AI Compliance for Small Business (UK Edition)

The UK Has No AI Act — But That Doesn't Mean You're Free to Do What You Like

The UK made a deliberate policy choice not to pass an AI Act. What replaced it is arguably more complicated: UK GDPR substantially reformed in February 2026, a patchwork of sector regulators, and an ICO Code of Practice the regulator is legally required to write — but hasn't published yet. If you're using AI in your business, you're already operating inside this framework whether you know it or not.

What You Get

AI Compliance for Small Business (UK Edition) is a plain-English guide built for business owners, not lawyers — covering exactly what applies to you right now, with no padding.

• Why "no UK AI Act" doesn't mean unregulated — the five overlapping regimes that actually apply
• The single biggest legal change: UK GDPR's old Article 22 replaced by new Articles 22A–22D, and the one exception (special category data) that got stricter, not looser
• What's actually law today versus the ICO's Code of Practice — which hasn't been published yet
• FCA, Ofcom, and other sector regulators — honestly scoped to what's relevant, not padded
• A 30-day compliance plan and a £0 programme you can run yourself — no lawyer required
• Fillable worksheets: AI inventory log, Article 22 classification tool, vendor due-diligence questionnaire, and a ready-to-adapt AI use policy

Who This Is For

Whether you're a solo freelancer using AI tools for the first time or a small employer with AI in your hiring pipeline, this guide gives you a practical starting point — and tells you honestly when it's time to call a lawyer instead.

This guide is provided for general informational purposes only and does not constitute legal advice. UK AI-related regulation is still developing — always confirm current requirements with official sources before acting.