Technology Legislation
Regulations governing digital technology, cybersecurity, data protection, and technological innovation.
The Data (Use and Access) Act 2025 (Commencement No. 4) Regulations 2025
These Regulations officially bring into force key provisions of the Data (Use and Access) Act 2025 related to digital verification services across the United Kingdom, setting the commencement date for most of Part 2, excluding sections 45 to 48 which cover public authority information sharing, to 1st December 2025, exercising powers granted under section 142(1) of the same Act.
The Online Safety Act 2023 (Fees) (Threshold Figure) Regulations 2025
These Regulations, made by the Secretary of State following advice from Ofcom under the powers granted by the Online Safety Act 2023, establish the "threshold figure" at £250 million.
This figure determines which providers of regulated online services must notify Ofcom and pay fees to cover the regulator's online safety functions, with the threshold taking effect from the charging year beginning on 1st April 2026.
The Financial Services and Markets Act 2000 (Regulated Activities) (Amendment) Order 2025
The Treasury enacted this Order using powers under the Financial Services and Markets Act 2000 to amend the Regulated Activities Order 2001, primarily by revising the exclusion criteria for firms dealing in commodity derivatives, emission allowances, and derivatives from the definition of an "investment firm." The amendment introduces the option for exclusion based on activities being ancillary to the firm's main business (assessed on a group basis) or falling below an annually determined threshold set by the Financial Conduct Authority (FCA), with the FCA granted rule-making powers to specify these conditions.
The Order also makes consequential amendments necessitated by the revocation of Commission Delegated Regulation (EU) 2017/592, establishing commencement dates across late 2025 and early 2027.
The Wireless Telegraphy (Mobile Spectrum Trading) (Amendment) (No. 2) Regulations 2025
The Office of Communications (OFCOM) enacted these Regulations under the authority of the Wireless Telegraphy Act 2006 to amend the 2011 Mobile Spectrum Trading Regulations, specifically modifying Regulation 6 which defines circumstances where a transfer of licence rights and obligations is not authorized.
The primary changes involve removing the requirement that all instalment payments towards a licence charge must be paid before a transfer can occur, and updating the references within the regulation concerning outstanding sums payable under the 900 MHz, 1800 MHz, and 2100 MHz frequency band licence charge regulations to reflect the current 2025 legislation.
The Aviation Safety (Amendment) Regulations 2025
The Aviation Safety (Amendment) Regulations 2025 enact changes to UK retained EU aviation safety legislation, primarily by amending Commission Regulations (EU) No 1321/2014 and 2018/1139.
These amendments focus on correcting cross-references and terminology within continuing airworthiness (Part-M), maintenance standards (Part-145), and maintenance licensing (Part-66 Appendix 8).
Key changes include updating rules for maintenance data access, refining conditions for acceptable component release documentation (like substituting Form 1 with a 'declaration of maintenance accomplished'), clarifying record-keeping mandates for maintenance organisations, and adjusting rules for re-taking Category L aircraft maintenance licence examinations.
The Data Protection Act 2018 (Qualifying Competent Authorities) Regulations 2025
These Regulations, made by the Secretary of State under the Data Protection Act 2018 (DPA), specify which public bodies qualify as 'qualifying competent authorities' to engage in joint processing of personal data with intelligence services under Part 4 of the DPA, a power enabled by the Data (Use and Access) Act to assist in safeguarding national security; the instrument lists various government departments, police forces, customs, and judicial/monitoring bodies as qualifying authorities, citing consultation with the Information Commissioner and Parliamentary approval, and stipulates that the regulations come into force twenty-one days after being made and extend across the UK.
The Economic Crime and Corporate Transparency Act 2023 (Commencement No. 6 and Transitional Provisions) Regulations 2025
These Regulations bring into force specific parts of the Economic Crime and Corporate Transparency Act 2023 concerning corporate governance, director duties, and the regime for People with Significant Control (PSCs), setting the main commencement date for these provisions as 18th November 2025.
Furthermore, the Regulations establish detailed transitional rules, particularly regarding the verification of identity for directors already in office before the commencement date and for existing registrable persons, specifying staggered deadlines based on birth month or existing notification statuses.
The Road Vehicles (Type-Approval) (Amendment) (No. 3) Regulations 2025
These Regulations, made by the Secretary of State for Transport under powers derived from Regulation (EU) 2018/858, introduce mandatory compliance with UNECE Regulations No. 155 (concerning cyber security and cyber security management systems) and No. 156 (concerning software updates and software update management systems) for vehicles seeking Great Britain (GB) type-approval.
The amendments update Annexes II, IV, and XII of Regulation (EU) 2018/858 to incorporate these UN requirements and specify implementation deadlines, and also amend Implementing Regulation (EU) 2020/683 to update the associated information documentation and certificates of conformity templates.
The Regulations come into force on 13th November 2025 and extend across England, Wales, Scotland, and Northern Ireland.