Frank Vitetta | UK tech regulation and responsible AI

# frankvitetta.org > UK technology regulation and security guidance in plain English, from an AI consultant who helps UK small businesses adopt AI responsibly. This is the personal site of Frank Vitetta, an AI consultant for UK small and medium businesses based in London. Every article cites its sources at the end. Contact is through the form at https://frankvitetta.org/contact/. ## Journal - [Online Safety Act: is your firm in scope?](https://frankvitetta.org/journal/online-safety-act-is-your-business-in-scope/): Who the Online Safety Act covers, which website features are exempt, what Ofcom has required so far and where UK businesses can find the official tools. - [Passkeys: what the NCSC now advises](https://frankvitetta.org/journal/passkeys-ncsc-advice-small-business/): In April 2026 the NCSC made passkeys its first choice for logins. What it said, what Microsoft, Apple and Google offer and steps for a small UK business. - [Data (Use and Access) Act: what changed](https://frankvitetta.org/journal/data-use-and-access-act-2025-what-changed/): The ICO says all data protection provisions of the Data (Use and Access) Act 2025 are in force. What changed and the one duty most UK firms must act on. - [AI search in the UK cites global sites](https://frankvitetta.org/journal/ai-search-uk-citations-british-business/): Only 30.7% of citations in UK AI answers go to UK sites. British newspapers barely register. What a UK small business can do about it. ## Pages - [Home](https://frankvitetta.org/): UK technology regulation and security guidance in plain English, from an AI consultant who helps UK small businesses adopt AI responsibly. - [AI Consultant for UK Small Businesses](https://frankvitetta.org/advisory/): AI consultant for UK small businesses. AI readiness and governance reviews, implementation with guardrails and staff training. Not legal advice. - [Contact](https://frankvitetta.org/contact/): Write to Frank Vitetta about AI consultancy for your business