AI is moving fast. UK businesses want in, but many are hitting the brakes. We look at what the DUAA impact on AI is.
The reason? Data regulation. UK GDPR has put businesses on high alert, and the EU’s new Digital Use and Access Act (DUAA) adds a new layer of uncertainty, especially for companies working with EU partners.
The question on everyone’s lips: Is regulation holding AI back, or could new rules finally give UK businesses the clarity they need?
GDPR: Protecting Citizens or Slowing Innovation?
AI thrives on data. The more, the better. Real-world, messy, diverse data is the fuel for smarter models. But UK GDPR, like its EU counterpart, prioritises citizen protection.

UK businesses are asking:
- Can we use personal data to train AI models?
- How do we justify historic data usage?
- How do we comply with purpose limitation and the right to be forgotten?
These questions aren’t just theoretical. They’re stopping projects, delaying pilots, and leaving AI innovation stuck in a “maybe later” limbo. The problem isn’t the rules themselves, it’s the uncertainty. No company wants to be the first to test the boundaries and risk hefty fines.
DUAA: The Clarity UK Businesses Have Been Waiting For?
While DUAA isn’t UK law, it matters for cross-border data and EU partnerships. Its promise:
- Greater data access for AI development
- Standardised frameworks for safe data sharing
- A clear signal that the EU wants AI innovation, but responsibly
Sounds ideal, but there’s a catch. UK businesses may now need to comply with both UK GDPR and DUAAwhen collaborating with EU partners. More rules could mean more complexity, not less. DUAA still demands consent, governance, and transparency, so uncertainty doesn’t disappear overnight.
The Opportunity for UK Businesses
The truth is, regulation isn’t the enemy, uncertainty is. UK companies that move fast are the ones building responsible AI foundations now, so they’re ready to scale once the rules are clear.
DUAA could help by:
- Providing clear cross-border data rules
- Offering practical guidance for AI model training
- Standardising data access agreements
If it succeeds, UK businesses can innovate confidently without constantly second-guessing compliance. If not, the fear of overstepping could keep AI projects in the slow lane and competitors abroad may pull ahead.
Where Trimontium Fits In
This is where Trimontium comes in. We help UK businesses navigate the tricky intersection of AI and regulation, so you can innovate without fear.
We guide organisations to:
- Interpret UK GDPR and EU regulations for AI projects
- Build data governance strategies that minimise compliance risk
- Unlock safe data sharing and AI training opportunities
The companies that thrive aren’t waiting for perfect clarity. They’re building compliant AI foundations now, ready to act fast when the rules align as they understand what the DUAA impact on AI is.
Bottom Line
UK businesses don’t need to choose between innovation and compliance. With the right strategy, you can do both. The AI future is moving fast, but with the right partner, UK companies can move faster.
Trimontium helps you stay ahead, navigate uncertainty, and turn AI opportunity into real-world results. Because in a world of ever-evolving regulation, confidence beats caution every time.
Author: Deborah Holmwood, Client Change & Transformation Partner.
Follow our LinkedIn company page to stay up to date with all our new blogs!

