UK government uses Henry VIII powers for UK AI content regulation

The use of Henry VIII powers to bypass parliamentary debate creates a fast-track regulatory environment where streaming and AI platforms face sudden shifts in compliance requirements. By granting Ofcom and ministers the ability to amend the Online Safety Act without full legislative scrutiny, the government reduces the predictability of the UK's digital legal framework. This shift forces streaming entities to adapt to new AI safety and data protection standards that may lack the technical vetting typically provided by select committee reviews. Watch for legal challenges from free speech advocacy groups or formal parliamentary motions to restrict the scope of these delegated powers in future sessions.

Ofcom has been building its enforcement apparatus ahead of the Online Safety Act's full implementation timeline. In March 2026, Ofcom published its first set of codes of practice under the Online Safety Act covering illegal content duties, which require platforms to conduct risk assessments and deploy proportionate measures to prevent users encountering illegal material. The regulator has simultaneously opened consultations on how AI-generated content should be classified under the Act's harm categories, a move that directly intersects with the government's use of delegated powers to redefine what constitutes regulated content without returning to Parliament.

The broader legislative pattern of using secondary legislation to reshape digital regulation has drawn scrutiny from parliamentary committees. In July 2026, the House of Lords Delegated Powers and Regulatory Reform Committee published a report criticizing the frequency with which the government amends the Online Safety Act via statutory instruments, noting that 14 separate amendments had been made without primary legislation since the Act received Royal Assent in October 2023. Graham Stringer, who chairs the committee, argued that the cumulative effect undermines the legislative intent Parliament originally approved. Separately, the Information Commissioner's Office issued guidance in June 2026 clarifying how data protection obligations apply to AI systems processing personal data for content moderation, creating a parallel compliance layer that platforms must navigate alongside Ofcom fraudulent advertising codes.

Competing regulatory approaches in other jurisdictions highlight the stakes for platforms operating across borders. The European Union's Digital Services Act, which has been in force since February 2024, requires very large online platforms to conduct systemic risk assessments that explicitly account for AI-generated content and deepfakes, with the European Commission issuing its first preliminary findings against Meta and TikTok in late 2025. For streaming platforms and user-generated content services operating in both markets, the divergence between the UK's fast-track amendment approach and the EU's more codified framework creates compliance complexity. The UK government's AI Safety Institute, which was restructured in early 2026 under the Department for Science, Innovation and Technology, has been tasked with providing technical input to Ofcom's content classification decisions, though critics including the Free Speech Union have questioned whether the institute's advisory role carries sufficient independence from ministerial direction.