UK AI Regulatory Framework

UK AI Regulatory Framework — 80% of in-scope requirements covered.

33 requirements · 33 in scope (22 enforced · 6 designed · 5 advisory). The 80% is weighted over the in-scope base.

UK AI Regulatory Framework: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. safety-by-design · enforced

    P1 — Safety considerations should be embedded throughout the AI system lifecycle (DSIT response §2.6)

    Audit events: kye.purpose.permission.v1, kye.compliance.attestation.v1 · Constitution: 12 purpose permission

  2. testing · enforced

    P1 — Pre-deployment and continuous testing including red-teaming and adversarial robustness (DSIT response…

    Audit events: kye.scenario_run.v1, kye.assurance.audit_replay_report.v1 · Constitution: 21 delegated auditability

  3. incident-response · enforced

    P1 — Incident response procedures for AI safety events (DSIT response §2.8)

    Audit events: kye.signal.incident.opened.v1, kye.signal.incident.closed.v1 · Constitution: 13 resilience loop

  4. intelligibility · enforced

    P2 — Sufficient information about output rationale to enable affected persons to interpret meaningfully (DSIT…

    Audit events: kye.evidence.decision_map.v1 · Constitution: 36 governedui

  5. bias-monitoring · enforced

    P3 — Continuous monitoring for fairness/bias outcomes (DSIT response §4.5)

    Audit events: kye.scenario_run.v1, kye.signal.drift.detected.v1 · Constitution: 13 resilience loop

  6. equality-act · enforced

    P3 — Compliance with Equality Act 2010 protected characteristics in AI decisions (DSIT response §4.7)

    Audit events: kye.data_use_manifest.v1, kye.purpose.admissibility.v1 · Constitution: 31 data governance pack

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: DSIT 'A pro-innovation approach to AI regulation' (white paper 2023-03 + response 2024-02) · License: Open Government Licence v3.0

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
Central function & sector regulator engagement10334055%
P1 Safety, security & robustness66000100%
P2 Appropriate transparency & explainability4310088%
P3 Fairness4301081%
P4 Accountability & governance5410090%
P5 Contestability & redress4310088%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
uk-ai-framework.central-functionCentral function (DSIT-hosted) monitors cross-cutting AI risks and coordinates between sector regulators (ICO, CMA, FCA, MHRA, Ofcom, etc.)advisoryaudit_events: kye.compliance.attestation.v1, kye.federation.cross_org_delegation.v1
engines: internal
constitution_refs: constitution/40-IMPLEMENTATION-CANONICAL.md
uk-ai-framework.P1.safety-by-designP1 — Safety considerations should be embedded throughout the AI system lifecycle (DSIT response §2.6)enforcedaudit_events: kye.purpose.permission.v1, kye.compliance.attestation.v1
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
uk-ai-framework.P1.testingP1 — Pre-deployment and continuous testing including red-teaming and adversarial robustness (DSIT response §2.7)enforcedaudit_events: kye.scenario_run.v1, kye.assurance.audit_replay_report.v1
engines: internal, internal
constitution_refs: constitution/21-DELEGATED-AUDITABILITY.md
uk-ai-framework.P1.incident-responseP1 — Incident response procedures for AI safety events (DSIT response §2.8)enforcedaudit_events: kye.signal.incident.opened.v1, kye.signal.incident.closed.v1
engines: internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
uk-ai-framework.P2.intelligibilityP2 — Sufficient information about output rationale to enable affected persons to interpret meaningfully (DSIT response §3.4)enforcedaudit_events: kye.evidence.decision_map.v1
engines: internal
constitution_refs: constitution/36-GOVERNEDUI.md
uk-ai-framework.P2.public-disclosureP2 — Appropriate public disclosure where AI substantially affects rights/interests (DSIT response §3.5)designedaudit_events: kye.comms.dispatched.v1, kye.compliance.attestation.v1
constitution_refs: constitution/38-COMMS-RAIL.md
uk-ai-framework.P3.bias-monitoringP3 — Continuous monitoring for fairness/bias outcomes (DSIT response §4.5)enforcedaudit_events: kye.scenario_run.v1, kye.signal.drift.detected.v1
engines: internal, internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
uk-ai-framework.P3.equality-actP3 — Compliance with Equality Act 2010 protected characteristics in AI decisions (DSIT response §4.7)enforcedaudit_events: kye.data_use_manifest.v1, kye.purpose.admissibility.v1
engines: internal, internal
constitution_refs: constitution/31-DATA-GOVERNANCE-PACK.md
uk-ai-framework.P4.lifecycle-accountabilityP4 — Lifecycle accountability across providers, deployers, and end users (DSIT response §5.4)enforcedaudit_events: kye.federation.cross_org_delegation.v1, kye.purpose.permission.v1
engines: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
uk-ai-framework.P4.dpia-linkP4 — Linkage with existing UK GDPR DPIA where applicable (DSIT response §5.6)designedaudit_events: kye.compliance.attestation.v1, kye.evidence.pack.v1
constitution_refs: constitution/31-DATA-GOVERNANCE-PACK.md
uk-ai-framework.P5.complaint-channelP5 — Effective complaint and challenge channels for affected persons (DSIT response §6.4)enforcedaudit_events: kye.signal.incident.opened.v1, kye.comms.dispatched.v1
engines: internal
constitution_refs: constitution/38-COMMS-RAIL.md
uk-ai-framework.P5.human-reviewP5 — Right to human review of significant AI decisions (DSIT response §6.5)enforcedaudit_events: kye.approval_decision.v1, kye.evidence.decision_map.v1
governedui_modules: kye.governedui.module.action_approval.v1
constitution_refs: constitution/36-GOVERNEDUI.md
uk-ai-framework.central-function.gap-analysisCentral function — gap analysis between regulator approaches and DSIT framework principles (DSIT response §7.4)advisoryconstitution_refs: constitution/40-IMPLEMENTATION-CANONICAL.md
uk-ai-framework.central-function.cross-cutting-risksCentral function — monitoring cross-cutting / emerging AI risks (DSIT response §7.5)enforcedaudit_events: kye.signal.drift.detected.v1, kye.risk.score.v1
engines: internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
uk-ai-framework.central-function.cross-regulator-coordinationCentral function — cross-regulator coordination (CMA, ICO, FCA, OFCOM, etc.) (DSIT response §7.6)advisoryaudit_events: kye.comms.dispatched.v1
constitution_refs: constitution/38-COMMS-RAIL.md
uk-ai-framework.regulator.ico-guidanceSector regulator engagement — ICO guidance on AI and data protectionenforcedaudit_events: kye.compliance.attestation.v1
constitution_refs: constitution/31-DATA-GOVERNANCE-PACK.md
uk-ai-framework.regulator.fca-guidanceSector regulator engagement — FCA AI Discussion Paper / CP outcomesdesignedaudit_events: kye.compliance.attestation.v1
constitution_refs: constitution/26-COMMERCIAL.md
uk-ai-framework.regulator.mhra-guidanceSector regulator engagement — MHRA SaMD + AI Airlock programenforcedaudit_events: kye.compliance.attestation.v1
constitution_refs: constitution/40-IMPLEMENTATION-CANONICAL.md
uk-ai-framework.regulator.cma-ai-foundation-modelsSector regulator engagement — CMA review of AI foundation modelsadvisoryaudit_events: kye.model.capability_profile.v1, kye.model.influence_envelope.v1
constitution_refs: constitution/14-AGENTS-AND-ENGINES.md
uk-ai-framework.atrs.1Algorithmic Transparency Recording Standard (ATRS) — Tier 1: high-level information about algorithmic tooldesignedaudit_events: kye.entity.model.v1, kye.model.capability_profile.v1
constitution_refs: constitution/43-MACHINE-READABLE-BY-DEFAULT.md
uk-ai-framework.atrs.2ATRS — Tier 2: detailed information about algorithmic tool decision-makingdesignedaudit_events: kye.evidence.decision_map.v1, kye.model.influence_envelope.v1
constitution_refs: constitution/43-MACHINE-READABLE-BY-DEFAULT.md
uk-ai-framework.P1.safetyAI systems should function in a robust, secure and safe way throughout the AI lifecycleenforcedaudit_events: kye.purpose.admissibility.v1, kye.resilience.drift_event.v1, kye.compliance.attestation.v1
engines: internal, internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
uk-ai-framework.P1.securityRisks to the security of AI systems should be continually identified, assessed and managedenforcedaudit_events: kye.evidence.tool_call_pin.v1, kye.agent.mcp_allow_list.v1, kye.agent.refusal.v1
engines: internal
constitution_refs: constitution/52-DELEGATED-AGENT-BINDING.md
uk-ai-framework.P1.robustnessAI systems should perform reliably under expected and unexpected conditions including adversarial inputsenforcedaudit_events: kye.evidence.trace_replay_spec.v1, kye.signal.stress_test.high_risk_detected.v1
engines: internal, internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
uk-ai-framework.P2.transparencyAI systems should be appropriately transparent — information about purpose, training data, function communicatedenforcedaudit_events: kye.model.capability_profile.v1, kye.model.influence_envelope.v1
engines: internal
governedui_modules: kye.governedui.module.entity_passport.v1
constitution_refs: constitution/14-AGENTS-AND-ENGINES.md, constitution/36-GOVERNEDUI.md
uk-ai-framework.P2.explainabilityAI systems should be appropriately explainable — decisions can be explained to affected partiesenforcedaudit_events: kye.evidence.decision_map.v1, kye.evidence.trace_replay_spec.v1, kye.governedui.evidence_timeline.v1
engines: internal, internal
governedui_modules: kye.governedui.module.evidence_timeline.v1
constitution_refs: constitution/21-DELEGATED-AUDITABILITY.md
uk-ai-framework.P3.fairness-policyAI systems should not undermine legal rights, discriminate unfairly, create unfair commercial outcomes, or breach UK statutory equality dutiesenforcedaudit_events: kye.purpose.permission.v1, kye.purpose.admissibility.v1
engines: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
uk-ai-framework.P3.fairness-measurementFairness outcomes should be measurable and substantively tested across protected characteristicsadvisoryaudit_events: kye.evidence.trace_replay_spec.v1, kye.compliance.attestation.v1
engines: internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
uk-ai-framework.P4.governance-measuresEffective oversight of the supply and use of AI systems with clear lines of accountabilityenforcedaudit_events: kye.purpose.grant.v1, kye.federation.cross_org_delegation.v1, kye.risk.authority_register.v1
engines: internal
governedui_modules: kye.governedui.module.authority_scope.v1, kye.governedui.module.authority_drift.v1
constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/21-DELEGATED-AUDITABILITY.md
rule_packs: kye:rule-pack:public-sector-governance
uk-ai-framework.P4.accountabilityClear allocation of responsibility for the use, performance, and outcomes of an AI systemenforcedaudit_events: kye.purpose.grant.v1, kye.evidence.decision_map.v1, kye.agent.governance.v1
engines: internal, internal
constitution_refs: constitution/52-DELEGATED-AGENT-BINDING.md
uk-ai-framework.P4.risk-managementAppropriate risk management practices throughout the AI lifecycleenforcedaudit_events: kye.risk.score.v1, kye.compliance.attestation.v1
engines: internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
uk-ai-framework.P5.contestabilityAffected third parties should be able to contest harmful outcomes or decisionsenforcedaudit_events: kye.evidence.decision_map.v1, kye.evidence.trace_replay_spec.v1, kye.governedui.evidence_timeline.v1
engines: internal
governedui_modules: kye.governedui.module.evidence_timeline.v1, kye.governedui.module.critical_point_review.v1
constitution_refs: constitution/21-DELEGATED-AUDITABILITY.md, constitution/36-GOVERNEDUI.md
uk-ai-framework.P5.redressMechanisms for redress should be available, identifiable and accessible to affected partiesdesignedaudit_events: kye.evidence.pack.v1, kye.signal.approval_evidence_pack.generated.v1
constitution_refs: constitution/31-DATA-GOVERNANCE-PACK.md, constitution/38-COMMS-RAIL.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.