UK marketing teams now operate under five overlapping regulatory regimes affecting AI use: UK GDPR, the EU AI Act (extra-territorially), ICO guidance, ASA / CAP Code rulings, and the UK Online Safety Act.
47% of UK marketing teams cannot today produce, on request, a defensible record of AI tool use, training data provenance, and human oversight. The single most under-prepared compliance area.
Enforcement is escalating: 5 formal ICO enforcement notices involving AI in marketing in the last 12 months (vs zero in the prior 24 months); 23 upheld ASA complaints involving AI-generated advertising content.
Three operational priorities for UK CMOs this quarter: complete AI tool inventory, document human oversight on material decisions, and ASA-aligned AI content disclosure.
Updated quarterly with out-of-cycle updates whenever a material UK enforcement action lands. Not legal advice.