Consumer protection—risk management review
Consumer protection—risk management review

The following Commercial guidance note provides comprehensive and up to date legal information covering:

  • Consumer protection—risk management review
  • Introduction
  • Risk review

Brexit: As of exit day (11pm on 31 January 2020) the UK is no longer an EU Member State. However, in accordance with the Withdrawal Agreement, the UK has entered an implementation period, during which it continues to be subject to EU law. This has an impact on this Practice Note. For further guidance, see Brexit Bulletin—key updates, research tips and resources and Brexit toolkit.

This Practice Note is intended to assist in the assessment of risk related to consumer protection issues. It aims to provide a step-by-step guide to the various tasks to be undertaken in a consumer protection legal risk assessment, solutions to help reduce risk, and a means of reporting to the board or risk management colleagues on the legal risks, how they have been addressed or what measures have been put in place for others in the business to address them.


Organisations that provide goods, services or digital content to consumers must ensure that their standard form consumer contracts and every part of their commercial activity comply with consumer law and practice. Failure to comply may lead to unenforceable contracts, claims by consumers, actions by enforcement bodies or, in some instances, can lead to prosecution of both senior employees and their corporate employers.

Consequently, it is vital that organisations have systems and procedures in place to