Does the EU AI Act Apply to UK Charities? The Honest Answer
Brexit did not exempt UK charities from the EU AI Act. Eight diagnostic questions to find out if and how the Act applies to your charity, and which obligations it triggers.
Most UK charity leaders assume Brexit means they can ignore the EU AI Act. They are wrong. Here is the honest, sector-specific answer to who is in scope and why.
The assumption that needs to die
Brexit was four years ago. Most UK charity leaders have moved on. The assumption that EU regulation does not apply to UK organisations has settled into the sector's working memory.
For most things, that assumption is correct.
For the EU AI Act, it is not.
The Act applies extraterritorially to non-EU organisations whose AI use affects people inside the EU. The same logic, more or less, that brought UK organisations under GDPR after Brexit. If your charity's AI activity reaches into the EU, parts of the Act reach back into your charity.
This is not a fringe scenario. A surprising proportion of UK charities have some EU exposure. They just have not noticed.
This article is the honest answer to "does it apply to us." Run your charity through the eight questions below. Even one yes brings you into scope for the parts of the Act that govern that activity.
How extraterritoriality works under the Act
The Act applies to organisations outside the EU in three specific situations:
-
When you place an AI system on the EU market. This catches AI providers and developers. Most charities are not providers, so this rarely applies.
-
When you put an AI system into service in the EU. This catches anyone deploying AI systems for users or affected persons in the EU.
-
When the output produced by the AI system is used in the EU. This is the broadest hook. If your charity uses an AI system anywhere, and the output of that system reaches the EU, you can be in scope.
The third hook is what catches most UK charities. AI-generated newsletters reaching EU subscribers. AI-drafted appeals to EU-based donors. AI-summarised case notes for EU-resident beneficiaries. AI-generated reports for EU partners. The output crosses borders even when the charity does not.
This is exactly how GDPR caught UK organisations doing business with EU citizens. The mechanism is now familiar. The application to AI is new.
The 8 questions: does the Act apply to your charity?
Run your charity through each of these. A yes to any single one brings you into scope for the parts of the Act that cover that activity.
1. Do you have any staff, contractors, volunteers, or trustees based in the EU?
A surprising number of UK charities do. Remote-working staff who moved post-Brexit. Trustees with EU citizenship who relocated. Long-term volunteers in EU countries. Freelance designers, fundraisers, or translators contracted in EU jurisdictions.
If any of these people use AI tools on your charity's behalf, the Article 4 AI literacy obligation reaches them. Your literacy programme has to include them.
2. Do any of your beneficiaries live in the EU or hold EU citizenship?
This is the biggest catch for UK charities with international reach.
- Education charities supporting EU students
- Refugee and migration charities working with EU-resident clients
- Health charities with patients in EU countries
- Cultural charities with EU audiences
- Disability charities supporting EU members
- Mental health services with EU users
If your beneficiaries include EU residents, AI used in their service is in scope.
3. Do you receive funding from EU-based trusts, foundations, governments, or institutions?
Many UK charities do. Erasmus+. Horizon Europe. National lottery funds in EU countries. EU charitable foundations. European corporate trusts.
If AI is used in any reporting, application, or relationship management with these funders, output flows into the EU. That brings the activity into scope.
4. Do you partner with EU-based charities, NGOs, or service providers?
International coalitions are common in the UK charity sector. Wildlife and conservation charities work with European counterparts. Refugee charities partner with continental NGOs. Cultural and heritage charities collaborate across borders. Sector bodies have EU members.
If AI is used in partnership activity, the Act applies.
5. Do you deliver any services (online or in person) inside the EU?
UK charities deliver services into the EU more often than they realise. Online services. Webinars and training. Helpline support. Resources and toolkits. Conference attendance. Site visits.
If those services involve AI use, the deployer obligations apply.
6. Do your communications, campaigns, or fundraising appeals reach EU audiences?
This is the broadest test for medium-sized charities.
- Newsletters with EU subscribers
- Social media campaigns with EU followers
- Fundraising appeals to EU donors
- Petitions or advocacy with EU signatories
- Online content available to EU residents
If AI is generating any part of these communications and they reach EU audiences, output is in scope.
7. Do you collect or process personal data of EU residents?
Most UK charities with any of the above already process EU personal data and are accordingly UK-GDPR and EU-GDPR aware. AI use that involves this data adds the AI Act layer on top.
8. Do you operate AI systems that produce content or decisions affecting EU citizens?
The catch-all. Where any of questions 1 to 7 apply, and AI is part of the workflow, the Act applies.
What "applying" actually means in practice
A yes on any of the eight questions does not mean the whole Act applies to your charity. It means specific obligations apply to the specific activity in question.
The obligation most likely to apply to a UK charity in any of these scenarios is Article 4 (AI literacy). People in your charity using AI need to be trained appropriately. The training scope, content, and evidence requirements scale to the activity.
If you are using AI to support decisions that fall into one of the Act's high-risk domains (education access, employment decisions, eligibility for services, criminal justice, migration, justice), additional obligations may apply. See our guide on [high-risk AI in the charity sector] for the seven scenarios most UK charities are unknowingly in.
If you are deploying AI in contexts that interact with natural persons (chatbots on your website, AI-drafted communications without disclosure, voice-based service interfaces), Article 50 transparency obligations apply from 2 August 2026.
If you are using AI in a way that falls under the Act's prohibited practices (exploitation of vulnerable people through AI, emotion recognition in workplaces, social scoring), the prohibition has been in force since February 2025 and applies regardless of EU touchpoints because the prohibitions are non-negotiable.
The "what if we are entirely UK-only" case
A small number of UK charities can genuinely answer no to all eight questions. UK staff only. UK beneficiaries only. UK funders only. No EU partners. No EU audiences. No EU data.
For these charities, the EU AI Act does not directly apply.
Three things are still worth knowing.
The UK is developing its own AI regulatory framework. The direction of travel under the current Labour government is broadly aligned with the EU Act's principles, even if the regulatory architecture differs. Charities that prepare for the EU Act will be largely prepared for whatever the UK introduces.
The Act is becoming the de facto sector standard. Funders, partners, and regulators in the UK are starting to use it as a benchmark even where it does not legally apply. Being unable to demonstrate basic AI governance is a procurement risk regardless of legal applicability.
The ICO is publishing AI guidance that mirrors AI Act principles. UK GDPR enforcement is increasingly informed by AI Act thinking. The two are not separate compliance tracks; they converge in practice.
In short: for a UK-only charity, the Act is not legally binding. The obligations it puts in motion are still becoming the sector floor.
The honest test
If you are reading this and unsure whether your charity is in scope, the honest test is simple.
Could you, if pressed by a regulator or funder, defend the position that the Act does not apply to your charity?
If your charity has any of the eight types of EU touchpoint, the honest answer is no. The Act applies in part. You need to know which part and what it requires.
If your charity is genuinely UK-only, the honest answer is yes, but with caveats about UK regulatory direction and sector expectations.
Either way, the conclusion is the same. Some structured approach to AI literacy, governance, and tool review is now the sector baseline, not the sector ceiling.
Three things to do this week
If you have read this far and answered yes to one or more of the questions, here is what to do next.
Take the [EU AI Act Applicability Checker]. It walks through these eight questions and gives you a documented output you can share with your trustees and senior team. The checker generates a structured report with the specific obligations applicable to your charity.
Brief your trustees. Many trustees do not know the Act exists, let alone applies. Article 4 enforcement begins on 2 August 2026. The window for a structured trustee briefing is now.
Audit your AI use. You cannot scope your compliance work without knowing what AI is actually in use across your charity. Most charities discover at least two tools they had not formally approved.
The full guide to what compliance looks like is in our [EU AI Act for UK Charities] pillar. The framework for building the literacy itself is the [4Ps Framework]. The tools for operationalising both are linked from each.
If you would rather have a conversation about your specific situation, [book a call]. The first question we usually answer is the one this article exists to answer. Does the Act apply to us? In most cases, yes. The next question is more useful: what do we do about it.
This article is informational and does not constitute legal advice. The EU AI Act's extraterritorial reach is an active area of legal interpretation. Charities with specific compliance questions should obtain qualified legal advice in addition to operational guidance.
Similar Posts
Forget prompting tutorials. Every person on your charity payroll needs to understand four things about AI before they use it for anything. The plain-language briefing for staff who never had the training.
Twenty-eight per cent of charity boards admit poor digital skills. Most have had no briefing on AI. With Article 4 enforcement weeks away, this is the plain-English briefing your trustees should have had a year ago.
Two-hour ChatGPT masterclasses are the default in the charity sector — and the most common reason AI literacy fails to land. Why generic doesn't work and what role-specific training looks like.