The rules are arriving. The pilots are already live.

Central government departments and in-scope arm's-length bodies must publish Algorithmic Transparency Recording Standard records for in-scope tools. Councils are publishing them voluntarily, and members and residents are starting to ask for them.

The Data (Use and Access) Act 2025 replaced UK GDPR Article 22 with Articles 22A to 22D: safeguards for significant decisions taken solely by automated means, including the right to human intervention.

Regulations require the Information Commissioner to prepare a code of practice on AI and automated decision-making. Organisations that map their AI use now will be ready when it lands.

On 30 October 2026 the CMA, FCA, ICO and Ofcom issued a joint statement on protecting people and businesses in an agentic economy. The ICO's call for evidence on AI agents closes on 20 November 2026.

The AI Playbook for the UK Government sets ten principles, from meaningful human control to having the right assurance in place. They are the yardstick scrutiny committees and auditors will use.

Under the Procurement Act 2023, lower-value contracts below the section 87 thresholds are not notifiable below-threshold contracts. A scoped Health Check can be arranged quickly under your own contract standing orders.