UK regulations requiring an ICO code of practice on AI and automated decisions
Requires the UK Information Commissioner (ICO) to prepare a statutory code of practice on good practice in processing personal data when developing and using AI and in automated decision-making, including guidance on children's personal data.
At a glance
In force
- Jurisdiction
- United Kingdom
- Type
- Regulation
- Official title
- The Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 (S.I. 2026/425)
What this means for you
If you build AI
- The ICO must write a statutory code on personal data in AI development and use; it will set out good practice for training and running AI on personal data.
If you deploy AI
- The code will also cover automated decision-making under the UK GDPR's new Article 22C safeguards.
If you use AI
- The code must include guidance on good practice in processing children's personal data.
Key dates
- May 12, 2026PastIn force; the Information Commissioner must prepare a code of practice on AI and automated decision-makingSource
Status history
In the Drops
No Drop has covered this law yet.