Regulation

UK GDPR

The UK's version of the General Data Protection Regulation, retained after Brexit and read alongside the Data Protection Act 2018. It governs any use of personal data in AI, from pasting a customer email into a chatbot to training a model.

Where this is taught

13Data, privacy and your workplace
What not to paste, how UK GDPR applies, training settings in each tool, and working inside your organisation's AI policy.31AI regulation: the EU AI Act and the UK approach
The EU AI Act and its timeline, the UK's principles-based approach, UK GDPR and the regulators: what applies to your organisation, and when.

Related terms

Bletchley Declaration

A statement agreed at the AI Safety Summit hosted by the UK at Bletchley Park on 1 and 2 November 2023, in which count…

Computer-generated works

A category in UK copyright law for works generated by computer with no human author, where the author is treated as th…

Controller

Under UK GDPR, the organisation that decides why and how personal data is processed, and carries primary responsibilit…

Council of Europe AI Convention

The Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law, the first legally…

Data (Use and Access) Act 2025

A UK Act that received Royal Assent on 19 June 2025 and amends UK GDPR and related law, including the rules on automat…

Data Protection Act 2018

The UK statute that sits alongside UK GDPR, adding exemptions, rules on law enforcement and intelligence processing, a…

Beyond the definition

Knowing the word is the easy part

A short assessment scores you across five skill areas and builds a path through 18 modules, skipping whatever you already know. Free, no card.

Find your level