사회 가이드

The UK's Approach to AI Regulation

4분 읽기
마지막 업데이트 2026년 9월 15일

이 페이지에서4분 읽기

개요
심층 분석
전략적 영향
The Future of The UK's Approach to AI Regulation
실제 구현
위험 및 가드레일
구현 로드맵
계속 탐색하세요
자주 묻는 질문

개요

The approach was set out in the 2023 white paper A pro-innovation approach to AI regulation. It matters because it is the main alternative among large economies to the EU's comprehensive AI Act, and it raises an ongoing debate about whether frontier AI needs its own law.

심층 분석

The March 2023 white paper set out five principles: safety, security and robustness; appropriate transparency and explainability; fairness; accountability and governance; and contestability and redress. They were not put into law. Instead, regulators were asked to apply them within their existing powers, supported by central functions to monitor risks and coordinate across sectors. In its February 2024 response, the government committed £10 million to build regulators' AI capabilities and asked key regulators to publish their strategic approaches to AI, which many did that spring. The main regulators each cover part of the picture. The Information Commissioner's Office (ICO) enforces UK data protection law, including rules on automated decision-making, and has published extensive guidance on AI and data protection. The Competition and Markets Authority (CMA) reviewed foundation models in 2023 and has powers under the Digital Markets, Competition and Consumers Act 2024 to designate firms with strategic market status. The Financial Conduct Authority (FCA) applies consumer protection rules to AI in financial services. Ofcom oversees online platforms under the Online Safety Act. The Digital Regulation Cooperation Forum brings together the ICO, CMA, Ofcom and FCA to coordinate. Separately, the UK created the AI Safety Institute after the November 2023 Bletchley Park summit to evaluate advanced models, and renamed it the AI Security Institute in 2025. It tests models, often with developers' voluntary cooperation, but it is not a regulator. The debate centers on frontier models. Critics argue that general-purpose models cut across sectors and can fall between regulators. Labour's 2024 manifesto promised binding regulation for developers of the most powerful models, but a government bill has been repeatedly delayed. The UK is not without AI rules: existing laws apply to AI, but there is no AI-specific statute.

기술적 통찰력

For a practitioner, the key UK instruments are existing laws applied to AI. Under UK GDPR, a data protection impact assessment is expected for high-risk AI processing. Rules on solely automated decisions with legal or similarly significant effects require safeguards such as human intervention and the ability to contest, and the Data (Use and Access) Act 2025 revised those rules, easing some restrictions while keeping safeguards. The ICO expects organizations to document their lawful basis for training data, accuracy testing, bias assessment and explainability, including through its explainability guidance developed with the Alan Turing Institute. In financial services, firms must satisfy the FCA's Consumer Duty and model risk expectations, and cannot shift accountability to a vendor's model. Online platforms using recommendation or generative features must include AI risks in their Online Safety Act risk assessments. The AI Security Institute publishes evaluation methods and open-source tooling such as its Inspect framework, which some developers use for pre-deployment testing.

전략적 영향

위험과 안전

치명적인 AI 피해와 일상적인 AI 피해는 누가 위험을 이해하고 누가 조치를 취할 수 있는지에 따라 달라집니다.

더 명확한 결정들

공공 및 전문 지식은 강력한 안전 정책이 정치적으로 가능한지 여부를 결정합니다.

과장된 과장을 뚫고 나가기

명확한 설명은 과대광고, 연구실 홍보, 모호한 윤리 연극에 의한 포착을 줄입니다.

The Future of The UK's Approach to AI Regulation

The biggest open question is whether and when the UK will introduce legislation for frontier AI developers, and whether that law would put voluntary testing arrangements on a statutory footing. The government's AI Opportunities Action Plan in 2025 emphasized growth, compute and adoption, which suggests any new rules will stay targeted. Pressure for more coherent oversight may grow as general-purpose models spread across sectors and as regulators' resources are tested. How closely the UK aligns with the EU AI Act or US policy will also affect companies that operate in several markets.

실제 구현

A UK bank using machine learning for credit decisions is overseen by the FCA on consumer outcomes and by the ICO on data protection. There is no separate AI regulator for it to answer to.

A hospital deploying AI diagnostic software must meet medical device rules from the MHRA, which has run a regulatory sandbox for AI medical devices.

The CMA's review of foundation models examined whether a few large companies could control access to key AI inputs, and it set out principles for competitive AI markets.

A company using automated decision-making to screen job applicants must meet UK data protection rules on automated decisions, which the ICO enforces and publishes guidance on.

위험 및 가드레일

실존적 위험을 공상과학처럼 다루면서 능력을 합성합니다.
높은 자율성 하에서 정렬과 표면 제품 안전성을 혼동합니다.
영어가 아니거나 전문가가 아닌 청중에게는 품질이 낮은 소스만 남겨 둡니다.

구현 로드맵

제품 손상, 오용, 통제력 상실/잘못 정렬 위험을 분리합니다.
일정과 심각도에 대한 귀하의 견해를 바꿀 수 있는 증거가 무엇인지 물어보십시오.
마케팅 주장보다 기본 소스와 구체적인 평가를 선호하세요.
인식뿐만 아니라 경력, 정책, 자금 조달 또는 기술 등 하나의 행동 경로를 식별하십시오.

계속 탐색하세요

Free newsletter

Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.

One email each weekday. Unsubscribe in one click. We never sell or share your address.

Test yourself

Take the The UK's Approach to AI Regulation quiz

Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.

퀴즈 시작

Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation

자주 묻는 질문

What is The UK's Approach to AI Regulation?

The UK regulates AI mainly through its existing sector regulators, such as the ICO, CMA, FCA and Ofcom, which apply five cross-cutting principles in their own areas instead of enforcing a single AI act. The approach was set out in the 2023 white paper A pro-innovation approach to AI regulation. It matters because it is the main alternative among large economies to the EU's comprehensive AI Act, and it raises an ongoing debate about whether frontier AI needs its own law.

When was the white paper A pro-innovation approach to AI regulation published?

The UK government published the white paper in March 2023 and followed with a formal response in February 2024.

Which regulator enforces UK data protection law, including rules on automated decision-making?

The Information Commissioner's Office enforces UK GDPR and data protection law, including rules on solely automated decisions, and publishes AI guidance.

Which regulator reviewed foundation models in 2023 with a focus on competition?

The Competition and Markets Authority reviewed foundation models to assess whether a few firms could control access to key inputs, and it proposed principles for competitive markets.

What was the UK AI Safety Institute renamed in 2025?

The body created after the 2023 Bletchley Park summit was renamed the AI Security Institute in 2025. It evaluates advanced models but is not a regulator.

Which regulators belong to the Digital Regulation Cooperation Forum?

The Digital Regulation Cooperation Forum brings together the ICO, CMA, Ofcom and FCA to coordinate on digital issues, including AI.

계속 학습하세요