AI voice agents in the United Kingdom: PECR, the TPS and the DUA Act fines

Market shape

A UK dental practice, letting agent or heating engineer searches for an AI receptionist or AI call answering. A bank, insurer or utility talks about conversational AI for the contact centre or voice agents. Both groups buy in a market with three features that differ from the United States. First, the rules for automated marketing calls are stricter and simpler: specific prior consent, full stop. Second, the fine ceiling for breaking them changed in 2026 from GBP 500,000 to the UK GDPR level, which has moved outbound voice agents from a marketing decision to a board-level one. Third, UK buyers lean on CLI and numbering rules that make a withheld or foreign-looking number a dead campaign.

No analyst publishes a credible UK-only market size. MarketsandMarkets estimates Europe as a whole at USD 510 million in 2025 rising to USD 6.0 billion by 2032 (report page as retrieved 1 October 2026); treat it as a direction, not a budget line.

Regulatory quick card

The compliance matrix row is uk. The rule as published, informational rather than advice:

• Automated calls (PECR Regulation 19). The ICO's guidance says you must not make an automated marketing call unless the person has specifically consented to receive that type of call from you. General marketing consent is not enough. The ICO treats conversational AI voice calls as automated calls, so an agent-initiated marketing call sits here, not under the live-call rules.
• Live calls (Regulation 21). Unsolicited live marketing calls may not be made to numbers on the Telephone Preference Service or Corporate TPS without consent, nor to anyone who has objected. Callers must identify themselves and give contact details on request.
• Identification. All marketing calls must display a number. Automated calls must state the caller's name and a contact address or freephone number in the message itself.
• Fines. The Data (Use and Access) Act 2025 (Royal Assent 19 June 2025) aligned PECR enforcement with UK GDPR: up to GBP 17.5 million or 4 percent of global annual turnover, whichever is higher, replacing the GBP 500,000 cap. Law-firm summaries report the new powers apply to conduct after 5 February 2026. The Act also replaces the ICO with an Information Commission; the consolidated statute shows that substitution taking effect from 30 September 2026.
• Recording. Recording is processing of personal data under UK GDPR. Tell callers at the start and document the lawful basis. FCA-regulated firms have additional recording duties.
• AI disclosure. No statute mandates announcing an AI caller; PECR identification duties and UK GDPR transparency apply. Disclose by default.
• Calling hours. No statutory window in PECR; Ofcom and industry codes expect reasonable hours and honouring do-not-call-again requests.

Watch item: the ICO's telephone marketing guidance carries a notice that it is under review following the Act.

Telephony and numbering

Agents reach the PSTN through fixed and mobile operators, SIP trunk providers or CPaaS, or through a CCaaS platform's bundled telephony. The numbering plan matters more than in most markets because callers read meaning into it. 01 and 02 are geographic. 03 numbers are national, charged to the caller at geographic rate, and may not share revenue with the called party, which is why banks, insurers and public bodies use them. 080 is free to call. 084 and 087 carry a service charge on top of the caller's access charge. 09 is premium rate.

Ofcom's General Condition C6 requires that CLI data presented with a call includes a valid, dialable number that uniquely identifies the caller, and requires providers, where technically feasible, to identify and block calls whose CLI is invalid or non-dialable. Updated CLI guidance was published on 29 July 2024 and applies from 29 January 2025. For a buyer: present a geographic or 03 number you own, make sure it answers when rung back, and confirm that the number is not being rotated from a pool. The ICO's rules then add their own identification duty on top.

Language and accent gates

English, but not one English. Scottish, Northern Irish, Welsh and northern English accents are the usual demo gates, followed by postcode read-back (letters and digits mixed, with a space), day-first dates, and surnames. Bring recorded callers from your own customer base. A vendor demo recorded in a London office tells you nothing about a Glasgow collections call.

Data residency and hosting

UK GDPR permits transfers outside the United Kingdom only with an adequacy decision or appropriate safeguards. UK hosting is a frequent procurement condition rather than a legal one, and the deciding document is the sub-processor list across telephony, speech recognition, language model and voice synthesis. FCA-regulated buyers add outsourcing and operational-resilience duties. Ask for the hosting region, the retention period for recordings and transcripts, and a no-training clause.

Buyer landscape

Collections and insurance lead among regulated buyers because they already record every call and already run under conduct rules; the agent inherits a compliance framework rather than creating one. Dental and private healthcare, home services and law firms lead among small businesses, where the trigger is a counted week of missed calls. Public-sector buyers are present but procure slowly and specify UK hosting without exception.

Vendor landscape

The vendor list in this page's data is alphabetical and typed, not ranked. Global platforms sell the agent builder with the voice stack included or pluggable; CCaaS incumbents sell the agent as a feature of a contact centre you may already run; infrastructure vendors supply the numbers, SIP trunks and components the others build on. Fifteen names appear; any of them can pass or fail your demo. The acceptance test is a booking, a payment arrangement or a case note landing in your own system during the call, with a Regulation 19 consent record behind every outbound dial.

Questions to ask vendors in this market

The six questions in this page's data, in order: whether your outbound marketing calls are treated as Regulation 19 automated calls and how specific consent is checked before each dial; how and how often lists are screened against TPS and CTPS; what CLI is presented and what happens on ring-back; what the agent says in the first turn about recording and automation; where audio is processed and which sub-processors sit outside the UK; and the all-in cost per connected minute in sterling.