2026 horizon scan — key legal & regulatory changes ahead

We explore the key developments that in-house lawyers should have on their radar and what they mean for your organisation in the year ahead.
Read more
We make the difference. Talk to us: 0333 004 4488 | hello@brabners.com
AuthorsVictoria TrigwellEleanore BeardKate Venables
9 min read

2026 promises to be another demanding year for in‑house legal and compliance teams with major legislative and regulatory reforms converging across consumer protection, data governance and employment law. The Digital Markets, Competition and Consumer Act, Data Use and Access Act (DUA Act) and Employment Rights Act 2025 (ERA) will all begin to significantly reshape operational, contractual and workforce practices.
Many organisations will need to update systems, revisit policies and prepare for entirely new compliance obligations as these frameworks take effect.
Here, Victoria Trigwell, Eleanore Beard and Kate Venables from our specialist in-house lawyers and general counsel team explore the key developments to have on your radar and what they mean for your organisation in the year ahead.
From spring 2026, any business that offers subscription contracts to consumers will be required to comply with new rules under sections 253 to 281 of the Digital Markets, Competition and Consumer Act 2024.
Businesses will be required to provide consumers with certain information before a subscription contract is entered into including ‘key pre-contract information’, ‘full pre-contract information’ and reminder notices.
Businesses should pay close attention to the rules governing reminder notices which — where applicable — require the business to issue notices linked to the ongoing renewal of the subscription. These are intended to ensure that consumers remain aware of their subscription commitments, have a meaningful opportunity to review and — if they wish — bring the contract to an end. For many businesses, these requirements will necessitate changes to internal systems and customer communications to ensure compliance with the legal framework.
Interpreting the new rules, assessing how they interact with current practices and guiding your organisation through the necessary process and system changes will be central to achieving compliance.
The DUA Act is entering its final implementation phase with secondary legislation expected to be fully in force by June 2026. It introduces amendments to the UK GDPR and the Data Protection Act 2018 to create a more flexible approach to automated decision-making, new lawful bases for processing under recognised legitimate interests and revised marketing rules for charities, allowing for a charitable purpose soft opt in.
In November 2025, the European Commission unveiled the Digital Omnibus Package, aiming to simplify compliance and reduce regulatory burdens of the GDPR, the EU AI Act and the EU Data Act. The proposed changes are in draft form but are likely to be discussed over 2026 and will be interesting to follow. Key proposals include narrowing the definition of personal data, clarifying the scope of special category data and introducing explicit exemptions for AI-related processing under legitimate interests.
While the EU AI Act came into force in August 2024, the obligations for high-risk AI systems will only apply from August 2026. These include requirements for risk management, transparency and human oversight which will reshape AI governance across all sectors.
The core provisions of the EU Data Act addressing data sharing and portability came into effect in September 2025. 2026 sees the interoperability requirements for cloud services and ‘access by design’ obligations for connected products, reinforcing the principle that data accessibility must be embedded into product architecture.
For in-house legal teams, this is a pivotal moment to lead on governance strategy, embed privacy by design and engage proactively with emerging standards.
The ERA is set to bring about significant and fundamental change to the UK employment law landscape with key changes landing in April and October 2026 and into 2027.
Here, we set out a high-level overview of what to prepare for and when:
The scale of change ahead makes it essential to ensure that your stakeholders are kept informed and are prepared to tackle the numerous developments in terms of the impact on policy, project planning, operations and risk.
If you’d like tailored guidance on how these reforms could affect your organisation, our in‑house lawyers and general counsel team — comprising specialists in a wide range of areas including data protection and employment law — can support you with strategic planning, policy redesign, compliance readiness and implementation. They work alongside your teams to interpret new regulatory duties, assess operational impact and develop practical approaches to managing risk across your business.
To understand more about how our team can work with you, give us a call today on 0333 004 4488, email hello@brabners.com or complete our contact form below.
Eleanore Beard
Eleanore is a Legal Director and Data Protection Practitioner in our commercial team.
Read more


Loading form...

We explore the key developments that in-house lawyers should have on their radar and what they mean for your organisation in the year ahead.
Read more

We explain the impact of the cyber-attack on JLR's workforce and outline what to do to protect your business and minimise the impact if an incident occurs.
Read more

We outline eight key steps to put your organisation in the strongest position for a prompt and effective response to any cyber-attack.
Read more