Skip to main content

We make the difference. Talk to us: 0333 004 4488 | hello@brabners.com

2026 horizon scan — key legal & regulatory changes ahead

AuthorsVictoria TrigwellEleanore BeardKate Venables

9 min read

Employment, Data Protection

Two people sit at a wooden table with documents, a calculator, laptops displaying charts, and a tablet; they appear to be discussing business data.

2026 promises to be another demanding year for in‑house legal and compliance teams with major legislative and regulatory reforms converging across consumer protection, data governance and employment law. The Digital Markets, Competition and Consumer ActData Use and Access Act (DUA Act) and Employment Rights Act 2025 (ERA) will all begin to significantly reshape operational, contractual and workforce practices.

Many organisations will need to update systems, revisit policies and prepare for entirely new compliance obligations as these frameworks take effect.

Here, Victoria Trigwell, Eleanore Beard and Kate Venables from our specialist in-house lawyers and general counsel team explore the key developments to have on your radar and what they mean for your organisation in the year ahead.

 

The Digital Markets, Competition and Consumer Act 2024

From spring 2026, any business that offers subscription contracts to consumers will be required to comply with new rules under sections 253 to 281 of the Digital Markets, Competition and Consumer Act 2024

Businesses will be required to provide consumers with certain information before a subscription contract is entered into including ‘key pre-contract information’, ‘full pre-contract information’ and reminder notices. 

Businesses should pay close attention to the rules governing reminder notices which — where applicable — require the business to issue notices linked to the ongoing renewal of the subscription. These are intended to ensure that consumers remain aware of their subscription commitments, have a meaningful opportunity to review and — if they wish — bring the contract to an end. For many businesses, these requirements will necessitate changes to internal systems and customer communications to ensure compliance with the legal framework.

Interpreting the new rules, assessing how they interact with current practices and guiding your organisation through the necessary process and system changes will be central to achieving compliance.

 

Data protection 

The DUA Act is entering its final implementation phase with secondary legislation expected to be fully in force by June 2026. It introduces amendments to the UK GDPR and the Data Protection Act 2018 to create a more flexible approach to automated decision-making, new lawful bases for processing under recognised legitimate interests and revised marketing rules for charities, allowing for a charitable purpose soft opt in. 

In November 2025, the European Commission unveiled the Digital Omnibus Package, aiming to simplify compliance and reduce regulatory burdens of the GDPR, the EU AI Act and the EU Data Act. The proposed changes are in draft form but are likely to be discussed over 2026 and will be interesting to follow. Key proposals include narrowing the definition of personal data, clarifying the scope of special category data and introducing explicit exemptions for AI-related processing under legitimate interests.

While the EU AI Act came into force in August 2024, the obligations for high-risk AI systems will only apply from August 2026. These include requirements for risk management, transparency and human oversight which will reshape AI governance across all sectors.

The core provisions of the EU Data Act addressing data sharing and portability came into effect in September 2025. 2026 sees the interoperability requirements for cloud services and ‘access by design’ obligations for connected products, reinforcing the principle that data accessibility must be embedded into product architecture.

For in-house legal teams, this is a pivotal moment to lead on governance strategy, embed privacy by design and engage proactively with emerging standards.

 

Employment Rights Act 2025

The ERA is set to bring about significant and fundamental change to the UK employment law landscape with key changes landing in April and October 2026 and into 2027.  

Here, we set out a high-level overview of what to prepare for and when: 

April 2026 

 

October 2026

 

2027 

The scale of change ahead makes it essential to ensure that your stakeholders are kept informed and are prepared to tackle the numerous developments in terms of the impact on policy, project planning, operations and risk.   

 

Talk to us

If you’d like tailored guidance on how these reforms could affect your organisation, our in‑house lawyers and general counsel team — comprising specialists in a wide range of areas including data protection and employment law — can support you with strategic planning, policy redesign, compliance readiness and implementation. They work alongside your teams to interpret new regulatory duties, assess operational impact and develop practical approaches to managing risk across your business.

To understand more about how our team can work with you, give us a call today on 0333 004 4488, email hello@brabners.com or complete our contact form below.

Eleanore Beard

Eleanore is a Legal Director and Data Protection Practitioner in our commercial team.

Read more
Eleanore Beard

Kate Venables

Kate is a Partner in our employment team.

Read more
KATE VENABLES

Victoria Trigwell

Victoria is a Legal Director in our commercial team.

Read more
Victoria Trigwell

Talk to us

Loading form...

Related insights