Reduced the maximum wholesale roaming charges for calls, texts, and data services in EEA EFTA countries.

These Regulations lower the maximum wholesale rates that mobile service providers may charge each other for roaming services in specific territories covered by the UK-EEA EFTA Free Trade Agreement.

The order reduces the price caps for making telephone calls and sending SMS messages, and establishes a two-stage reduction for data transmission charges.

These changes apply to mobile network operators providing roaming services under the international agreement between the UK, Iceland, Liechtenstein, and Norway.

Revoked the 2010 Order that directed OFCOM to manage wireless spectrum licenses and auctions.

This Order revokes the Wireless Telegraphy Act 2006 (Directions to OFCOM) Order 2010, effectively ending the specific legal directions previously issued by the Secretary of State to the Office of Communications (OFCOM).

It applies to the UK's telecommunications regulator, removing mandated requirements to vary wireless telegraphy licences, amend spectrum trading and charging regulations, and set specific auction rules for electromagnetic spectrum.

The revocation reflects the government's position that the 2010 mandates, which aimed to facilitate the deployment of mobile broadband, have been fully implemented and are no longer necessary.

The Regulations mandated the Information Commissioner to create a data protection code of practice for AI and automated decision-making, while simultaneously excluding national security considerations from the oversight panel's review.

These 2026 Regulations require the Secretary of State to direct the Information Commissioner to prepare an official code of practice offering guidance on good practice for processing personal data when developing and using artificial intelligence and automated decision-making systems, specifically including provisions for children's data.

Furthermore, the regulations modify existing law by ensuring that any advisory panel considering the code must exempt aspects related to national security from their review process.

Revoked regulatory exemptions and legal protections previously granted to EEA-based online service providers under retained EU law.

These Regulations repeal provisions related to the Country of Origin Principle (CoOP) previously established under the EU e-Commerce Directive. They remove exemptions that protected European Economic Area (EEA) based information society service providers from certain UK market access regulations and restricted the prosecution of such providers for specific criminal offences, including those under the Terrorism Act 2006 and laws regarding extreme pornography.

The instrument applies to the Secretary of State and affects EEA-based digital service providers active in the UK market.

The Regulations added offences related to encouraging serious self-harm and specific digital sexual offences to Schedule 7 of the Online Safety Act 2023 and revoked the 2024 amending regulations.

These Regulations amend Schedule 7 of the Online Safety Act 2023 by designating specific criminal acts as 'priority offences,' which imposes specific duties on online service providers to tackle content related to these crimes.

Specifically, the Regulations introduce an offence concerning encouraging or assisting serious self-harm and update provisions regarding offences under the Sexual Offences Act 2003 related to sharing intimate images, having been approved by Parliament and extending across the UK. The legal instrument also revokes the previous related amendment regulations from 2024.

The Regulations amended numerous secondary legal instruments to align with the Data (Use and Access) Act 2025, repealed a section of the Data Protection Act 2018 concerning recordable offences, and updated electoral and company disclosure rules concerning data processing safeguards.

These Regulations finalize the transition following the enactment of the Data (Use and Access) Act 2025 by making necessary consequential amendments across various pieces of UK legislation.

Key actions include repealing a section of the Data Protection Act 2018 concerning recordable offences while simultaneously updating regulations to ensure the new offence of making false statements in response to an interview notice becomes recordable, and revising numerous electoral and company disclosure rules to align references from the UK GDPR concerning data processing for research and archiving purposes (replacing references to Article 89 with Article 84A).

The regulations brought into force sections 61 to 64 of the Product Security and Telecommunications Infrastructure Act 2022 on April 7, 2026, and established saving and transitional measures for existing tenancies conferring code rights in England, Wales, and Northern Ireland.

These Regulations, made under the Product Security and Telecommunications Infrastructure Act 2022 (PSTI Act 2022), set the commencement date of April 7, 2026, for sections 61 through 64 of the 2022 Act, which concern rent determination and compensation related to conferring code rights for electronic communications apparatus under tenancies in England, Wales, and Northern Ireland.

The document also introduces saving and transitional provisions to ensure a smooth transition, specifying how existing tenancy continuation notices served prior to the commencement date, and interim rent calculations spanning the commencement date, are to be handled under the previous legal frameworks.

The Regulations amended the 2023 Regulations to introduce deemed compliance pathways based on the Japan JC-STAR STAR-1 and Singapore Cybersecurity Labelling Scheme for product security and statements of compliance.

These Regulations amend the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 by introducing provisions that allow manufacturers of relevant connectable products to be treated as complying with UK product security requirements and the obligation to provide a statement of compliance if they meet specific criteria linked to existing cybersecurity labelling schemes from Japan (JC-STAR STAR-1) and Singapore.