BNPL Regulation: What FCA Authorisation Means for BNPL Operators
From 15 July 2026, BNPL firms must hold FCA authorisation or rely on the Temporary Permissions Regime. What PS26/1 and SI 2025/859 require now.
-
-
Ofcom Copper Retirement: What the Three-Stage Framework Means for Operators
Ofcom confirmed its three-stage copper retirement framework in the TAR 2026-31. The second threshold consultation closes 12 May 2026. What operators and wholesale access purchasers need to know about the stop sell, charge control removal and full copper withdrawal timeline.
-
Automated Decision-Making After the DUAA: What the New UK Regime Means for AI-Enabled Products
The DUAA replaces Article 22 UK GDPR with a new ADM regime effective 5 February 2026. The default shifts from prohibition to permission with safeguards. The ICO consultation on draft ADM guidance closes 29 May 2026.
-
FCA Safeguarding Rules 2026: A Compliance Checklist for 7 May
The FCA supplementary safeguarding regime under CASS 15 takes effect on 7 May 2026. This compliance checklist covers the operational requirements for payment institutions and e-money institutions: daily reconciliation, monthly reporting, annual audit, resolution packs and third-party due diligence.
-
PSR/FCA Consolidation: What Changes for Payment Firms and Scheme Participants
The PSR FCA consolidation transfers all PSR functions to the FCA. What changes for payment service providers, scheme participants, and payment system operators.
-
Data Protection Complaints: What Controllers Must Do by 19 June 2026
Section 103 of the DUAA introduces a statutory data protection complaints process for all controllers from 19 June 2026. For telecoms operators and payment firms, the obligation overlaps with existing Ofcom and FCA complaints regimes.
-
Does Your Regulated Business Need a Fractional General Counsel?
Three models for legal support compared. When a fractional general counsel is the right answer for telecoms, fintech and data businesses in the regulatory perimeter.
-
What Does the CMA Do? A Guide to the UK’s Competition Regulator
The CMA enforces UK competition law, controls mergers, investigates markets and regulates digital platforms. Guide to CMA powers, penalties and the new SMS regime.
-
What Do the FCA and PSR Regulate? A Guide to UK Payments Regulation
The FCA and PSR regulate UK payment services, payment systems and electronic money. Guide to authorisation, enforcement powers and the PSR consolidation.
-
What Does the ICO Regulate? A Guide to the UK’s Data Protection Regulator
The ICO regulates UK data protection, freedom of information, electronic marketing and network security. Guide to ICO powers, penalties and enforcement under the DUAA 2025.
-
What Does Ofcom Regulate? A Guide to the UK Communications Regulator
Ofcom regulates telecoms, broadcasting, postal services, spectrum and online safety in the UK. This guide explains what Ofcom does, its enforcement powers, and what the obligations mean for operators and platform businesses.
-
Data Protection | EU | UK
Recognised Legitimate Interests: The UK Parts Ways with the EU on the Balancing Test
The DUAA 2025 introduces recognised legitimate interests as a new UK GDPR lawful basis. Analysis of the five Annex 1 purposes, the distinction from standard legitimate interests, UK/EU divergence, and commercial implications for data-driven businesses.
