On June 15, 2026, the UK government announced plans to introduce a social media ban for users under 16 (under-16s), alongside restrictions on features deemed harmful to minors, such as livestreaming and messaging functions, for a wider range of online services, including those in the gaming sector. These measures, which may require platforms active in the UK market to significantly alter their operations, are expected to come into force in Spring 2027.

Continue Reading UK Announces Social Media Ban and Broader Online Restrictions for Users Under 16

On April 15, 2026, the UK Competition and Markets Authority (CMA) issued a Final Infringement Notice to two major UK driving-school businesses owned by British motoring association, the AA. The notice—which was issued following a settlement with the AA—marks the CMA’s first direct enforcement action for a substantive breach of consumer law under the UK’s new enforcement regime. The investigation, opened in November 2025, concluded swiftly. The CMA ordered the AA to refund more than £760,000 (approximately $1 million) to its customers and pay a fine of £4.2 million (approximately $5.7 million) for “drip” pricing practices, representing the first use of the CMA’s new powers to impose direct fines and order consumer redress for breaches of UK consumer law.

Continue Reading CMA Drives On with New Consumer Protection Powers: CMA Secures Consumer Refunds and Issues Fines over Drip Pricing

On February 13, 2026, the UK Competition and Markets Authority (CMA) announced its (December 2025) decision to fine Euro Car Parks £473,000 (approximately $645,000) for failing to respond to an information notice issued under the Digital Markets Competition and Consumers Act (DMCCA).

Continue Reading Stay Within the Lines: UK CMA Fines Parking Company for Noncompliance with Information Notice on Consumer Protection

On February 5, 2026, key reforms to the UK’s data protection regime came into force, effectuating a departure from certain aspects of the EU regime and underscoring an emerging divergence between the UK and EU frameworks. These changes introduce new flexibility in areas such as cookie consent, automated decision-making (ADM) and processing of data for scientific research purposes, while raising the bar for compliance in areas such as the handling of data relating to minors.

Continue Reading Reforms to UK Data Protection and Privacy Laws Come into Force

Consumer protection in digital markets has become a major public concern in recent years, and the UK is the latest jurisdiction to introduce legislation aimed at enhancing protections online. The Digital Markets, Competition, and Consumers Act (DMCCA or the Act) introduces significant overhauls to the UK’s legal framework, with implications for businesses with online operations.

Continue Reading Consumer Protection in the UK: Update on Reforms Taking Effect in 2025 and 2026

On June 19, 2025, the UK Data (Use and Access) Act 2025 was enacted, marking the culmination of a lengthy legislative process aimed at reshaping aspects of the country’s data protection regime. First proposed in 2021 as part of a government strategy titled, “Data: a new direction,” the legislation has undergone several rounds of revision since its initial introduction. Its passage reflects the UK’s desire to diverge, in measured ways, from the EU’s approach to data regulation in the post-Brexit landscape.

Continue Reading UK Introduces New Legislation Amending Privacy Laws

On April 24, 2025, the UK’s Office of Communications, commonly known as Ofcom—the regulator responsible for enforcing the UK’s Online Safety Act (OSA)—issued its Protecting Children from Harm Online Statement. The statement requires online services to conduct and document a children’s risk assessment in accordance with the OSA by July 24, 2025. Services will be required to implement measures to protect children from content that is harmful to them by July 25, 2025.

Continue Reading The UK’s Online Child Safety Duties Are Coming into Force: Steps to Take Now