The Regulations formally commenced most of Part 2 of the Data (Use and Access) Act 2025, establishing the framework for digital verification services, effective 1st December 2025.

These Regulations officially bring into force key provisions of the Data (Use and Access) Act 2025 related to digital verification services across the United Kingdom, setting the commencement date for most of Part 2, excluding sections 45 to 48 which cover public authority information sharing, to 1st December 2025, exercising powers granted under section 142(1) of the same Act.

The regulations specified the threshold figure for Online Safety Act 2023 fees as £250 million, effective for the charging year commencing April 1, 2026, and extended across the UK.

These Regulations, made by the Secretary of State following advice from Ofcom under the powers granted by the Online Safety Act 2023, establish the "threshold figure" at £250 million.

This figure determines which providers of regulated online services must notify Ofcom and pay fees to cover the regulator's online safety functions, with the threshold taking effect from the charging year beginning on 1st April 2026.

The Order amended the Regulated Activities Order to replace existing investment firm exemption criteria with options based on FCA-defined ancillary activity rules or annual thresholds, while also executing consequential updates following the revocation of an EU delegated regulation.

The Treasury enacted this Order using powers under the Financial Services and Markets Act 2000 to amend the Regulated Activities Order 2001, primarily by revising the exclusion criteria for firms dealing in commodity derivatives, emission allowances, and derivatives from the definition of an "investment firm." The amendment introduces the option for exclusion based on activities being ancillary to the firm's main business (assessed on a group basis) or falling below an annually determined threshold set by the Financial Conduct Authority (FCA), with the FCA granted rule-making powers to specify these conditions.

The Order also makes consequential amendments necessitated by the revocation of Commission Delegated Regulation (EU) 2017/592, establishing commencement dates across late 2025 and early 2027.

OFCOM amended core conditions governing the transfer of mobile spectrum licences by removing instalment payment prerequisites and updating references to current licence charge regulations.

The Office of Communications (OFCOM) enacted these Regulations under the authority of the Wireless Telegraphy Act 2006 to amend the 2011 Mobile Spectrum Trading Regulations, specifically modifying Regulation 6 which defines circumstances where a transfer of licence rights and obligations is not authorized.

The primary changes involve removing the requirement that all instalment payments towards a licence charge must be paid before a transfer can occur, and updating the references within the regulation concerning outstanding sums payable under the 900 MHz, 1800 MHz, and 2100 MHz frequency band licence charge regulations to reflect the current 2025 legislation.

The legislation amended retained EU aviation safety law by updating rules on continuing airworthiness, maintenance organization requirements, and licensing examination timelines.

The Aviation Safety (Amendment) Regulations 2025 enact changes to UK retained EU aviation safety legislation, primarily by amending Commission Regulations (EU) No 1321/2014 and 2018/1139.

These amendments focus on correcting cross-references and terminology within continuing airworthiness (Part-M), maintenance standards (Part-145), and maintenance licensing (Part-66 Appendix 8).

Key changes include updating rules for maintenance data access, refining conditions for acceptable component release documentation (like substituting Form 1 with a 'declaration of maintenance accomplished'), clarifying record-keeping mandates for maintenance organisations, and adjusting rules for re-taking Category L aircraft maintenance licence examinations.

The Regulations specified the public bodies now recognized as 'qualifying competent authorities' permitted to engage in joint, national security-related personal data processing with UK intelligence services under the Data Protection Act 2018.

These Regulations, made by the Secretary of State under the Data Protection Act 2018 (DPA), specify which public bodies qualify as 'qualifying competent authorities' to engage in joint processing of personal data with intelligence services under Part 4 of the DPA, a power enabled by the Data (Use and Access) Act to assist in safeguarding national security; the instrument lists various government departments, police forces, customs, and judicial/monitoring bodies as qualifying authorities, citing consultation with the Information Commissioner and Parliamentary approval, and stipulates that the regulations come into force twenty-one days after being made and extend across the UK.

The Regulations set 18th November 2025 as the commencement date for several sections of the Economic Crime and Corporate Transparency Act 2023 related to identity verification, director conduct, and notification duties, while implementing transitional provisions for existing directors and Persons with Significant Control.

These Regulations bring into force specific parts of the Economic Crime and Corporate Transparency Act 2023 concerning corporate governance, director duties, and the regime for People with Significant Control (PSCs), setting the main commencement date for these provisions as 18th November 2025.

Furthermore, the Regulations establish detailed transitional rules, particularly regarding the verification of identity for directors already in office before the commencement date and for existing registrable persons, specifying staggered deadlines based on birth month or existing notification statuses.

Mandated compliance with UN Regulations 155 (Cyber Security) and 156 (Software Updates) for GB type-approval by amending key vehicle approval legislation and setting implementation deadlines.

These Regulations, made by the Secretary of State for Transport under powers derived from Regulation (EU) 2018/858, introduce mandatory compliance with UNECE Regulations No. 155 (concerning cyber security and cyber security management systems) and No. 156 (concerning software updates and software update management systems) for vehicles seeking Great Britain (GB) type-approval.

The amendments update Annexes II, IV, and XII of Regulation (EU) 2018/858 to incorporate these UN requirements and specify implementation deadlines, and also amend Implementing Regulation (EU) 2020/683 to update the associated information documentation and certificates of conformity templates.

The Regulations come into force on 13th November 2025 and extend across England, Wales, Scotland, and Northern Ireland.