Online Safety Act 2025
Royal Assent — In forceWhat it does: Requires social media platforms to protect UK users from illegal content and scams. Platforms must proactively remove scam ads, fake profiles, and fraudulent content or face fines up to 10% of global turnover.
Impact on you: Major. Social media platforms now legally responsible for scam content. Victims can pursue platforms that failed to act. Affects Meta, Google, TikTok, X, Snapchat.
Next steps: Enforcement begins via Ofcom. First fines expected within 12 months.
Economic Crime and Corporate Transparency Act 2024
Royal Assent — Rolling outWhat it does: Expanded powers to seize crypto assets linked to crime, new corporate transparency requirements, and stronger sanctions for fraud. Companies must identity-verify their directors.
Impact on you: Crypto scammers can have assets frozen without conviction. Identity fraud harder to hide behind shell companies. Companies House can now reject suspicious filings.
Next steps: Crypto seizure powers active. Full director ID checks rolling out through 2025-26.
Digital Markets, Competition and Consumers Act 2024
Royal Assent — Phased implementationWhat it does: New consumer protections against fake reviews, subscription traps, and misleading online practices. CMA gains stronger enforcement powers including direct fines.
Impact on you: Fake review farms targeted. Subscription auto-renewals must be clear. Misleading online practices face penalties. Protects consumers from scammy checkout flows.
Next steps: Subscription rules in force from 2026. CMA enforcement powers active.
Artificial Intelligence (Regulation) Bill 2026 [HL]
1st reading — House of LordsWhat it does: Framework for regulating AI systems. Requires transparency from AI developers, safety testing for high-risk AI, and labelling of AI-generated content including deepfakes.
Impact on you: Deepfake scams could be criminalised. AI-generated scam calls, videos, and images must be labelled. Developers liable for unsafe AI products.
Next steps: Reintroduced to the Lords April 2026. Awaiting second reading. Previous version reached 3rd reading in 2024.
Cyber Security and Resilience (Network and Information Systems) Bill
2nd reading — House of CommonsWhat it does: Strengthens the UK's Network and Information Systems Regulations 2018. Requires essential service operators and digital service providers to meet higher cyber security standards and report incidents faster.
Impact on you: Critical infrastructure providers face stricter security duties. Wider reporting obligations for data centres, cloud providers, and digital services. Aligns with EU NIS2 framework.
Next steps: Second reading completed 1 July 2026. Progressing through Commons. Likely to reach Committee stage in coming months.
Data Protection and Digital Information Bill (DPDI)
Committee stage — OngoingWhat it does: Updated UK data protection regime post-Brexit. Reformed cookie consent, new rules for automated decision-making, and stronger data breach reporting requirements.
Impact on you: Would require faster data breach reporting, enable smart data schemes for secure data sharing, and introduce new digital verification services to reduce identity fraud risk.
Next steps: At Committee stage in Commons as of Sept 2024. Not yet passed — original bill lapsed at 2024 election, re-introduced version still progressing.
Fraud (Sentencing) Bill
ProposedWhat it does: Currently under consultation. Would introduce mandatory minimum sentences for fraud offences above £100k and extend custodial sentences for repeat scam offenders.
Impact on you: If passed, fraud would carry automatic prison time. Repeat offenders face longer sentences. Could deter organised scam operations targeting UK victims.
Next steps: Consultation ongoing. Watch for draft text in late 2025.
UK Cryptoasset Regulation Bill
In development — Expected 2025/2026What it does: Comprehensive crypto regulation covering exchanges, stablecoins, staking, and DeFi. Aligns with EU MiCA framework. Will require FCA registration for all crypto activities.
Impact on you: Unregistered crypto exchanges blocked in UK. Scam tokens harder to issue. Consumer protections for crypto investors. But could push some activity underground.
Next steps: Treasury consultation concludes 2025. Legislation expected late 2025 or 2026.
Telecommunications (Fraud) Act
Draft stageWhat it does: Targets scam calls and SMS fraud. Would require telecom providers to block suspicious calls, verify caller ID, and implement anti-spoofing measures at network level.
Impact on you: Would make number spoofing much harder. Fewer scam calls from "your bank" numbers. Text message scams reduced. But only covers UK-originated communications.
Next steps: Draft bill under review. Expected to be introduced to Parliament in 2025.