AI and data laws

311 moving · 704 enacted

United KingdomUnited Kingdom

16 on file · 8 became law · 5 still moving · 4 moved in 30 days

Bill 4035

Cyber Security and Resilience (Network and Information Systems) Bill

A bill to Make provision, including provision amending the Network and Information Systems Regulations 2018, about the security and resilience of network and information systems used or relied on in connection with the carrying on of essential activities.

Passed both
unverified

British Data Centre Covenant

The UK government unveiled a covenant setting local job, community investment, and water protection standards for data centers seeking faster grid connections.

Proposed
Bill 4295

Personal Data (Digital Twins) Bill

A bill to make provision about the regulation of software or algorithms which use or hold personal data for the purpose of modelling the preferences or behaviours of a person; to make provision about the rights of individuals in respect of the holding and use of their personal data by such software

In committee
Bill 4310

Artificial Intelligence (Consent and Misuse) Bill

A bill to make provision about a requirement for consent to generate a likeness of a person using, or with the assistance of, artificial intelligence; to make further provision relating to that requirement; to make provision about civil action in circumstances where that requirement is not met; to m

In committee

SMS designations of Apple and Google mobile platforms

CMA decisions designating Apple and Google with strategic market status in their mobile platforms under the DMCC Act, followed by commitments on app review and ranking and a proposed steering conduct requirement.

Ruled
2026 c. 20

Crime and Policing Act 2026

Broad criminal justice Act that among other things creates offences for making, possessing or supplying AI tools designed to generate child sexual abuse images, possessing guidance on creating such images, and making or supplying purported intimate image (nudification) generators.

In force

Report and impact assessment on copyright and artificial intelligence

Statutory report under sections 135 and 136 of the Data (Use and Access) Act responding to the 2024 to 2025 consultation, stating that a broad text and data mining exception with opt-out is no longer the government's preferred approach and committing to further evidence gathering and work on input transparency.

Adopted
2025 c. 18

Data (Use and Access) Act 2025

Reforms UK data protection law, creates frameworks for digital verification services and smart data, restructures the Information Commissioner's Office, adds an offence of creating or requesting intimate images of adults without consent, and requires government reports on copyright and AI.

In force
2023 c. 50

Online Safety Act 2023

Imposes duties on user-to-user and search services to tackle illegal content and protect children, enforced by Ofcom through codes of practice, age assurance requirements and penalties.

In force

AI Opportunities Action Plan

Independent report led by Matt Clifford, adopted by the government, setting out 50 recommendations to expand AI infrastructure, drive AI adoption across the economy and improve public services.

Adopted
2024 c. 13

Digital Markets, Competition and Consumers Act 2024

Gives the Competition and Markets Authority powers to designate firms with strategic market status in digital activities and impose conduct requirements, and reforms competition and consumer protection law.

In force
2022 c. 46

Product Security and Telecommunications Infrastructure Act 2022

Sets security requirements for consumer connectable products, including a ban on universal default passwords, a vulnerability disclosure policy and published minimum security update periods, and reforms telecoms infrastructure rules.

In force