United Kingdom: Secretary of State issued Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations

On 16 April 2026, the Secretary of State issued the Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations. The regulations place a duty on the Information Commissioner’s Office (ICO) to develop a code of practice guiding the processing of personal data in the development and use of artificial intelligence and automated decision-making systems. They also require the ICO to provide guidance on the processing of children’s personal data. In addition, the regulations amend the panel requirements under the Data Protection Act 2018 to exclude any matters relating to national security from the panel’s reporting.