The "Boring" Stuff That Saves You a Fine

We know. Nobody starts a business because they are passionate about data compliance.

But here is the reality: the digital laws in the UK changed significantly between 2024 and 2026. The days of "slapping up a privacy policy and hoping for the best" are over.

With the Digital Markets, Competition and Consumers Act (DMCC) fully enforced and the European Accessibility Act (EAA) now live, the bar has been raised.

If you are a UK business owner, marketing director, or just the person unlucky enough to be managing the website, this is your 2026 cheat sheet. No jargon, just the essentials to keep you safe.

1. The Basics (Companies Act 2006)

Let’s start with the non-negotiables. If you are a Limited Company or LLP, you must display the following information clearly on your site (the footer is the standard spot):

• Your Registered Company Name: Not just your trading name.

• Company Registration Number: The one from Companies House.

• Place of Registration: e.g., "Registered in England and Wales."

• Registered Office Address: A physical address, not a PO Box.

VAT Status: If you are VAT registered, you must display your VAT number. If you sell online, you also need to show prices inclusive of VAT (or make it very clear if they are exclusive).

2. The "New" Cookie Rules (DUAA 2025)

Good news! The Data Use and Access Act (DUAA), which received Royal Assent in mid-2025, finally cut us some slack.

What changed? You can now set strictly necessary cookies (and often simple analytics cookies for statistical purposes) without needing that annoying pop-up consent, provided you aren't tracking users across the web for ads.

What you still need:

• A Cookie Policy: Explaining what you track and why.

• Consent for Advertising: If you use Facebook Pixels, LinkedIn Insights, or heavy tracking tools, you still need a clear "Accept/Reject" banner.

Strategic Tip: Review your cookie banner. If you are only using basic analytics, you might be able to simplify it and improve your User Experience (UX).

3. Fake Reviews are Now Illegal (DMCC Act)

This is the biggest change for 2026. The Digital Markets, Competition and Consumers Act has banned the practice of posting fake reviews or commissioning people to write them.

But here is the kicker: You are now responsible for proving your reviews are real.

If your website displays testimonials, you must take "reasonable steps" to check they are from genuine customers.

• Do: Use verified platforms like Trustpilot or Feefo.

• Don't: Copy and paste a text review from "John Smith" without proof of purchase.

• Don't: Hide the fact that a review was incentivised (e.g., if you gave them a discount code for it).

4. Accessibility is No Longer Optional (EAA)

The deadline for the European Accessibility Act (EAA) passed in June 2025. While the UK is out of the EU, if you sell goods or services to any EU customer, you must comply. Even domestically, the UK Equality Act 2010 effectively demands the same standards.

The 2026 Standard: WCAG 2.2 AA. This means your site needs:

• High colour contrast (no light grey text on white backgrounds).

• Full keyboard navigability (can you use the site without a mouse?).

• Proper "Alt Text" on all images.

Strategic Tip: Accessibility is also a ranking factor. Google prefers websites that everyone can use.

5. The "AI Transparency" Rule

Using an AI Chatbot for customer service?

Under new consumer protection guidance, you must not mislead consumers into thinking they are talking to a human. If you have a bot on your site, make it clear.

• Bad: "Chat with Sarah now!" (When Sarah is an LLM).

• Good: "Chat with our AI Assistant (Support is monitored by humans)."

6. Online Safety Act 2023 (For User Content)

Does your website allow users to upload comments, photos, or forum posts? If yes, you now have a legal duty to protect users from illegal content. You need a robust moderation policy and a way for users to report harmful content easily. If you are just a standard brochure site, this likely won't affect you.

Summary Checklist for 2026

1. Footer: Company Name, Number, Address, VAT.

2. Policies: Updated Privacy Policy & Cookie Policy (referencing DUAA 2025).

3. Reviews: Verify they are genuine (DMCC Act compliance).

4. Accessibility: Audit for WCAG 2.2 AA standards.

5. AI: Disclose if your chat support is automated.