UK AI rules — a plain orientation

The UK has not passed a single AI statute. That does not mean there are no rules — it means the rules sit in existing law and regulator guidance, applied sector by sector.

How the UK tends to work

• Existing law still applies — data protection, equality, consumer, product safety and sector rules do not pause because a model is involved.
• Regulators publish guidance rather than one omnibus Act. Useful when you can turn it into steps; noise when you only collect PDFs.
• International spillover matters — if you place systems on the EU market, sell into US states with AI laws, or use Chinese platforms, those regimes still touch you.

Treat “the UK has no AI Act” as a description of the statute book, not a free pass.

A sensible first pass for UK operators

1. Inventory every AI-assisted workflow — including vendor copilots.
2. Name which UK regulators and existing statutes already apply to that work.
3. Note any EU / US / China exposure beside the UK picture.
4. Write down human oversight: who can stop, correct or refuse an output.
5. Keep the inventory living — new tools arrive faster than annual reviews.

What “good” looks like here

A named owner, a short register, and changes that stick when product ships the next release. Long binder theatre that nobody opens does not count.

Related Lathestone work

For the European statute in more detail, see EU AI Act at a glance. For a structured engagement, see AI compliance.