Guides › UK AI rules and policy
UK AI rules and policy: what it means for software and AI start-ups
Is there a UK AI law my software start-up must follow?
Updated 6 November 2026 from public records. 16 items below.
At a glance
- 16 records from the last 120 days, 14 naming software and AI directly
- No consultation on this open right now
- Most active: Department for Business, Innovation, Science and Trade, Cabinet Office
- Latest record: 5 November 2026
The UK has no single AI law. Regulators apply the rules they already have, on data, consumer protection, medicines, financial services and more, to AI products in their areas, while government sets out plans on compute, skills and the most powerful models. For a start-up, what matters is which regulator's existing rules already reach its product, and what each is saying about AI this year. AI on GOV.UK.
What it means for your start-up
Not a single one. A software or AI start-up answers to whichever existing rules reach its product: data protection (the Information Commission, which replaced the ICO in September 2026, has detailed AI guidance), consumer law, and the rules of the sectors its customers work in. Government is also funding compute and setting policy on the most powerful models, which can change who your customers are and what they ask of you.
What to do now
- List the regulators whose rules reach your product through your customers, not only through you.
- Read the Information Commission's (formerly the ICO's) guidance on AI and personal data. It is the rule most AI products meet first.
- Follow government's AI plans for compute, skills and public sector buying, where much of the opportunity sits.
Latest from government
Marked: mentions software and ai directly.
- Sovereign AI puts cash and compute behind UK startup using AI to redefine chemistry
Potential Sciences, a British startup aiming to unlock the next big advance in how we use AI to design new medicines, has secured backing from Sovereign AI - What the National Commission’s recommendations mean for you
How new recommendations could make healthcare AI safer, clearer and fairer for patients, professionals, providers and developers across the UK. - Minister McCluskey speech on AI for clean energy vision
Minister for Local Energy and Jobs Martin McCluskey delivered a speech at the Google for Startups Accelerator: Europe event in London on 8 September. - AI sleep data could provide one-week early warning of flu and COVID-19
UKHSA study finds sleep app cough data can detect respiratory illness and signal outbreaks early. - £100 million competition to back British AI companies to fix public services
£100 million fund competition will help promising British AI start-ups start in the UK and tackle some of society's biggest challenges. - Sovereign AI invests in UK startup reinventing AI chips
Government’s Sovereign AI invests in UK startup reinventing the chips that make AI possible - EM on EU Regulation 2024/1689 on Artificial Intelligence
The government's summary of an EU regulation laying down harmonised rules on artificial intelligence and amending several Regulations and Directives. - Partial application of the EU AI Act in Northern Ireland
Guidance on the specific and limited application of the EU AI Act in Northern Ireland through the Windsor Framework.
In Parliament
Marked: mentions software and ai directly.
- What assessment they have made of the impact of the reliance on foreign AI developers and their investment practices on plans to increase economic growth in…
Asked by Lord Taylor of Warwick. Artificial Intelligence: Economic Growth — On 24 October, as part of the Budget, the Chancellor announced investment in home-grown AI firms and AI security and resilience. The… - Whether the Government has made an assessment of the potential cost to UK businesses of aligning with the EU Cloud and AI Development Act.
Asked by Dr Ben Spencer (Con). Artificial Intelligence and Digital Service Providers: UK Trade with EU — The EU Cloud and AI Development Act (CADA) proposes draft measures which are going through the EU legislative… - How many contracts have been awarded under the Sovereign AI Research and Development Procurement Scheme.
Asked by Dr Ben Spencer (Con). Artificial Intelligence: Procurement — The Sovereign AI Research and Development Procurement Scheme procures novel AI capabilities from UK start-ups and SMEs to address challenges set… - How much the AI Security Institute spent on compute in 2025-26.
Asked by Dr Ben Spencer (Con). AI Security Institute: ICT — The AI Security Institute spent £3.34 million on compute in the 2025-26 financial year (April 2025 to March 2026). This covered cloud compute for research… - On how many occasions since 1 January 2026 the AI Security Institute has recommended changes to a model before its release that the developer did not make.
Asked by Dr Ben Spencer (Con). AI Security Institute — The AI Security Institute (AISI) is able to identify vulnerabilities in frontier models through pre-deployment testing. AISI does not recommend specific changes… - What evidence her Department has gathered since March 2026 on the copyright regime influences where AI models are trained.
Asked by Dr Ben Spencer (Con). Copyright: Artificial Intelligence — The Government's March 2026 report and impact assessment on copyright and artificial intelligence recognised that copyright law may influence where… - With how many developers based outside the UK and the US does AISI has a collaboration agreement.
Asked by Dr Ben Spencer (Con). AI Security Institute — The AI Security Institute (AISI) has built trusted, voluntary relationships with the world's leading AI developers, giving it privileged access to frontier… - How many secondees from AI developers worked in the AI Security Institute on 1 October 2026.
Asked by Dr Ben Spencer (Con). AI Security Institute: Secondment — On 1 October 2026 the AI Security Institute had no secondees from AI developers. The AI Security Institute has trusted, voluntary relationships with…
Want this for your own company? Seam tracks what government, Parliament and the regulators are doing and tells you only what affects your business, as it happens.
Related guides
- What do the CMA's digital markets rules mean for software?
- How is AI in healthcare regulated in the UK?
- How does the FCA regulate AI in financial services?
- What are the UK rules on AI in education?
Contains public sector information licensed under the Open Government Licence v3.0. Contains Parliamentary information licensed under the Open Parliament Licence v3.0. General information, not legal advice.