What AI training do UK employees need, and which rules apply?
By Bodhih Training Solutions, Bengaluru · UpdatedThe short answer
The UK has no single AI Act. AI at work is governed by existing law, mainly the UK GDPR, the Data (Use and Access) Act 2025 and the Equality Act 2010, with regulators applying five cross-sector principles. Train every employee on what data may go into an AI tool and how to check its output, and train HR and managers on automated decisions, recruitment and discrimination risk.
Which UK rules apply to AI at work?
Instead of one statute, the government asked existing regulators to apply five principles from its 2023 white paper: safety, security and robustness; appropriate transparency and explainability; fairness; accountability and governance; and contestability and redress. The binding obligations come from laws you already follow.
| Rule | What it covers | Who needs to know it |
|---|---|---|
| UK GDPR and Data Protection Act 2018 | Personal data put into or produced by AI tools; lawful basis, fairness, impact assessments | Everyone who handles personal data |
| Data (Use and Access) Act 2025 | Changes to automated decision-making and international transfer rules; the ICO is preparing a code of practice on AI and automated decisions | Data protection leads, HR, product owners |
| Equality Act 2010 | Discrimination, including through AI used in hiring, promotion and pay | HR, recruiters, managers |
| Sector regulators (FCA, MHRA, Ofcom, CMA) | How the five principles apply in regulated sectors | Compliance teams in those sectors |
| EU AI Act (if you operate in the EU) | Applies to UK organisations that place AI on the EU market or use it there, including a duty to ensure staff AI literacy | Legal and anyone serving EU customers |
What should UK employees learn?
A practical curriculum by audience:
- Everyone: what data must never go into an AI tool, how to check output for errors and invented facts, and when to say AI was used.
- Managers: how to approve a new use, who is accountable for it, and how to handle a mistake.
- HR and recruiters: where AI screening can discriminate, what candidates must be told, and how to keep a person in the decision.
- IT and security: unapproved tools, data leakage and prompt injection.
- Leaders: governance, the five principles and where AI changes jobs.
How do you roll it out?
Publish a short AI acceptable-use policy first, then train against it. Start with a course of a few hours for everyone, add role-specific training for HR, managers and technical teams, and measure before and after on tasks people really do. Repeat when your policy, the ICO's guidance or the law changes.
Is AI training a legal requirement in the UK?
No UK law names an AI course that every employer must run. Training is how you meet duties you already have: the UK GDPR expects staff who handle personal data to know the rules, and an employer defending a discrimination claim needs to show what it did to prevent it. If you also operate in the EU, the EU AI Act's AI literacy duty applies to you there.
Courses that fit
Responsible AI and Data Privacy course
Lead your team’s AI use safely and lawfully: the 2026 rules, three Scenario Sims and a real AI register entry.
AI course · onlineAI for HR course
Eight HR work products built with AI on your own work, a proctored exam and a credential anyone can verify.
AI course · onlineAI at Work Essentials course
Four hours of hands-on AI literacy for every employee, with a measured before-and-after score.
Related reading
Sources
Checked on 2026-11-14. Laws and prices change; confirm on the official page before you rely on a figure.
More from the Bodhih family
Train managers to approve AI use safely
Responsible AI and Data Privacy for Managers: about 11 hours, self-paced, with a verifiable credential. $119, or company seats.
Questions people ask next
Does the UK have an AI Act?
No. As of the date shown there is no AI-specific statute; a private member's bill has been introduced in the House of Lords without government backing. Existing data protection, equality and sector law applies.
Who regulates AI in the UK?
Existing regulators in their own areas: the ICO for personal data, the FCA for financial services, the CMA for competition and consumers, Ofcom for communications and the MHRA for medical devices.
Can we use AI to screen job applicants?
You can, but data protection and equality law apply. The ICO publishes guidance on AI and data protection and on automated decision-making; take advice before relying on automated screening alone.
Which Bodhih courses cover this?
AI at Work Essentials ($59) is the short course for everyone. Responsible AI and Data Privacy for Managers ($119) covers policy, risk and privacy decisions. Applied AI: HR ($199) covers fair use of AI in people decisions. Company seats are available.
Is this legal advice?
No. It summarises public sources as of the date shown. Take advice from a solicitor or your data protection officer.