UK Has No AI Statute — Existing Law Applies, and Firms Must Track EU Developments
A Bratby Law explainer updated June 25 provides the clearest current summary of the UK's regulatory posture: the UK has no standalone AI Act. Existing regulators — the ICO, FCA, CMA, Ofcom — apply existing law to AI within their respective remits, drawing on UK GDPR, the Data (Use and Access) Act 2025, the Consumer Duty, and the Online Safety Act 2023. The DRCF's generative AI assurance benchmark
BY FRONTIER DESK · JULY 1, 2026 · 1 MIN READ
A Bratby Law explainer updated June 25 provides the clearest current summary of the UK's regulatory posture: the UK has no standalone AI Act. Existing regulators — the ICO, FCA, CMA, Ofcom — apply existing law to AI within their respective remits, drawing on UK GDPR, the Data (Use and Access) Act 2025, the Consumer Duty, and the Online Safety Act 2023. The DRCF's generative AI assurance benchmark describes how regulators use AI internally, not obligations on firms. For law firms advising UK clients, the practical implication is that AI compliance obligations derive from sector-specific regulation rather than a unified statute — meaning compliance mapping must go regulator-by-regulator. A secondary implication: UK controllers processing EU residents' data must still track EU Digital Omnibus developments, as their EU-facing AI deployments remain subject to the AI Act's Article 50 obligations from August 2, 2026.