This Practice Note sets out the UK’s regulatory framework for electronic communications, also known as telecommunications (telecoms), addressing the question of which services are regulated and, if so, what regulation applies. In the UK, the regulatory regime is primarily based on the Communications Act 2003 (CA 2003), the Wireless Telegraphy Act 2006 (WTA 2006), Ofcom’s General Conditions of Entitlement (General Conditions), and Ofcom’s associated regulatory functions and powers. This Practice Note sets out these key elements of regulation and explains how and when they apply. Other regulatory regimes may impact the telecoms industry, including general consumer and competition law regulation. However, the focus of this Practice Note is the telecoms regulatory regime. For general guidance on other regimes mentioned above, see: • UK competition regime—overview • Data protection regime—overview • Cybersecurity, threats and risk management—overview • Consumer remedies and enforcement—overview Summary of the regulatory framework CA 2003 implemented in the UK several EU laws which were designed to harmonise telecoms regulation across the EU. It also acts as the source for

This week's edition of Risk & Compliance weekly highlights includes: the new Risk & Compliance forecast, the latest sanctions news, the launch of a bribery investigation into defence firm Thales by the SFO and INTERPOL’s successful global operation against financial cybercrime.

This week's edition of Practice Compliance weekly highlights includes: a News Analysis on EU AML enforcement, a Spotlight on Corruption report on ongoing deficiencies in legal sector AML compliance, an update on the UK Data (Use and Access) Bill, updated EC model clauses for AI procurement, details of a pilot for a new Cyber Governance Code of Practice, and an LSB consultation on strengthening lawyers’ ethical standards regulation.

This Practice Note identifies key forthcoming or proposed regulatory or legislative changes affecting risk and compliance professionals as at 14 December 2021. It is intended to allow you to plan ahead. Whenever a regulatory or legislative change occurs we will report it via our news updating service. We will also ensure we provide relevant guidance and, if necessary, amend or draft new Precedents. Compliance forecast key dates 2021–2022 When? What? Will I have to do something? 2021 UK government’s revised Modern Slavery Act 2015 statutory guidance expected to be published (originally expected before the end of 2020)—see: Modern slavery Yes December 2021 Government public consultation to enhance how online advertising is regulated, including possible further regulation to tackle misleading or fake advertising due—see: Anti-money laundering and counter-terrorist financing For information Sometime in 2022 Law Commission’s ‘options paper’ on failure to prevent offences expected to be provided to the Government—see: Other financial and corporate crime For information 10 January 2022 ICO consultation on draft journalism code of practice closes—see:

This Practice Note tracks key legislative and regulatory developments, government initiatives and strategies, and consultations relating to the use of artificial intelligence (AI) in life sciences and digital health in the UK. The rapid development of AI in life sciences and digital health has drawn attention on its potential to transform research, innovation and patient care, while also raising complex regulatory challenges. In the UK, AI intersects with a range of existing legal and regulatory regimes, most notably the Medical Devices Regulations 2002 (MDR 2002), SI 2002/618 (as amended). The UK Medicines and Healthcare products Regulatory Agency (MHRA) is currently progressing a package of reforms to the UK medical device framework, with important implications for AI and digital health, particularly in relation to Software as Medical Device (SaMD), AI as Medical Device (AIaMD) and cybersecurity requirements (see News Analyses: Life Sciences UK—key developments in 2025 and horizon scanning for 2026—AI and digital health, UK medical devices regulatory reform—where are we now and what’s next for 2025?, A closer look at MHRA’s proposals

This tracker sets out key dates and information relating to the development of automated (or autonomous) and driverless vehicles in the EU, including consultations, legislative changes, related guidance and announcements. For more information on the key EU legal issues raised by the development and use of automated vehicles in the EU, see Practice Notes: Automated vehicles—key legal issues in the EU and Automated vehicles—data, privacy and cybersecurity issues in the EU. To track the progress on EU rules for access to vehicle data, see Practice Note: EU data initiatives—tracker. To follow UK developments, see: UK automated vehicles—tracker. 2025 Date Type of development Summary 12 September 2025 Guidelines The Commission has published guidance explaining how automotive sector stakeholders should implement Chapter II of the EU Data Act regarding vehicle data sharing. The guidance provides specific implementation advice for original equipment manufacturers, suppliers, aftermarket service providers and insurance providers. The guidance clarifies data access rules and obligations under the EU Data Act, focusing exclusively on the automotive sector's requirements for vehicle data handling.See: LNB News 12/09/2025

This Checklist identifies key legal and compliance issues for digital commerce websites. It covers business-to-business (B2B) and business-to-consumer (B2C) website terms, privacy notices, cookies, ordering processes, consumer contracts, terms of sale, online platforms, payments, advertising, data protection, direct marketing, accessibility, cybersecurity, brand protection and cross-border trading. This Checklist does not consider matters that are generally applicable to all businesses (eg compliance with general data protection record keeping obligations, health and safety, employment law, taxation and so on). For further guidance on digital commerce, see Practice Notes: • Digital commerce—introduction • Business-to-business digital commerce—forming contracts online • Business-to-business digital commerce—compliance and regulation • Business-to-consumer digital commerce—forming contracts online • Business-to-consumer digital commerce—compliance and regulation • Digital commerce—website terms, policies and notices Website terms and information Issue Summary Further resources Terms of use (of the website) It is advisable to include terms which set out the basis on which the website is provided and may be used. Key terms often include disclaimers, key information and contact details, user responsibilities and IP rights, among others. See

This week's edition of Risk and Compliance weekly highlights includes the new requirements for handling data protection complaints under the Data (Use and Access) Act 2025, which are now in force, the latest sanctions developments, including OFSI’s largest Russia sanctions penalty to date, the government’s response to its AML/CTF supervision reform consultation and FATF’s updates to its AML/CFT grey and black lists. We also examine where the new corporate criminal liability regime under the Crime and Policing Act 2026 is likely to have its greatest enforcement impact and the compliance and governance changes organisations should make.

This week's edition of Practice Compliance weekly highlights includes new Law Society guidance on non‑solicitors carrying out litigation work following Mazur, analysis of changes to UK money laundering due diligence rules, the SFO’s 2026–27 Business Plan, a government warning on rising AI‑driven cyber threats, DSIT’s launch of a voluntary Cyber Resilience Pledge for organisations, the EU’s adoption of a new directive introducing a harmonised criminal law framework to combat corruption and the launch of refreshed horizon scanning and tracking tools for compliance professionals.

This week's edition of Practice Compliance weekly highlights includes: the latest sanctions news, publication of the National Economic Crime Centre (NECC) annual report for 2023–2024, a MoU for collaboration on cyber security improvement, signed by the NCA and ICO, and government statements on the implementation of DMCCA 2024.

This week's edition of EU Law weekly highlights includes an overview of key EU developments in 2024 and what legislative and policy measures we’re expecting to see in 2025. These highlights also cover the publication of the EU Cyber Solidarity Act and the EU Packaging Regulation in the Official Journal, the publication of two new pieces of guidance by the European Data Protection Board on data protection and competition law interplay and on pseudonymisation for public consultation, a call for evidence on a European Oceans Pact, the Council of the EU’s adoption of the European Health Data Space Regulation, and the integration of a revised Code of conduct on countering illegal hate speech online into the EU Digital Services Act framework. In addition, these highlights include analyses of whether the EU Minimum Wage Directive lacks legal footing, how the Listing Act will impact EU capital markets, a Court of Justice ruling extending the definition of the concept of ‘producer’ under the EU Product Liability Directive, and how AI’s ‘intended purpose’ could define companies’ regulatory burden.

This week's edition of Risk & Compliance weekly highlights includes: approval of certification criteria for EU Data Protection Seal under EU GDPR by the European Data Protection Board (EDPB), the latest sanctions news, guidance on the ‘failure to prevent fraud’ offence giving nine months for companies to get their house in order, and the NCSC annual review warning of escalating cyber threats and calling for increased vigilance.