PECR 2003 reform—rules relating to electronic marketing and cookies in the UK
Commercial analysis: The Data (Use and Access) Act (DUAA 2025) that received Royal Assent in June 2025 is bringing several changes to the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR 2003), SI 2003/2426, in relation to fines, cookies, and breach notification timeframes, as well as the addition of the definition of direct marketing brought over from DPA 2018. Oliver Yaros and Ana Hadnes Bruder, partners, Reece Randall, Ellen Hepworth, Alasdair Maher and Katie Steval, associates, and Laura Taylor, trainee, of Mayer Brown International LLP, review these changes.