Check your exposure
Guide · Scope

Does the EU AI Act apply to UK businesses?

Often, yes. The Act follows where your AI's output is used, not where your company is registered. A UK business with customers, staff or job applicants in the EU can be covered.

Last checked 3 October 2026

Who the Act covers

Article 2(1) sets out who is in scope. The parts that matter for a UK business:

  • Providers who place an AI system on the EU market or put it into service in the EU, wherever they are based.
  • Providers and deployers based outside the EU, where the output of the AI system is used in the EU.
  • Deployers based or located in the EU. That includes a UK company's EU subsidiary or branch.
The test is whether the AI's output is used in the EU: a chatbot reply read by a customer in Dublin, a shortlist of candidates for a job in Cork, a credit decision about a customer in Galway.

Common situations

Your situationLikely position
UK online shop with an AI chatbot, selling to customers in Ireland and the EUIn scope Article 50 transparency duties for EU customers
UK recruiter using AI to screen candidates for roles based in the EUIn scope High-risk rules from 2 December 2027
UK software company selling an AI product to EU customersIn scope as provider Duties depend on the product's risk level
UK lender using AI credit scoring for customers in the EUIn scope High-risk rules from 2 December 2027
UK business using AI only for UK customers, staff and operationsLikely out of scope Unless that changes

These are general indications. Whether a particular tool is covered depends on how it's used and on your role as provider or deployer.

What changes if you're in scope

The same duties apply as for an EU business, on the same dates: transparency duties since 2 August 2026, and high-risk rules from 2 December 2027. See the full timeline.

Providers based outside the EU have one extra step for high-risk AI systems: before making them available in the EU, they must appoint an authorised representative established in the EU (Article 22).

Fines are the same as for EU businesses: up to €15 million or 3% of worldwide turnover for most breaches. For SMEs, the lower of the two applies (Art. 99).

What if you're out of scope?

The UK has no AI-specific law equivalent to the EU AI Act. Existing UK law still applies to AI, including UK GDPR's rules on significant decisions made solely by automated means, the Equality Act and consumer protection law.

Your position can also change without much warning. Taking on an Irish customer, hiring for a role in the EU or launching an EU version of your product can bring you into scope.

What to do

  1. List the AI tools your business uses.
  2. For each one, ask whether its output reaches anyone in the EU: customers, staff, applicants or users.
  3. Any tool that does should be classified under the Act, the same way an Irish business would.

Our two-minute checker starts with exactly this question, or book a call.

Sources: Regulation (EU) 2024/1689, Articles 2, 22, 50 and 99, as amended by the Digital Omnibus on AI. General information, not legal advice.