The ICO has consulted on draft enforcement procedural guidance introducing a formal settlement procedure with penalty discounts of up to 40%, compulsory interview powers and approved person reports under the DUAA 2025.
Rob Bratby, Managing Partner | Last updated: March 2026 Ofcom has authorised satellite direct to device services in UK mobile spectrum bands for the first time. The Wireless Telegraphy (Direct to Device Satellite Communications) (Exemption) Regulations 2026, which came into force on 25 February 2026, exempt handsets and SIM-enabled devices from the licensing requirement under…
Rob Bratby, Managing Partner | Last updated: March 2026 Agentic AI payments are about to become a regulatory priority. The FCA published its 2026 Payments Regulatory Priorities Report on 25 March 2026, signalling that it may rewrite UK payments regulation to accommodate autonomous AI agents. The report confirms the FCA will consider whether changes to…
FCA safeguarding reform is now weeks away from taking effect. The FCA published its Payments Regulatory Priorities report on 25 March 2026, confirming that keeping customers’ money safe remains its primary concern for the payments sector. The message to payment institutions and electronic money institutions is direct: the Safeguarding Supplementary Regime takes effect on 7…
On 26 February 2026, the Payments Vision Delivery Committee published the Payments Forward Plan, the first coordinated regulatory roadmap for UK payments since the National Payments Vision in November 2024. The Plan sets out what the Bank of England, the FCA, the PSR and HM Treasury intend to do across retail payments, wholesale payments and…
Copyright and AI policy in the UK reached a turning point on 18 March 2026, when the government published its Report on Copyright and Artificial Intelligence, together with an economic impact assessment. Both were required by sections 135 to 137 of the Data (Use and Access) Act 2025. The report confirms what the UK’s creative…
On 19 March 2026, the Court of Justice of the European Union handed down its judgment in Case C-526/24 Brillen Rottler, ruling that even a first-ever data subject access request can be refused as “excessive” under Article 12(5) of the GDPR where the controller demonstrates it was made with abusive intent. The decision matters because…
Ofcom’s Plan of Work 2026/27 shapes telecoms investment, altnet consolidation and compliance. Analysis of what it means for operators and dealmakers.
The Nexfibre-Netomnia deal, the government Statement of Strategic Priorities and Ofcom Telecoms Access Review 2026-31 together set the framework for UK fibre infrastructure transactions. What advisors and investors need to know about deal structuring in a consolidating market.
The Data (Use and Access) Act 2025 commenced on 5 February 2026, reforming automated decision-making, expanding ICO enforcement powers, and raising PECR fines to UK GDPR levels. Combined with record enforcement activity in 2025 and a new settlement procedure, the ICO is better equipped and more willing to act. What regulated businesses need to do now.
The EU agreed PSD3 and the Payment Services Regulation in November 2025, overhauling fraud liability, open banking and e-money rules. The UK is not bound by PSD3, but its own payments reform is heading in a similar direction. What firms operating across both regimes need to know.
Ofcom published its Telecoms Access Review 2026-31 on 17 March 2026.