Overview
CPD COURSE AI Law, Policy and Governance What the law already says about AI, what is changing, and how to govern it in practice. Jurisdiction: England and Wales · For practitioners already working with AI 30 CPD HOURS CPD Standard …
Course Details
AI Law, Policy and Governance
What the law already says about AI, what is changing, and how to govern it in practice.
PPT Slides
Audio Podcast
Quiz
Infographics
Overview
Artificial intelligence is now a routine part of how organisations in England and Wales make decisions, serve customers and citizens, and produce work. The law that governs it is not one statute but many: data protection, equality, intellectual property, consumer and competition law, online safety, professional conduct and sector rules, each applied by its own regulator and increasingly by the courts.
This course brings that law together for practitioners who already work with AI and need a dependable, current picture of what applies, what is changing and how to evidence compliance. It is built around the position as at August 2026: the Data (Use and Access) Act 2025 in force, the Crime and Policing Act 2026 on the statute book, the government’s March 2026 copyright report, the first generative-AI judgment in Getty v Stability AI, the Ayinde line of court decisions, and the EU AI Act’s revised 2027–28 timetable.
Every module states the jurisdiction, names sources for figures, and ends with an Apply and Reflect exercise that asks learners to test their own organisation against the law. The course is deliberately direct: it tells learners where the law is settled, where it is unsettled, and where claims of ‘no regulation’ are simply wrong.
Who this course is for
The course assumes working familiarity with AI in a professional setting and explains legal concepts from first principles. It is not an introduction to machine learning.
Solicitors, barristers, CILEx professionals and in-house counsel advising on or using AI
DPOs, privacy managers and information governance leads running AI DPIAs and ADM assessments
Compliance officers in financial services, health and other regulated sectors; risk and audit professionals
Policy, digital, procurement and service managers in central and local government, NHS, police and Welsh public bodies
Product owners, architects and buyers who specify, build or purchase AI systems
Board members, executives and committee chairs accountable for AI adoption
Learning outcomes
By the end of the course, learners will be able to:
Map any AI use case to the statutes, regulators and duties that apply in England and Wales
Apply UK GDPR as amended by the DUAA 2025, including Articles 22A–22D, DPIAs and lawful basis across the AI lifecycle
Identify and evidence against discrimination risk under the Equality Act 2010 and the PSED
State the current UK position on copyright, training data and AI outputs, including Getty v Stability AI
Allocate AI risk in contracts and explain liability routes in tort, contract, product and consumer law
Operate a verification and confidentiality protocol that meets court and regulator expectations for AI use in legal work
Explain sector-specific expectations in financial services, health and the workplace
Run AI procurement and deployment that satisfies public law, ATRS and Procurement Act 2023 requirements
Recognise and respond to AI-enabled online harms using the right referral routes
Design and document an AI governance programme informed by the EU AI Act, ISO/IEC 42001 and the NIST AI RMF
Career path
AI governance is becoming a recognised function across legal, compliance, data, risk and public-service organisations. The course supports practitioners moving towards, or deepening, the roles below.
AI governance and assurance
AI governance lead, responsible AI manager, AI assurance specialist, model risk analyst
Legal and regulatory
Technology and data lawyer, regulatory affairs manager, in-house counsel with AI portfolio
Data protection
DPO, privacy programme manager, information governance lead with AI remit
Public sector
Digital policy adviser, data ethics lead, AI procurement specialist
Risk and audit
Technology risk manager, internal auditor (AI and models), compliance officer
Course structure
Ten modules, each ending with an Apply and Reflect exercise, plus a 20-question assessment.
The UK Approach to AI Regulation
principles, regulators and the legislative picture
Data Protection and Automated Decision-Making
UK GDPR, the DPA 2018 and the DUAA 2025
Equality, Bias and Discrimination
the Equality Act 2010 applied to algorithmic outcomes
Intellectual Property and AI
training data, outputs, ownership and the 2026 policy position
Liability, Product Safety and Consumer Protection
who pays when AI goes wrong
AI in Legal Practice and the Courts
professional duties and court expectations
Sector Regulation: Finance, Health and the Workplace
how regulators apply their rules to AI
Public Sector AI, Policing and Procurement
public law, transparency and buying AI lawfully
Online Harms, Deepfakes and AI-Generated Content
Online Safety Act duties and practitioner response
International Frameworks and Building an AI Governance Programme
the EU AI Act, treaties and standards
Frequently asked questions
Q. Is this a qualification or a licence to practise?
No. It is continuing professional development for practitioners. It does not confer any professional status, regulatory permission or right to practise.
Q. How current is the content?
Built against the law of England and Wales as at August 2026. AI law moves quickly, so statutory references, guidance and case citations are kept under review.
Q. Does it cover Scotland, Northern Ireland or the EU?
Jurisdiction is England and Wales. The EU AI Act is covered where it reaches E&W organisations and for comparison. Scotland and Northern Ireland are not covered.
Q. Do I need a legal or technical background?
The course assumes working familiarity with AI in a professional setting. It explains legal concepts from first principles but does not teach machine learning.
Q. How is it assessed?
A 20-question multiple-choice assessment, two questions per module.
Q. Is Module 9 suitable for everyone?
Module 9 addresses intimate-image abuse, child sexual abuse material and harmful chatbot content at the level of recognition and referral. A practitioner-support note precedes it and learners may step out.
This is CPD, not a qualification or licence. It supports existing roles and progression into AI governance work; it does not by itself entitle anyone to practise law, act as a DPO, or hold any regulated function.
You May Like
CPD COURSE Allergy Awareness Training Meeting the New 2026 School Requirements Jurisdiction: England and Wales · Content current to August 2026 CPD HOURS 35...
CPD COURSE · ENGLAND AND WALES Care Certificate Standards 16-standard knowledge bundle A knowledge refresher for practitioners already working in health and adult social...
CONTINUING PROFESSIONAL DEVELOPMENT · ENGLAND AND WALES Employability Skills with AI For practitioners who already support others into, through or between jobs — a...
CONTINUING PROFESSIONAL DEVELOPMENT · ENGLAND AND WALES Estate Agent Diploma A practitioner course in the law, duties and daily disciplines of residential estate agencies...
CONTINUING PROFESSIONAL DEVELOPMENT · ENGLAND AND WALES Residential Lettings Private rented sector practice under the Renters’ Rights Act 2025 and the Renting Homes (Wales)...
Course Features
- Lectures 12
- Quizzes 2
- Duration Lifetime access
- Skill level All levels
- Language English
- Students 3
- Certificate Yes
- Assessments Self
