Technology Legislation

Regulations governing digital technology, cybersecurity, data protection, and technological innovation.

The Data Protection Act 2018 (Qualifying Competent Authorities) Regulations 2025

These Regulations, made by the Secretary of State under the Data Protection Act 2018 (DPA), specify which public bodies qualify as 'qualifying competent authorities' to engage in joint processing of personal data with intelligence services under Part 4 of the DPA, a power enabled by the Data (Use and Access) Act to assist in safeguarding national security; the instrument lists various government departments, police forces, customs, and judicial/monitoring bodies as qualifying authorities, citing consultation with the Information Commissioner and Parliamentary approval, and stipulates that the regulations come into force twenty-one days after being made and extend across the UK.

The Economic Crime and Corporate Transparency Act 2023 (Commencement No. 6 and Transitional Provisions) Regulations 2025

These Regulations bring into force specific parts of the Economic Crime and Corporate Transparency Act 2023 concerning corporate governance, director duties, and the regime for People with Significant Control (PSCs), setting the main commencement date for these provisions as 18th November 2025.

Furthermore, the Regulations establish detailed transitional rules, particularly regarding the verification of identity for directors already in office before the commencement date and for existing registrable persons, specifying staggered deadlines based on birth month or existing notification statuses.

The Road Vehicles (Type-Approval) (Amendment) (No. 3) Regulations 2025

Published: Wed 22nd Oct 25

These Regulations, made by the Secretary of State for Transport under powers derived from Regulation (EU) 2018/858, introduce mandatory compliance with UNECE Regulations No. 155 (concerning cyber security and cyber security management systems) and No. 156 (concerning software updates and software update management systems) for vehicles seeking Great Britain (GB) type-approval.

The amendments update Annexes II, IV, and XII of Regulation (EU) 2018/858 to incorporate these UN requirements and specify implementation deadlines, and also amend Implementing Regulation (EU) 2020/683 to update the associated information documentation and certificates of conformity templates.

The Regulations come into force on 13th November 2025 and extend across England, Wales, Scotland, and Northern Ireland.

The Unmanned Aircraft (Amendment) Regulations 2025

Published: Tue 21st Oct 25

These Regulations amend existing UK legislation deriving from EU Regulations (EU) 2018/1139, specifically affecting Commission Delegated Regulation (EU) 2019/945 and Commission Implementing Regulation (EU) 2019/947 concerning Unmanned Aircraft Systems (UAS).

The amendments introduce UK-specific branding for drone classes (replacing 'C' with 'UK'), clarify scope by excluding UAS under 100g MTOM or those operated wholly indoors, and impose new technical requirements for direct remote identification and geo-awareness on certain classes, with most technical changes commencing in January 2028.

Furthermore, the rules delegate authority for approving conformity assessment bodies from the Secretary of State to the market surveillance authority.

The Public Offers and Admissions to Trading (Amendment and Consequential and Transitional Provisions) Regulations 2025

These Regulations, made by the Treasury under powers in the Financial Services and Markets Act 2000, make technical amendments and transitional provisions concerning the Public Offers and Admissions to Trading Regulations 2024.

Specifically, they substitute a new provision for FCA investigation powers concerning entities subject to the 2024 Regulations, establish temporary arrangements for existing authorised persons applying to conduct the newly regulated activity of operating an electronic system for public offers, and introduce consequential amendments across various pieces of legislation, including primary and subordinate legislation and numerous UK sanctions regulations, to align them with the new framework.

The Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) (Revocation) Regulations 2025

Published: Fri 10th Oct 25

These Regulations, enacted by the Secretary of State using powers under the Online Safety Act 2023, officially revoke the earlier Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2025, effective from November 2nd, 2025, across the whole of the UK, following consultation with the NCA and OFCOM.

The Online Safety Act 2023 (Commencement No. 5) (Revocation) Regulations 2025

These Regulations, made by the Secretary of State under the Online Safety Act 2023, revoke the Online Safety Act 2023 (Commencement No. 5) Regulations 2025, thereby preventing specific provisions of the Act that mandate certain user-to-user service providers to report child sexual abuse and exploitation content to the National Crime Agency from coming into force on their scheduled date of November 3rd, 2025; this legislative action extends across England, Wales, Scotland, and Northern Ireland and is stated not to require a full impact assessment.

The Wireless Telegraphy (Licence Charges for the 2100 MHz Frequency Band) Regulations 2025

Published: Wed 1st Oct 25

The Office of Communications (OFCOM) enacted these Regulations under the authority of the Wireless Telegraphy Act 2006 to establish the specific licence charges payable for utilizing the 2100 MHz paired frequency band.

The regulations detail an initial one-off charge payable in January 2026, set at £622 per kilohertz, and prescribe an annual charge formula effective from October 2026, which adjusts based on Consumer Price Index (CPI) inflation relative to September 2024.

They also offer licensees the option to pay the annual charges in twelve monthly instalments, revoke obsolete 2021 regulations, and ensure continuity for recovering outstanding debts under the old framework.