Article
Does the EU AI Act apply to UK companies?
The short answer is: often, yes. The United Kingdom is not a member state, so for the EU AI Act a UK company is in a third country. But the regulation does not ask only where a company is. It asks what the company does with an AI system and where that system's output ends up.
Who the regulation reaches
Article 2(1) lists who the AI Act applies to. Four of its points can catch a company based in the UK. The verified wording.
| Point | Applies to | What it means for a UK company |
|---|---|---|
| (a) | Providers placing AI systems or general-purpose AI models on the market, or putting systems into service, in the Union, wherever they are established | Selling or supplying an AI product to EU customers brings you in as a provider |
| (b) | Deployers established or located in the Union | A subsidiary or branch of yours in an EU country that uses AI systems is in scope as a deployer |
| (c) | Providers and deployers in a third country, where the output of the AI system is used in the Union | Using AI in the UK whose results are used in the EU brings you in |
| (f) | Authorised representatives of providers not established in the Union | If you are a UK provider, the representative you have in the Union is itself in scope |
Point (g) adds the other side: the regulation also applies to affected persons located in the Union. A candidate in Dublin assessed by a system run from London is one of them.
The point that catches most UK companies
Point (c) is the one people miss. A UK company that only uses AI, and sells nothing AI-based, can still be inside the AI Act if the output of its system is used in the Union. Where the company is, and where its servers are, does not settle it.
Some situations where that question comes up:
- a UK recruiter ranks applicants for a role based in the Netherlands
- a UK group runs one performance tool for staff in Manchester and in Madrid
- a UK agency produces content with AI for a client that publishes it in Germany
What follows once you are in scope
Being in scope does not by itself create every obligation. Which ones apply depends on your role, provider or deployer, and on the use: whether it is a prohibited practice, a high-risk system, or a use with transparency duties.
- For employment uses, see is your HR software high-risk?
- For chatbots and AI-generated content, see Article 50
- For what already applies and from when, see the timeline
- For what a breach can cost, see the fines
Where this fits
The first job is a list of your AI uses with a line on each saying whether the AI Act reaches it, and why. The AI Act File starts with exactly that inventory, then keeps the decision behind each use in writing so a new market or a new client reopens the right page.