Online Safety Act 2025
Royal Assent — In forceWhat it does: Requires social media platforms to protect UK users from illegal content and scams. Platforms must proactively remove scam ads, fake profiles, and fraudulent content or face fines up to 10% of global turnover.
Impact on you: Major. Social media platforms now legally responsible for scam content. Victims can pursue platforms that failed to act. Affects Meta, Google, TikTok, X, Snapchat.
Next steps: Enforcement begins via Ofcom. First fines expected within 12 months.
Economic Crime and Corporate Transparency Act 2024
Royal Assent — Rolling outWhat it does: Expanded powers to seize crypto assets linked to crime, new corporate transparency requirements, and stronger sanctions for fraud. Companies must identity-verify their directors.
Impact on you: Crypto scammers can have assets frozen without conviction. Identity fraud harder to hide behind shell companies. Companies House can now reject suspicious filings.
Next steps: Crypto seizure powers active. Full director ID checks rolling out through 2025-26.
Digital Markets, Competition and Consumers Act 2024
Royal Assent — Phased implementationWhat it does: New consumer protections against fake reviews, subscription traps, and misleading online practices. CMA gains stronger enforcement powers including direct fines.
Impact on you: Fake review farms targeted. Subscription auto-renewals must be clear. Misleading online practices face penalties. Protects consumers from scammy checkout flows.
Next steps: Subscription rules in force from 2026. CMA enforcement powers active.
AI (Regulation) Bill 2025
Pending — Second ReadingWhat it does: Framework for regulating AI systems. Requires transparency from AI developers, safety testing for high-risk AI, and labelling of AI-generated content including deepfakes.
Impact on you: Deepfake scams could be criminalised. AI-generated scam calls, videos, and images must be labelled. Developers liable for unsafe AI products.
Next steps: Second Reading in the Lords expected 2025. Could become law by 2026.
Data Protection and Digital Information Bill (DPDI)
Royal Assent — In forceWhat it does: Updated UK data protection regime post-Brexit. Reformed cookie consent, new rules for automated decision-making, and stronger data breach reporting requirements.
Impact on you: Data breaches must be reported faster. Smart data schemes enable secure sharing of customer data. New digital verification services reduce identity fraud risk.
Next steps: Already in force. ICO issuing new guidance.
Fraud (Sentencing) Bill
ProposedWhat it does: Currently under consultation. Would introduce mandatory minimum sentences for fraud offences above £100k and extend custodial sentences for repeat scam offenders.
Impact on you: If passed, fraud would carry automatic prison time. Repeat offenders face longer sentences. Could deter organised scam operations targeting UK victims.
Next steps: Consultation ongoing. Watch for draft text in late 2025.
UK Cryptoasset Regulation Bill
In development — Expected 2025/2026What it does: Comprehensive crypto regulation covering exchanges, stablecoins, staking, and DeFi. Aligns with EU MiCA framework. Will require FCA registration for all crypto activities.
Impact on you: Unregistered crypto exchanges blocked in UK. Scam tokens harder to issue. Consumer protections for crypto investors. But could push some activity underground.
Next steps: Treasury consultation concludes 2025. Legislation expected late 2025 or 2026.
Telecommunications (Fraud) Act
Draft stageWhat it does: Targets scam calls and SMS fraud. Would require telecom providers to block suspicious calls, verify caller ID, and implement anti-spoofing measures at network level.
Impact on you: Would make number spoofing much harder. Fewer scam calls from "your bank" numbers. Text message scams reduced. But only covers UK-originated communications.
Next steps: Draft bill under review. Expected to be introduced to Parliament in 2025.