UK law
Social Media Platforms (Ofcom Licensing) Bill introduced to House of Lords
The Social Media Platforms (Ofcom Licensing) Bill has been introduced to the House of Lords. The Bill would require social media companies operating in the United Kingdom to obtain a licence from Ofcom, empower Ofcom to set and enforce binding conditions on licensed operators, and cover connected purposes. It was introduced by Baroness Benjamin as a private member’s bill. Second reading has yet to be scheduled. As a private member’s bill, it is unlikely to become law.
Artificial Superintelligence Bill introduced to House of Commons
An Artificial Superintelligence Bill has also been introduced to the House of Commons. It aims to prohibit the development, deployment and operation of artificial superintelligence systems, establish monitoring and control powers in respect of such systems, and cover connected purposes. Again, as a private member’s bill, it is unlikely to become law, but it contributes to the debate about regulating AI. Second reading is set for 13 November 2026.
The Crime and Policing Act 2026 (Commencement No. 3 and Saving Provisions) Regulations 2026 made
The Crime and Policing Act 2026 (Commencement No. 3 and Saving Provisions) Regulations 2026 SI 2026/960 have been made. The Regulations bring specified provisions of the Crime and Policing Act 2026 into force. These are the third commencement regulations made under the 2026 Act. Regulation 2 brings into force provisions on 21 September 2026, including those relating to child criminal exploitation prevention orders for the limited purpose of making rules of court, and barred and advisory lists. Regulation 3 brings into force a range of provisions on 29 September 2026, including provisions relating to certain sexual offences and extradition. Regulation 6 makes saving provisions in relation to the commencement of amendments made by section 246 of the 2026 Act to sections 20 and 85 of the Extradition Act 2003. Regulation 4 brings into force a range of provisions on 26 October 2026 relating to anti-social behaviour. Regulation 5 brings into force a range of provisions on 29 October 2026 relating to SIM farms and offences concerning the possession and supply of specified articles.
UK government announces review of consultation processes
The government has announced plans to reduce what it describes as unnecessary “box-ticking” consultations, which it says will speed up decision-making and the delivery of public policy, infrastructure projects and other reforms. The move follows a review that identified around 7,000 statutory consultation requirements, with ministers arguing that excessive consultation has created delays and shifted accountability away from elected decision-makers. Under the reforms, departments will be expected to consult only where there is a clear justification, while further measures are proposed to accelerate nationally significant infrastructure projects and limit delays caused by legal challenges. The government has said it will publish a new vision for public participation in the autumn, aimed at promoting more meaningful forms of public engagement.
AI Risk Management Toolkit published
The Department for Science, Innovation and Technology has published an AI risk management toolkit. It provides guidance to help anyone involved in AI projects understand, assess and manage risks when designing, procuring or delivering AI products.
FCA reviews frontier AI and cyber resilience
The Financial Conduct Authority has carried out a review of frontier AI and cyber resilience. It highlights that advanced AI models are rapidly improving firms’ ability to identify cyber vulnerabilities, but are also creating significant operational challenges by increasing the volume and speed of findings that need to be assessed and remediated. The FCA found that the effectiveness of frontier AI depends less on the model itself and more on the governance, controls, human oversight, technical environment and organisational processes surrounding its use. Firms reported that AI is exposing weaknesses in vulnerability management, remediation capacity, dependency mapping and operational resilience, while also challenging traditional approaches to risk prioritisation by revealing complex attack paths and interconnected vulnerabilities. The report stresses that strong cyber-resilience fundamentals, effective governance, clear accountability and skilled human judgement remain critical, and encourages firms to assess whether their people, systems, suppliers and processes are capable of managing a future increase in AI-enabled vulnerability discovery and cyber threats.
National Commission into the Regulation of AI in Healthcare makes recommendations for a future regulatory framework
The National Commission into the Regulation of AI in Healthcare was established to advise the government on a future regulatory framework for AI in healthcare. It has now published its report. Its central conclusion is that the regulation and assurance of AI in healthcare must become more proportionate, lifecycle-based and system-wide. The Commission’s recommendations are organised around three connected areas of change: proportionate lifecycle regulation; system-wide responsibility and safe management; and trust, transparency and predictability. The Commission’s recommendations aim to provide a foundation for the Medicines and Healthcare products Regulatory Agency (MHRA), government and wider system partners to achieve that ambition. A cross-government response will follow separately, setting out how government and system partners will consider and take forward the recommendations.
CAP issues guidance on AI assistant advertising compliance under CAP Code
CAP has issued guidance on the application of the CAP Code to ads for AI assistant tools, including chatbots used for productivity, companionship, dating, health and wellbeing. The guidance explains how the UK advertising rules in the CAP Code apply to advertisements for AI assistants, even though the Code does not regulate the AI products themselves. The article highlights a range of risks for advertisers, including exaggerated claims about productivity or earnings, AI tools that facilitate academic cheating, dating and companionship apps that reinforce harmful gender stereotypes, appearance-focused “looksmaxxing” tools that exploit insecurities, and health or wellness products that make unsubstantiated medical claims. It also warns that advertisers must be able to substantiate objective claims about AI capabilities, such as image analysis or nutritional assessments, and must not omit key information about charges or limitations. The central message is that AI advertising is subject to the same fundamental principles as any other advertising: claims must be evidence-based, clear and not misleading, and content must be socially responsible
UK government consults on modernising corporate reporting
The UK Government has issued its consultation on modernising corporate reporting to support economic growth. The consultation proposes modernisation of UK corporate reporting, based on moving the system towards digital-first communication. Key reform proposals include moving more disclosures onto online platforms, expanding the electronic tagging of annual reports, and making digital communication with shareholders the default, which includes enabling virtual AGMs. The government also aims to simplify reporting rules by clarifying the purpose of annual reports and reducing burdens on SMEs. It also aims to make the rules clear surrounding what companies have to report, and reduce unnecessary reporting for companies which don’t need to. The proposals also include streamlining financial, strategic, remuneration and governance reporting. The package overall is designed to create a clearer, more coherent and technology-driven framework for reporting which improves accessibility, reduces administrative burdens, and better supports a modern UK economy. The consultation ends on 30 November 2026.
ICO imposes fine of £190k fine for nuisance calls
The Information Commissioner’s Office (ICO) has fined Elderly Aids Ltd (EAL) £190,000 for making over 750,000 marketing cold calls to people who are registered with the Telephone Preference Service. Many of these were elderly and vulnerable and investigators found that callers were aggressive and misleading and often did not identify themselves. They continued to contact people even after the ICO demanded information on their practices. Throughout the investigation EAL ignored information requests repeatedly and when it became aware that it was under scrutiny, attempted to strike itself off the Companies House Register. Alongside the financial penalty, the ICO also issued an enforcement notice ordering EAL to stop unlawful marketing calls and to comply with caller identification requirements.
Porn site deploys age checks as Ofcom fines it £730,000
Ofcom has fined porn website Xgroovy.com £730,000 for failing to meet its legal obligation under the Online Safety Act 2023 to implement highly effective age-assurance measures between July and November 2025. The website has been fined an additional £30,000 for ignoring a binding information request from the regulator and a further £200 daily penalty will be applied until compliance is met. Since the fine, the website has introduced age checks and has blocked UK access to its service. Ofcom has also announced strengthened protections from several file-sharing services as a consequence of its action to address the dissemination of child sexual abuse material (CSAM) on these platforms. Provisional decisions have also been issued against Cyberitic, LLC and ZF Media for failing to comply with their age-check duties under the Online Safety Act. Both companies will have the opportunity to address this before Ofcom makes its final decision.
Ofcom says UK children protected from more high-risk sites
Ofcom has also announced that work done by its compliance teams has resulted in several websites hosting harmful content children implementing age checks or blocking access in the UK altogether. This significantly reduces children’s exposure to harmful content such as graphic violence, serious injury, suicide content or posts promoting self-harm and eating disorders. Ofcom has also reported that its taskforce dedicated to driving compliance with “small but risky services” has resulted in two sites showing violent content to implement age assurance checks and a further seven websites have blocked access in the UK as a result of the taskforce’s actions. It has reiterated to platforms that their duties under the Online Safety Act are still in force despite the planned social media ban for under-16s, and that it will continue to monitor and enforce compliance with these duties ahead of forthcoming child-protection measures which will come into force in Spring 2027.
Ofcom outlines approach to online safety supervision and compliance
In addition, Ofcom has outlined its strategy in enforcing the Online Safety Act, which has focused on maintaining clear guidance, continuous evidence gathering and direct engagement with platforms including formal investigations where there are compliance failures. The regulator has reported that although many companies have improved online safety, such as introducing age checks or completing risk assessments, others, including major platforms, have failed to meet or resist these requirements. Ofcom has highlighted how it has used its enforcement actions, such as information requests, audits and public calls for action alongside recent cases involving major platforms like Snap, X and TikTok which have failed to introduce age assurance measures. It has also reported that it has issued more than £6 million in fines so far and that the new Chair will review Ofcom’s compliance approach and will look to maximise its impact, particularly for the protection of children.
EU law
Commission designates ChatGPT, Reddit, Roblox under DSA
The European Commission has designated ChatGPT as a Very Large Online Search Engine, and Reddit and Roblox as Very Large Online Platforms under the Digital Services Act. The three platforms have all reported more than 45 million monthly EU users, which means that they now face stricter obligations, including assessing and reducing systemic risks linked to illegal content, minors’ safety, user well-being, fundamental rights, elections and public security. The new designations also give the Commission investigative powers and aim to ensure stronger accountability and safer digital environments.
