Sheet (Cabinet Office)](https://www.gov.uk/government/news/machinery-of-government-changes-fact-sheet) T1 · retrieved · retrieved 8 Oct 2026 · Section "Redistribution of the responsibilities of DSIT"The functions of the Department for Science, Innovation and Technology (DSIT) will be redistributed to align with the Government's core economic and social agenda embedded as vital engines of growth exactly where they can have the most direct impact. - [Machinery of Government changes: Fact Sheet (Cabinet Office)](https://www.gov.uk/government/news/machinery-of-government-changes-fact-sheet) T1 · retrieved · retrieved 8 Oct 2026 · Section "Department for Digital, Culture, Media, and Sport"it will provide coherent and strategic oversight, across telecoms, media and online safety to maintain the UK's world-leading strengths in those sectors. - The ICO opened formal investigations on 3 February 2026 into X Internet Unlimited Company and X.AI LLC over the Grok AI system's potential to produce harmful sexualised image and video content.Confidence: Probable · As of 3 Feb 2026 · evidencedEvidence and sources[ICO announces investigation into Grok](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/02/ico-announces-investigation-into-grok/) T1 · retrieved · retrieved 8 Oct 2026 · ICO statement (opening paragraph)The Information Commissioner's Office (ICO) has opened formal investigations into X Internet Unlimited Company (XIUC) and X.AI LLC (X.AI) covering their processing of personal data in relation to the Grok artificial intelligence system and its potential to produce harmful sexualised image and video - Derived: Probable Ofcom opened a formal investigation into X on 12 January 2026 under the Online Safety Act over illegal content generated by the Grok chatbot, and the investigation remained open as at its 15 January 2026 update.Confidence: Probable · As of 12 Jan 2026 · evidencedEvidence and sources[Ofcom launches investigation into X over Grok sexualised imagery (Ofcom notice, Internet Archive copy)](https://web.archive.org/web/2026/https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-launches-investigation-into-x-over-grok-sexualised-imagery) T1 · retrieved · retrieved 8 Oct 2026 · Original release, 12 January 2026The UK's independent online safety watchdog, Ofcom, has today opened a formal investigation into X under the UK's Online Safety Act, to determine whether it has complied with its duties to protect people in the UK from content that is illegal in the UK. - Derived: Probable The maximum penalty Ofcom can impose under the Online Safety Act is the greater of £18 million or 10% of qualifying worldwide revenue.Confidence: Confirmed · evidencedEvidence and sources[Online Safety Act 2023, Schedule 13 (OFCOM's powers to impose penalties: maximum penalty)](https://www.legislation.gov.uk/ukpga/2023/50/schedule/13) T1 · retrieved · retrieved 8 Oct 2026 · OSA Sch 13 para 4(1)the maximum amount of the penalty for which the person is liable is whichever is the greater of— - [Online Safety Act 2023, Schedule 13 (OFCOM's powers to impose penalties: maximum penalty)](https://www.legislation.gov.uk/ukpga/2023/50/schedule/13) T1 · retrieved · retrieved 8 Oct 2026 · OSA Sch 13 para 4(1)(b)(b)10% of the person's qualifying worldwide revenue for the person's most recent complete accounting period (subject to sub-paragraph (5)). - [Ofcom to crack down on spread of illegal intimate images and deepfakes, boosting protections for women and girls online](https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-to-crack-down-on-spread-of-illegal-intimate-images-and-deepfakes-boosting-protections-for-women-and-girls-online) T1 · retrieved · retrieved 8 Oct 2026 · Ofcom NCII enforcement announcementfines of up to 10% of their global annual revenue. - [Ofcom launches investigation into X over Grok sexualised imagery (Ofcom notice, Internet Archive copy)](https://web.archive.org/web/2026/https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-launches-investigation-into-x-over-grok-sexualised-imagery) T1 · retrieved · retrieved 8 Oct 2026 · Section "Enforcement powers"We can also impose fines of up to £18 million or 10% of qualifying worldwide revenue, whichever is greater. - Ofcom enforces the Online Safety Act and has opened an enforcement programme on hash-matching for illegal intimate images and deepfakes.Confidence: Probable · evidencedEvidence and sources[Ofcom to crack down on spread of illegal intimate images and deepfakes, boosting protections for women and girls online](https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-to-crack-down-on-spread-of-illegal-intimate-images-and-deepfakes-boosting-protections-for-women-and-girls-online) T1 · retrieved · retrieved 8 Oct 2026 · Ofcom NCII enforcement announcementToday the regulator is opening an enforcement programme to monitor their efforts to crack down on the spread of such images. By 30 September, online platforms should have automated technology in place - [Ofcom to crack down on spread of illegal intimate images and deepfakes, boosting protections for women and girls online](https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-to-crack-down-on-spread-of-illegal-intimate-images-and-deepfakes-boosting-protections-for-women-and-girls-online) T1 · retrieved · retrieved 8 Oct 2026 · Ofcom NCII enforcement announcementBy 30 September, online platforms should have automated technology in place known as 'hash matching' to detect and prevent the sharing of illegal intimate images, including explicit AI-generated deepfakes. - The CMA imposed a publisher conduct requirement on Google's general search service, with documents dated 3 June 2026.Confidence: Confirmed · As of 3 Jun 2026 · evidencedEvidence and sources[Google search publisher conduct requirement (CMA)](https://www.gov.uk/find-digital-markets-measures/google-search-publisher-conduct-requirement) T1 · retrieved · retrieved 8 Oct 2026 · CMA page summaryThe Competition and Markets Authority (CMA) has imposed a conduct requirement on Google, in relation to its general search services. - [Google search publisher conduct requirement (CMA)](https://www.gov.uk/find-digital-markets-measures/google-search-publisher-conduct-requirement) T1 · retrieved · retrieved 8 Oct 2026 · CMA page document listPublisher CR final decision (PDF, 966KB) (3.6.26) - [CMA secures fairer deal for publishers and improves Google search services in UK](https://www.gov.uk/government/news/cma-secures-fairer-deal-for-publishers-and-improves-google-search-services-in-uk) T1 · retrieved · retrieved 8 Oct 2026 · CMA press release sub-headingConduct requirement introduced today gives publishers more control and stronger bargaining power over the use of their content. - The CMA imposed and enforces the publisher conduct requirement on Google.Confidence: Probable · As of 3 Jun 2026 · evidencedEvidence and sources[Google search publisher conduct requirement (CMA)](https://www.gov.uk/find-digital-markets-measures/google-search-publisher-conduct-requirement) T1 · retrieved · retrieved 8 Oct 2026 · CMA page summaryThe Competition and Markets Authority (CMA) has imposed a conduct requirement on Google, in relation to its general search services. - The AI Safety Institute was renamed the AI Security Institute by written ministerial statement of 24 February 2025.Confidence: Confirmed · As of 24 Feb 2025 · evidencedEvidence and sources[Written Ministerial Statement: AI Security Institute (renaming of the AI Safety Institute)](https://questions-statements.parliament.uk/written-statements/detail/2025-02-24/hlws454) T1 · retrieved · retrieved 8 Oct 2026 · Written Ministerial Statement HLWS454That is why I am renaming our AI Safety Institute as the AI Security Institute. - [AI Safety Institute (now AI Security Institute) - GOV.UK organisation page](https://www.gov.uk/government/organisations/ai-safety-institute) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK organisation pageAI Safety Institute is now called AI Security Institute - From 22 July 2026, responsibility for AI strategy, public sector AI adoption and the AI Security Institute moved from DSIT to the Cabinet Office.Confidence: Confirmed · As of 22 Jul 2026 · evidencedEvidence and sources[Machinery of Government changes: Fact Sheet (Cabinet Office)](https://www.gov.uk/government/news/machinery-of-government-changes-fact-sheet) T1 · retrieved · retrieved 8 Oct 2026 · Section "Office for the Prime Minister and Cabinet"To deliver this step change, responsibility for AI strategy, public sector AI adoption and the AI Security Institute will move to the Cabinet Office. - [AI Security Institute (GOV.UK organisation page)](https://www.gov.uk/government/organisations/ai-security-institute) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK organisation pageWe conduct research and develop and test mitigations. AISI is part of the Cabinet Office. ## Documents ### Guidance a - [Minister of State (Minister for Artificial Intelligence) (GOV.UK)](https://www.gov.uk/government/ministers/minister-of-state-minister-for-artificial-intelligence) T1 · retrieved · retrieved 8 Oct 2026 · ResponsibilitiesCabinet Office portfolio: - AI Strategy - AI Taskforce - AI Security Institute - AI Economics Insti - Ofcom opened a formal investigation into X on 12 January 2026 under the Online Safety Act 2023 concerning Grok-generated sexualised imagery; the investigation was still open as at 15 January 2026.Confidence: Confirmed · As of 12 Jan 2026 · evidencedEvidence and sources[Ofcom launches investigation into X over Grok sexualised imagery (Ofcom notice, Internet Archive copy)](https://web.archive.org/web/2026/https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-launches-investigation-into-x-over-grok-sexualised-imagery) T1 · retrieved · retrieved 8 Oct 2026 · Original release, 12 January 2026The UK's independent online safety watchdog, Ofcom, has today opened a formal investigation into X under the UK's Online Safety Act, to determine whether it has complied with its duties to protect people in the UK from content that is illegal in the UK. - [Our approach to online safety supervision and compliance](https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/our-approach-to-online-safety-supervision-and-compliance) T1 · retrieved · retrieved 8 Oct 2026 · Ofcom supervision approach pagewhen the Grok AI chatbot account on X was being used to create and share undressed images of people earlier this year. We quickly determine the appropriate course of action to take, considering factors such as the severity and scale of the harm, whet - On 3 February 2026 the ICO opened formal investigations into X Internet Unlimited Company and X.AI LLC covering their processing of personal data in relation to the Grok AI system.Confidence: Confirmed · As of 3 Feb 2026 · evidencedEvidence and sources[ICO announces investigation into Grok](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/02/ico-announces-investigation-into-grok/) T1 · retrieved · retrieved 8 Oct 2026 · ICO statement (opening paragraph)The Information Commissioner's Office (ICO) has opened formal investigations into X Internet Unlimited Company (XIUC) and X.AI LLC (X.AI) covering their processing of personal data in relation to the Grok artificial intelligence system and its potential to produce harmful sexualised image and video - From 22 July 2026, responsibility for AI strategy, public-sector AI adoption and the renamed AI Security Institute moved from DSIT to the Cabinet Office, alongside the appointment of a joint Minister for Artificial Intelligence and a new Institute Director.Confidence: Confirmed · As of 22 Jul 2026 · evidencedEvidence and sources[Written Ministerial Statement: AI Security Institute (renaming of the AI Safety Institute)](https://questions-statements.parliament.uk/written-statements/detail/2025-02-24/hlws454) T1 · retrieved · retrieved 8 Oct 2026 · Written Ministerial Statement HLWS454That is why I am renaming our AI Safety Institute as the AI Security Institute. - [AI Safety Institute (now AI Security Institute) - GOV.UK organisation page](https://www.gov.uk/government/organisations/ai-safety-institute) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK organisation pageAI Safety Institute is now called AI Security Institute - [Machinery of Government changes: Fact Sheet (Cabinet Office)](https://www.gov.uk/government/news/machinery-of-government-changes-fact-sheet) T1 · retrieved · retrieved 8 Oct 2026 · Section "Office for the Prime Minister and Cabinet"To deliver this step change, responsibility for AI strategy, public sector AI adoption and the AI Security Institute will move to the Cabinet Office. - [Machinery of Government changes: Fact Sheet (Cabinet Office)](https://www.gov.uk/government/news/machinery-of-government-changes-fact-sheet) T1 · retrieved · retrieved 8 Oct 2026 · Section "Redistribution of the responsibilities of DSIT"The functions of the Department for Science, Innovation and Technology (DSIT) will be redistributed to align with the Government's core economic and social agenda embedded as vital engines of growth exactly where they can have the most direct impact. - [Machinery of Government changes: Fact Sheet (Cabinet Office)](https://www.gov.uk/government/news/machinery-of-government-changes-fact-sheet) T1 · retrieved · retrieved 8 Oct 2026 · Section "Department for Digital, Culture, Media, and Sport"it will provide coherent and strategic oversight, across telecoms, media and online safety to maintain the UK's world-leading strengths in those sectors. - [AI Security Institute (GOV.UK organisation page)](https://www.gov.uk/government/organisations/ai-security-institute) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK organisation pageWe conduct research and develop and test mitigations. AISI is part of the Cabinet Office. ## Documents ### Guidance a - [Minister of State (Minister for Artificial Intelligence) (GOV.UK)](https://www.gov.uk/government/ministers/minister-of-state-minister-for-artificial-intelligence) T1 · retrieved · retrieved 8 Oct 2026 · ResponsibilitiesCabinet Office portfolio: - AI Strategy - AI Taskforce - AI Security Institute - AI Economics Insti - The Digital Markets, Competition and Consumers Act 2024 (c. 13) contains the UK consumer-enforcement regime in Part 3 Chapters 3-4 and Part 4 Chapter 1.Confidence: Probable · As of 24 May 2024 · evidencedEvidence and sources[Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 3 (public enforcement of consumer protection law: court proceedings)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/3) T1 · retrieved · retrieved 8 Oct 2026 · Part 3 Chapter 3, status bannerThere are currently no known outstanding effects for the Digital Markets, Competition and Consumers Act 2024, Chapter 3. - [Digital Markets, Competition and Consumers Act 2024, Part 4 Chapter 1 (unfair commercial practices)](https://www.legislation.gov.uk/ukpga/2024/13/part/4/chapter/1) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.225(1)-(2)(1)Unfair commercial practices are prohibited. (2)The promotion of unfair commercial practices in, or in connection with, a code of conduct by— (a)a person responsible for the content of a code of c - Derived: Probable The DMCCA consumer-enforcement provisions, including the prohibition of unfair commercial practices (s.225) and the CMA infringement-notice powers (ss.181-182), came into force on 6 April 2025.Confidence: Confirmed · As of 6 Apr 2025 · evidencedEvidence and sources[Digital Markets, Competition and Consumers Act 2024, Part 4 Chapter 1 (unfair commercial practices)](https://www.legislation.gov.uk/ukpga/2024/13/part/4/chapter/1) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.225 commencement noteS. 225 in force at 6.4.2025 by S.I. 2025/272, reg. 2(1)(3) - [Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 4 (CMA direct enforcement: infringement notices)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/4) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.182 commencement noteS. 182 in force at 6.4.2025 by S.I. 2025/272, reg. 2(1)(2) - [Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 4 (CMA direct enforcement: infringement notices)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/4) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.181 commencement noteS. 181 in force at 6.4.2025 by S.I. 2025/272, reg. 2(1)(2) - [CMA to boost consumer and business confidence as new consumer protection regime comes into force](https://www.gov.uk/government/news/cma-to-boost-consumer-and-business-confidence-as-new-consumer-protection-regime-comes-into-force) T1 · retrieved · retrieved 8 Oct 2026 · CMA press release 7 April 2025, opening paragraphLandmark new consumer protection provisions are now in force under the Digital Markets, Competition and Consumers Act 2024 (DMCCA), giving the Competition and Markets Authority (CMA) the ability to deliver more effective consumer protection. - Derived: Probable A CMA final infringement notice may require a monetary penalty of a fixed amount not exceeding £300,000 or, if higher, 10% of the respondent's turnover.Confidence: Confirmed · As of 6 Apr 2025 · evidencedEvidence and sources[Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 4 (CMA direct enforcement: infringement notices)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/4) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.182(6) (CMA final infringement notice)The amount of a monetary penalty imposed under subsection (4)(b) must be a fixed amount not exceeding £300,000 or, if higher, 10% of the total value of the turnover (if any) of the respondent. - [Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 4 (CMA direct enforcement: infringement notices)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/4) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.182(4)(4)A final infringement notice may impose on the respondent a requirement to do either or both of the following- (a)a requirement to comply with such directions as the CMA considers appropriate for or in connection with the purpose of securing that the respondent complies with section 181(5) (which may include directions to take enhanced consumer measures in accordance with section 183); (b)subj - [CMA to boost consumer and business confidence as new consumer protection regime comes into force](https://www.gov.uk/government/news/cma-to-boost-consumer-and-business-confidence-as-new-consumer-protection-regime-comes-into-force) T1 · retrieved · retrieved 8 Oct 2026 · CMA press release 7 April 2025, Notes to editors 1Under the new consumer regime, if a company infringes consumer protection law, the CMA can fine them up to 10% of their global turnover. If a company breaches undertakings it has given the CMA, it cou - Derived: Probable A court enforcement order made on an application by a public designated enforcer may include a monetary penalty of a fixed amount not exceeding £300,000 or, if higher, 10% of the respondent's turnover.Confidence: Probable · As of 6 Apr 2025 · evidencedEvidence and sources[Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 3 (public enforcement of consumer protection law: court proceedings)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/3) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.158(5) (court-ordered monetary penalty)The amount of a monetary penalty must be a fixed amount not exceeding £300,000 or, if higher, 10% of the total value of the turnover (if any) of the respondent. - [Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 3 (public enforcement of consumer protection law: court proceedings)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/3) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.158 commencement noteS. 158 in force at 6.4.2025 by S.I. 2025/272, - The CMA is a public designated enforcer under the consumer provisions and can itself give provisional and final infringement notices (ss.181-182); other designated enforcers include the FCA, Ofcom and the Information Commissioner.Confidence: Probable · As of 6 Apr 2025 · evidencedEvidence and sources[Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 3 (public enforcement of consumer protection law: court proceedings)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/3) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.151(1)(1)Each of the following is a public designated enforcer for the purposes of this Chapter— - [Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 4 (CMA direct enforcement: infringement notices)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/4) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.182(4)(4)A final infringement notice may impose on the respondent a requirement to do either or both of the following- (a)a requirement to comply with such directions as the CMA considers appropriate for or in connection with the purpose of securing that the respondent complies with section 181(5) (which may include directions to take enhanced consumer measures in accordance with section 183); (b)subj - Derived: Probable The CMA warns that a business that breaks consumer protection law, including through an AI agent, could face enforcement action, be fined up to 10% of its worldwide turnover and be forced to compensate affected consumers.Confidence: Confirmed · As of 9 Mar 2026 · evidencedEvidence and sources[Complying with consumer law when using AI agents (CMA guidance)](https://www.gov.uk/government/publications/complying-with-consumer-law-when-using-ai-agents/complying-with-consumer-law-when-using-ai-agents) T1 · retrieved · retrieved 8 Oct 2026 · Same section, second paragraphIf you break consumer protection law, you could face action by enforcement authorities (including the CMA). You could be fined up to 10% of your worldwide turnover, and possibly forced to compensate affected consumers. - [Digital Markets, Competition and Consumers Act 2024, Part 3 Chapter 4 (CMA direct enforcement: infringement notices)](https://www.legislation.gov.uk/ukpga/2024/13/part/3/chapter/4) T1 · retrieved · retrieved 8 Oct 2026 · DMCCA s.182(6) (CMA final infringement notice)The amount of a monetary penalty imposed under subsection (4)(b) must be a fixed amount not exceeding £300,000 or, if higher, 10% of the total value of the turnover (if any) of the respondent. - The Bank of England, the FCA and HM Treasury published their joint statement on frontier AI models and cyber resilience on 15 May 2026.Confidence: Confirmed · As of 15 May 2026 · evidencedEvidence and sources[The Bank, FCA and HM Treasury joint statement on Frontier AI models and cyber resilience](https://www.bankofengland.co.uk/news/2026/may/boe-fca-and-hm-treasury-joint-statement-on-frontier-ai-models-and-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Statement headerStatement from the Bank of England, Financial Conduct Authority and HM Treasury Published on 15 May 2026 ## Statement ### Why frontier AI - [FCA, Bank of England and Treasury joint statement on frontier AI models and cyber resilience](https://www.fca.org.uk/news/statements/fca-boe-treasury-joint-statement-frontier-ai-models-cyber-resilience) T1 · retrieved · retrieved 8 Oct 2026 · Statement headerStatements First published: 15/05/2026 Last updated: 15/05/2026 - The Committee found that the AI Security Institute has no regulatory authority and cannot demand access to foundation models before or after deployment, or prevent their release; model developers engage voluntarily.Confidence: Confirmed · evidencedEvidence and sources[Joint Committee on Human Rights, Human Rights and the Regulation of AI (HC/HL 160)](https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html) T1 · retrieved · retrieved 8 Oct 2026 · Conclusions on AI Security InstituteAISI has no regulatory authority and cannot, for example, demand access to foundation models either before or after their deployment or prevent them from being released. - [Wide-ranging AI Bill needed to address severe human rights risks posed by AI (JCHR press release)](https://committees.parliament.uk/committee/93/human-rights-joint-committee/news/217859/wideranging-ai-bill-needed-to-address-severe-human-rights-risks-posed-by-ai) T1 · retrieved · retrieved 8 Oct 2026 · Press releaseModel developers engage with the AI Security Institute on a voluntary basis and it has no statutory power. - The report was issued by the Joint Committee on Human Rights of the UK Parliament.Confidence: Confirmed · evidencedEvidence and sources[Wide-ranging AI Bill needed to address severe human rights risks posed by AI (JCHR press release)](https://committees.parliament.uk/committee/93/human-rights-joint-committee/news/217859/wideranging-ai-bill-needed-to-address-severe-human-rights-risks-posed-by-ai) T1 · retrieved · retrieved 8 Oct 2026 · Chair's commentNowhere in the world, including the UK, has a current legislative and regulatory approach to AI that is fit for purpose. - The SRA says use of AI does not change the professional standards expected of solicitors and law firms, and reports 42 AI-misuse reports between July 2025 and July 2026 with ongoing investigations.Confidence: Confirmed · As of 17 Aug 2026 · evidencedEvidence and sources[SRA cautions profession about safe and responsible use of AI in legal sector](https://www.sra.org.uk/news/news/releases/responsible-use-ai/) T1 · retrieved · retrieved 8 Oct 2026 · Press release bodythe use of AI does not change the professional standards expected of solicitors and law firms. - [SRA cautions profession about safe and responsible use of AI in legal sector](https://www.sra.org.uk/news/news/releases/responsible-use-ai/) T1 · retrieved · retrieved 8 Oct 2026 · Press release bodyThe SRA received 42 reports related to the potential misuse of AI between July 2025 and July 2026. - [SRA cautions profession about safe and responsible use of AI in legal sector](https://www.sra.org.uk/news/news/releases/responsible-use-ai/) T1 · retrieved · retrieved 8 Oct 2026 · Press release bodyThere are a number of ongoing investigations relating to misuse of AI, including on issues relating to inaccurate legal citations, supervision and confidentiality. - The Solicitors Regulation Authority is the regulator for firms and individuals within the warning notice.Confidence: Confirmed · As of 17 Aug 2026 · evidencedEvidence and sources[Misuse of AI: warning notice (Solicitors Regulation Authority)](https://www.sra.org.uk/solicitors/guidance/misuse-ai/) T1 · retrieved · retrieved 8 Oct 2026 · Section "Who is this warning notice relevant to?"This warning notice is relevant to all firms and individuals we regulate. Open evidence ### 11Sandboxes & Transitional ReliefActive Derived: Probable▾# FCA approach to AI: no new AI-specific rules and AI Live Testing (Published 2026-06-08): FCA position that it will not introduce new regulations for AI and will rely on existing frameworks such as the Consumer Duty and SM&CR, supported by an AI Live Testing programme whose second cohort was announced on 21 April 2026. 3 instruments · 0 obligations · 9 claims 3 instruments (3 current) · 0 obligations · 9 claims · 0 milestones Instruments - FCA approach to AI: no new AI-specific rules and AI Live Testing Published 2026-06-08FCA position that it will not introduce new regulations for AI and will rely on existing frameworks such as the Consumer Duty and SM&CR, supported by an AI Live Testing programme whose second cohort was announced on 21 April 2026.Non-binding · Authority: Financial Conduct Authority · Verified 8 Oct 2026 · [Official text](https://www.fca.org.uk/news/blogs/ai-financial-services-approach) - Legal services advisory AI Growth Lab (DSIT) Date not recordedDSIT advisory programme giving AI innovators and adopters in legal services coordinated access to regulators; applications opened August 2026 and closed 27 September 2026; advisory only, disapplies no law.Non-binding · Authority: Department for Science, Innovation and Technology · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/advisory-ai-growth-lab-legal-services/legal-services-advisory-ai-growth-lab-overview) - Regulating for Growth Bill (announced; regulatory sandbox powers) Draft, no legal forceAnnounced Government bill (King's Speech, 13 May 2026) that would give the Government cross-sector sandbox powers to temporarily modify or disapply legislation blocking innovation, including through the AI Growth Lab. No introduction to Parliament confirmed as at 8 July 2026.Authority: Department for Business, Innovation, Science and Trade · Verified 8 Oct 2026 · [Official text](https://assets.publishing.service.gov.uk/media/6a58b8079e6315445441381e/regulatory_sandboxing_what_businesses_can_expect.pdf) Claims and evidence (9) - On 21 April 2026 the FCA announced the second cohort of firms admitted to its AI Live Testing sandbox programme.Confidence: Probable · As of 21 Apr 2026 · evidencedEvidence and sources[FCA announces second cohort for AI Live Testing](https://www.fca.org.uk/news/press-releases/fca-announces-second-cohort-ai-live-testing) T1 · retrieved · retrieved 8 Oct 2026 · FCA press release (opening paragraph)Speaking at UK FinTech Week, Jessica Rusu, chief data, information and intelligence officer at the FCA, has confirmed the second group of firms selected to join AI Live Testing. - The government announced on 8 July 2026 that it will seek cross-sector sandbox powers in a Regulating for Growth Bill to allow temporary modification or disapplication of legislation blocking innovation, including for AI.Confidence: Probable · As of 8 Jul 2026 · evidencedEvidence and sources[Regulatory sandboxes: what businesses can expect](https://www.gov.uk/government/publications/regulatory-sandboxes-what-businesses-can-expect/regulatory-sandboxes-what-businesses-can-expect) T1 · retrieved · retrieved 8 Oct 2026 · Opening paragraphThe government will seek transformational new cross-sector powers in the Regulating for Growth Bill to support businesses willing to innovate and test new ideas. These sandbox powers would allow government to temporarily modify or disapply legislation that is acting as a blocker to innovation and growth. - DSIT launched the AI Growth Lab call for evidence on 21 October 2025, seeking views on a cross-economy sandbox to oversee deployment of AI-enabled products and services that current regulation hinders.Confidence: Probable · As of 21 Oct 2025 · evidencedEvidence and sources[AI Growth Lab: call for evidence](https://www.gov.uk/government/calls-for-evidence/ai-growth-lab/ai-growth-lab) T1 · retrieved · retrieved 8 Oct 2026 · AI Growth Lab call for evidenceWe are seeking evidence on a pioneering cross-economy sandbox, that would oversee the deployment of AI-enabled products and services that current regulation hinders. - Derived: Probable The Regulating for Growth Bill, creating cross-sector regulatory sandbox powers, was announced with the 2026 King's Speech on 13 May 2026.Confidence: Probable · As of 13 May 2026 · evidencedEvidence and sources[King's Speech 2026: background briefing notes (landing page)](https://www.gov.uk/government/publications/kings-speech-2026-background-briefing-notes) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK landing pageRead the briefing notes on the announcements made in the 2026 King's Speech. - [AI in the King's Speech 2026: Regulating for Growth Bill announced](https://www.twobirds.com/en/insights/2026/ai-in-the-kings-speech-2026-regulating-for-growth-bill-announced) T3 · retrieved · retrieved 8 Oct 2026 · Bird & Bird, section 1This refers to the government's plans to introduce a new "Regulating for Growth Bill" which will create sandbox powers and reinforce the focus of regulators towards growth. More details on this in section 3 below. - [Regulating for Growth Bill: Regulatory Sandboxes - What Businesses Can Expect](https://assets.publishing.service.gov.uk/media/6a58b8079e6315445441381e/regulatory_sandboxing_what_businesses_can_expect.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Sandbox explainer, introductionThe Government will seek transformational new cross-sector powers in the Regulating for Growth Bill to - Derived: Probable The Government says it will seek sandbox powers in the Regulating for Growth Bill that would let it temporarily modify or disapply legislation that blocks innovation.Confidence: Probable · As of 13 May 2026 · evidencedEvidence and sources[Regulating for Growth Bill: Regulatory Sandboxes - What Businesses Can Expect](https://assets.publishing.service.gov.uk/media/6a58b8079e6315445441381e/regulatory_sandboxing_what_businesses_can_expect.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Sandbox explainer, introductionThe Government will seek transformational new cross-sector powers in the Regulating for Growth Bill to - [Regulating for Growth Bill: Regulatory Sandboxes - What Businesses Can Expect](https://assets.publishing.service.gov.uk/media/6a58b8079e6315445441381e/regulatory_sandboxing_what_businesses_can_expect.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Sandbox explainer, introductiontemporarily modify or disapply legislation that is acting as a blocker to innovation and growth. - [UK to become world's fastest market to commercialise innovation with regulatory shake-up](https://www.gov.uk/government/news/uk-to-become-worlds-fastest-market-to-commercialise-innovation-with-regulatory-shake-up) T1 · retrieved · retrieved 8 Oct 2026 · GOV.UK press release (quote)The Regulating for Growth Bill changes that, giving businesses a faster route from idea to market and ensuring every part of government — from investment and procurement to skills, infrastructure and regulation — is aligned to create the conditions - Derived: Probable On 8 July 2026 the Government said it will seek transformational cross-sector sandbox powers in the Regulating for Growth Bill, allowing it to temporarily modify or disapply legislation blocking innovation.Confidence: Probable · As of 8 Jul 2026 · evidencedEvidence and sources[Regulatory sandboxes: what businesses can expect](https://www.gov.uk/government/publications/regulatory-sandboxes-what-businesses-can-expect/regulatory-sandboxes-what-businesses-can-expect) T1 · retrieved · retrieved 8 Oct 2026 · Opening paragraphThe government will seek transformational new cross-sector powers in the Regulating for Growth Bill to support businesses willing to innovate and test new ideas. These sandbox powers would allow government to temporarily modify or disapply legislation that is acting as a blocker to innovation and growth. - [UK to become world's fastest market to commercialise innovation with regulatory shake-up](https://www.gov.uk/government/news/uk-to-become-worlds-fastest-market-to-commercialise-innovation-with-regulatory-shake-up) T1 · retrieved · retrieved 8 Oct 2026 · Quotation of the Business and Trade SecretaryThe Regulating for Growth Bill changes that, giving businesses a faster route from idea to market and ensuring every part of government — from investment and procurement to skills, infrastructure and - [Regulatory sandboxes: what businesses can expect](https://www.gov.uk/government/publications/regulatory-sandboxes-what-businesses-can-expect/regulatory-sandboxes-what-businesses-can-expect) T1 · retrieved · retrieved 8 Oct 2026 · Page headerRegulatory sandboxes: what businesses can expect Published 8 July 2026 ## Contents 1. What is a 'r - GOV.UK lists the AI Growth Lab, bringing multiple regulators together to test cross-cutting AI-enabled products and services, among the sectors in which the Regulating for Growth Bill sandbox powers could be used.Confidence: Probable · As of 8 Jul 2026 · evidencedEvidence and sources[Regulatory sandboxes: what businesses can expect](https://www.gov.uk/government/publications/regulatory-sandboxes-what-businesses-can-expect/regulatory-sandboxes-what-businesses-can-expect) T1 · retrieved · retrieved 8 Oct 2026 · Sectors list: cross-economy AIcross-economy AI: the AI Growth Lab will bring multiple regulators together to test cross-cutting AI-enabled products and services to support safe AI adoption and innovation - The FCA stated on 8 June 2026 that it will not introduce new AI-specific regulation and will rely on existing frameworks including the Consumer Duty and SM&CR, and on 21 April 2026 announced a second AI Live Testing cohort.Confidence: Probable · As of 8 Jun 2026 · evidencedEvidence and sources[AI in financial services: shaping our approach through industry engagement](https://www.fca.org.uk/news/blogs/ai-financial-services-approach) T1 · retrieved · retrieved 8 Oct 2026 · FCA blog, paragraph 2We have been clear that we are not going to introduce new regulations for AI. Instead, we'll rely on existing frameworks, including the Consumer Duty, - [AI in financial services: shaping our approach through industry engagement](https://www.fca.org.uk/news/blogs/ai-financial-services-approach) T1 · retrieved · retrieved 8 Oct 2026 · FCA blog, paragraph 2Instead, we’ll rely on existing frameworks, including the Consumer Duty, the Senior Managers and Certification Regime (SM&CR), and our expectations on governance and controls. - [FCA announces second cohort for AI Live Testing](https://www.fca.org.uk/news/press-releases/fca-announces-second-cohort-ai-live-testing) T1 · retrieved · retrieved 8 Oct 2026 · FCA press release (opening paragraph)Speaking at UK FinTech Week, Jessica Rusu, chief data, information and intelligence officer at the FCA, has confirmed the second group of firms selected to join AI Live Testing. - The legal services advisory AI Growth Lab gives innovators and adopters coordinated access to regulators; its applications window closed at 11:59pm on 27 September 2026.Confidence: Probable · evidencedEvidence and sources[Legal services advisory AI Growth Lab: overview (DSIT)](https://www.gov.uk/government/publications/advisory-ai-growth-lab-legal-services/legal-services-advisory-ai-growth-lab-overview) T1 · retrieved · retrieved 8 Oct 2026 · OverviewThe legal services advisory AI Growth Lab provides innovators and adopters with coordinated access to regulators, helping them to understand how current regulation applies to cutting-edge technology so they can bring products to market faster. - [Legal services advisory AI Growth Lab: overview (DSIT)](https://www.gov.uk/government/publications/advisory-ai-growth-lab-legal-services/legal-services-advisory-ai-growth-lab-overview) T1 · retrieved · retrieved 8 Oct 2026 · OverviewApplications are now open and will close at 11:59pm on 27 September 2026. Open evidence ### 12Commercial ActivityActive▾# UK Government and Google DeepMind Memorandum of Understanding on AI opportunities and security (Published 2025-12-11): Voluntary, non-binding memorandum between DSIT and Google DeepMind to collaborate on public services, scientific discovery and AI security. 1 instrument · 0 obligations · 0 claims 1 instrument (1 current) · 0 obligations · 0 claims · 0 milestones Instruments - UK Government and Google DeepMind Memorandum of Understanding on AI opportunities and security Published 2025-12-11Voluntary, non-binding memorandum between DSIT and Google DeepMind to collaborate on public services, scientific discovery and AI security. Published on 11 December 2025.Non-binding · Authority: Department for Science, Innovation and Technology · Verified 8 Oct 2026 · [Official text](https://www.gov.uk/government/publications/memorandum-of-understanding-between-the-uk-and-google-deepmind-on-ai-opportunities-and-security/memorandum-of-understanding-between-the-uk-and-google-deepmind-on-ai-opportunities-and-security) No modules match. Filters combine as OR inside a group and AND across groups. Reset all filters ## Authorities Authority Type [Information Commission (successor to the Information Commissioner's Office)](https://www.gov.uk/government/news/information-commission-succeeds-the-ico-as-uks-data-protection-regulator) data protection authority [Office of Communications (Ofcom)](https://www.ofcom.org.uk/) regulator [Cabinet Office](https://www.gov.uk/government/organisations/cabinet-office) ministry [AI Security Institute](https://www.gov.uk/government/organisations/ai-security-institute) other [Financial Conduct Authority](https://www.fca.org.uk/) regulator [Prudential Regulation Authority (Bank of England)](https://www.bankofengland.co.uk/prudential-regulation) regulator [Bank of England](https://www.bankofengland.co.uk/) regulator [Competition and Markets Authority](https://www.gov.uk/government/organisations/competition-and-markets-authority) competition authority [High Court of Justice, Business and Property Courts of England and Wales (Intellectual Property List, Chancery Division)](https://www.judiciary.uk/) court [Joint Committee on Human Rights](https://committees.parliament.uk/committee/93/human-rights-joint-committee/) legislature [BSI Group (British Standards Institution)](https://knowledge.bsigroup.com/) standards body [European Telecommunications Standards Institute](https://www.etsi.org/) standards body [HM Treasury](https://www.gov.uk/government/organisations/hm-treasury) ministry [Advertising Standards Authority and Committee of Advertising Practice](https://www.asa.org.uk/) other [Department for Science, Innovation and Technology](https://www.gov.uk/government/organisations/department-for-science-innovation-and-technology) ministry [Medicines and Healthcare products Regulatory Agency](https://www.gov.uk/government/organisations/medicines-and-healthcare-products-regulatory-agency) regulator [UK Parliament](https://www.parliament.uk/) legislature Department for Business, Innovation, Science and Trade ministry [Ministry of Defence](https://www.gov.uk/government/organisations/ministry-of-defence) ministry [Civil Justice Council](https://www.judiciary.uk/related-offices-and-bodies/advisory-bodies/cjc/) other [Financial Policy Committee (Bank of England)](https://www.bankofengland.co.uk/financial-policy-committee) regulator [Solicitors Regulation Authority](https://www.sra.org.uk) regulator [Courts and Tribunals Judiciary](https://www.judiciary.uk) court [Ministry of Justice](https://www.gov.uk/government/organisations/ministry-of-justice) ministry [Department for Digital, Culture, Media and Sport](https://www.gov.uk/government/organisations/department-for-digital-culture-media-sport) ministry ## Enforcement actions Date Respondent Action Authority Instrument Amount 12 Jan 2026 X Corp / X Internet Unlimited Company probe Office of Communications (Ofcom) Online Safety Act 2023 3 Feb 2026 X Internet Unlimited Company and X.AI LLC probe Information Commission (successor to the Information Commissioner's Office) Online Safety Act 2023 Online platforms in scope of the Online Safety Act probe Office of Communications (Ofcom) Online Safety Act 2023 3 Jun 2026 Google binding guidance Competition and Markets Authority CMA publisher conduct requirement on Google general search (generative AI controls) Regulated firms and individuals (unnamed) probe Solicitors Regulation Authority SRA warning notice: misuse of AI ## Cases Case Court Stage Issue Ayinde v London Borough of Haringey; Al-Haroun v Qatar National Bank [2025] EWHC 1383 (Admin) High Court of Justice, King's Bench Division, Divisional Court (Administrative Court) judgment Divisional Court sitting under the Hamid jurisdiction on lawyers who put false citations, apparently generated by AI tools, before the court. Getty Images (US) Inc and others v Stability AI Ltd High Court of Justice, Business and Property Courts of England and Wales (Intellectual Property List, Chancery Division) judgment Secondary copyright infringement and related claims concerning the training and operation of Stability AI's Stable Diffusion model on Getty's copyright works. ## Consultations Consultation Authority Status Opened Closes [Copyright and Artificial Intelligence consultation](https://www.gov.uk/government/publications/report-and-impact-assessment-on-copyright-and-artificial-intelligence/report-on-copyright-and-artificial-intelligence) Department for Science, Innovation and Technology response published [Civil Justice Council consultation on use of AI in preparing court documents](https://www.judiciary.uk/related-offices-and-bodies/advisory-bodies/cjc/current-work/use-of-ai-in-preparing-court-documents/) Civil Justice Council closed [Data regulation in the age of AI and other data-intensive technologies (call for evidence)](https://www.gov.uk/government/calls-for-evidence/data-regulation-in-the-age-of-ai-and-other-data-intensive-technologies/data-regulation-in-the-age-of-ai-and-other-data-intensive-technologies) Department for Science, Innovation and Technology closed 15 Jul 2026 9 Sep 2026 [Ofcom call for evidence on protecting women and girls online](https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-to-crack-down-on-spread-of-illegal-intimate-images-and-deepfakes-boosting-protections-for-women-and-girls-online) Office of Communications (Ofcom) open 6 Nov 2026 [AI Growth Lab call for evidence](https://www.gov.uk/government/calls-for-evidence/ai-growth-lab/ai-growth-lab) Department for Science, Innovation and Technology closed 21 Oct 2025 7 Jan 2026 Technical provenance ## Provenance Record schema artificial-intelligence-record-v2.8, research run aic-baseline-UK-2026-10-08. Regulator line from the research seed. Built by render_jid_aic_v13 from page model module-card-page-v1. What this record does not yet establish is set out on the [transparency register](/gaps/#gap-uk); its dated events are on the [regulatory calendar](/calendar/?jid=UK). Think something on this page is wrong? [Report an error](/legal/#contact).