The UK Has No AI Law — And Is Running a Voluntary Sandbox Instead

The UK Parliament's AI Regulation Bill — anticipated since the first AI Safety Summit in 2023 — has not passed. The Observer (July 28) confirmed that the UK currently has no AI-specific statute, with AI regulated sector-by-sector through existing bodies: the Financial Conduct Authority for financial services, the Information Commissioner's Office for personal data, and Ofcom for telecoms-adjacent risk. The government's current instrument is the AI Growth Lab, a supervised sandbox that lets companies test products under temporary, case-by-case exemptions rather than fixed rules. The UK did introduce the AI Copyright Transparency Bill on July 17 — requiring disclosure of training data sources — and published AI safety testing rules on July 14 (effective October 1) requiring third-party evaluations for large models, with non-compliance penalties up to 6% of global revenue. For law firms advising UK clients or operating UK offices, this means AI governance is currently a matter of professional conduct rules, ICO data protection guidance, and firm-level policy — with no statutory AI framework to anchor a compliance program. The divergence from EU Article 50 requirements (which apply to any EU-market-facing activity) creates a real compliance architecture challenge for transatlantic practices.