AI regulation timeline and key dates

Quick reference for all key AI regulation dates and upcoming milestones. Covers the EU AI Act implementation timeline, UK regulatory developments, copyright consultations, and penalty commencement dates that affect businesses operating in or trading with the UK and EU.

UK-wide
Guide summary

If your business uses AI, check key dates for UK and EU rules. EU rules start from February 2025 for banned AI practices. UK will introduce new AI laws from late 2026. Prepare early if you sell AI to the EU.

  • Stop using banned AI practices in the EU by 2 February 2025варен
  • Comply with EU rules for general-purpose AI by 2 August 2025
  • Meet EU high-risk AI requirements by 2 August 2026
  • Prepare for UK AI Bill expected late 2026
  • Check automated decision rules under DUAA 2025
  • Follow UK copyright law for AI creations
  • Pay penalties up to £17.5 million for data breaches
  • Expect UK copyright rules on AI by 2026-2027
  • Comply with Online Safety Act for AI content
  • Register high-risk AI systems in EU database
On this page
UK-wide

Related guides in Compliance & Legal

AI Regulation Framework

The UK takes a principles-based, sector-specific approach to AI regulation. There is no single AI law. Instead, existing …

UK AI regulation: how it works

Comprehensive overview of UK AI regulation. The UK has no single AI law. Instead, existing sector regulators apply …

AI regulation in the UK and EU is moving on different timelines. If your business develops or deploys AI systems, you need to track dates across multiple jurisdictions and regulators. This guide provides a single reference point for the milestones that matter most.

Use this alongside the detailed guides on UK AI regulation and which regulator covers your AI system for full context on what each milestone requires.

EU AI Act milestones

The EU AI Act affects UK businesses in two main ways. First, if you sell AI products or services to EU customers, you must comply with the Act's requirements for your risk category. Second, the Act's classification system and conformity assessment procedures are likely to influence UK regulatory expectations over time, even without direct transposition.

Businesses that export AI systems to the EU should begin compliance work well ahead of each deadline. The high-risk AI system requirements, which take effect from August 2026, involve conformity assessments, technical documentation, and registration in the EU database — processes that take months to complete.

UK regulatory milestones

Key UK dates already in force

  • 5 February 2026: Data (Use and Access) Act 2025 data protection provisions commenced — new rules on automated decision-making, recognised legitimate interests, and Senior Responsible Individual role
  • January 2025: Online Safety Act 2023 illegal content duties in force — platforms must conduct risk assessments and take proactive measures, including for AI-generated content
  • January 2025: Digital Markets, Competition and Consumers Act 2024 CMA powers commenced — Strategic Market Status designations can now be made for large AI-powered platforms

Upcoming UK milestones

  • 2026 (expected): AI Bill introduced to Parliament — expected to place the five AI principles on a statutory footing and strengthen regulator mandates
  • 2026 (expected): ICO statutory code on AI and automated decision-making — will provide binding guidance under DUAA 2025 powers
  • 2026 (expected): Product Regulation and Metrology Act 2025 secondary legislation — may bring AI-enabled products within scope of product safety regulation
  • 2026-2027 (expected): Government response on AI and copyright — will set rules on text and data mining, transparency obligations, and creator opt-out mechanisms

Penalties reference

Penalty regimes are already in force across all the regulators listed above. You do not need to wait for the AI Bill to face enforcement action. If your AI system breaches existing data protection, consumer protection, financial services, health and safety, or equality law, the relevant regulator can act now using its current powers.

The EU AI Act introduces its own penalty regime for non-compliance, with fines of up to 35 million euros or 7% of global annual turnover for prohibited AI practices. UK businesses selling into the EU market should factor these into their compliance planning.

Timeline resources