UK AI Regulation 2026: No AI Act, Three Regulators, and an ICO Code of Practice That Will Shape AI Governance

Bratby Law's July 11 definitive guide to UK AI regulation confirms that as of May 2026, no AI Bill sits before Parliament and the UK has no AI-specific statute — a position that is fundamentally different from the EU's and that creates genuine compliance divergence for transatlantic practices. The operational reality for UK law firms is that AI is regulated through three concurrent frameworks: the ICO under UK GDPR (as amended by the Data (Use and Access) Act 2025, in force from February 2026), which now governs automated decision-making through new Articles 22A–22D requiring meaningful human review and documented logic; Ofcom under the Online Safety Act 2023 and Telecoms Security Act 2021; and the FCA under Consumer Duty and operational resilience obligations. The Solicitors Regulation Authority is named as a sector regulator applying its own rules to AI in legal services. The ICO's statutory duty to produce a Code of Practice on AI and automated decision-making (triggered by SI 2026/425 from May 12, 2026) means final code guidance is expected in 2027, but firms should not treat the gap as a compliance pause: the draft ADM guidance consultation closed in May and the ICO has signaled that generative AI, agentic AI, AI in the workplace, and AI explainability are its next material enforcement focus areas. For UK law firms serving EU clients, the Bratby analysis recommends making the strategic call now on whether to harmonise upwards to the EU AI Act position or run parallel UK and EU compliance programmes — and doing so this year rather than next.