Outside the U.S. · Other
United Kingdom: no comprehensive AI statute; Data (Use and Access) Act 2025; Crime and Policing Act 2026 (child sexual abuse image-generator offences, not yet in force)
Verified Checked against its sources on 6 sources quoted
- Where
- United Kingdom
- Jurisdiction
- United Kingdom
- Status
- Sectoral approach; no comprehensive AI statute
- Key dates
- Data (Use and Access) Act 2025 Royal Assent June 19, 2025; Crime and Policing Act 2026 Royal Assent April 29, 2026, with the child sexual abuse image-generator offence for England and Wales (section 72) shown as prospective, to be commenced by regulations
- Authority
- Existing sectoral regulators (for example the ICO for data protection); no central AI regulator
- Penalties
- Criminal penalties under the Crime and Policing Act 2026 once commenced; ICO enforcement under UK data protection law
Summary
The United Kingdom has no comprehensive AI statute and relies on existing regulators. The Data (Use and Access) Act 2025 received Royal Assent on June 19, 2025, and the ICO reports that all its provisions amending data protection law are now in force. The Crime and Policing Act 2026, which received Royal Assent on April 29, 2026, creates offences of making, adapting, possessing or supplying tools built to generate child sexual abuse images (sections 72 to 74) and extends the offence covering guides to making such material to AI. Section 72 (England and Wales) is commenced by regulations, and legislation.gov.uk shows it as prospective; the Home Office circular on the provisions brought into force on June 29, 2026, does not list sections 72 to 74.
Key dates
- October 16, 2026Checked against sources
- October 21, 2026Checked against sources
Developments are added when the record is reviewed. Next review: January 15, 2027.
Evidence
Each passage is quoted from its source. The quoted passages are re-checked against the live pages every month.
-
Banning AI-models optimised to produce child sexual abuse material and extending existing law criminalising ’paedophile manuals’ to include material instructing how to use AI to generate child sexual abuse material.
Supports: AI child sexual abuse provisions
-
The Data (Use and Access) Act 2025 got Royal Assent on 19 June 2025. All the provisions affecting data protection law and the Privacy and Electronic Regulations Communications are now in force.
Supports: DUAA Royal Assent date and commencement
-
to make provision about the criminal liability of bodies; and for connected purposes. [29th April 2026]
Supports: Royal Assent April 29, 2026
-
72. Child sexual abuse image-generators: England and Wales 73. Child sexual abuse image-generators: Northern Ireland 74. Child sexual abuse image-generators: Scotland
Supports: Image-generator offences, sections 72 to 74
-
Commencement Information I1 S. 72 not in force at Royal Assent, see s. 255(1)
Supports: Section 72 commenced by regulations; shown as prospective
-
This circular details relevant provisions for which a commencement date has been set in the Act, and those which are to be commenced by regulations from 29 June 2026
Supports: June 29, 2026, commencement covers listed provisions only
Suggested citation. Eminence Scan, “United Kingdom: no comprehensive AI statute; Data (Use and Access) Act 2025; Crime and Policing Act 2026 (child sexual abuse image-generator offences, not yet in force)”, Eminence Growth Solutions, last verified October 16, 2026, https://eminencegrowthsolutions.com/tools/eminence-scan/record/global-026/.
Using our research: you may read and quote Eminence Scan with credit to “Eminence Scan, Eminence Growth Solutions” and a link; all other rights reserved. Terms: Using our research.
Spotted an error, or a development we have missed? Report a correction. How we check records: research methodology.
