UK and EU rules set new compliance priorities for 2026

UK and EU regulators advanced several measures in April 2026 that affect legal and compliance teams across technology, finance, retail and professional services. On 16 April 2026, the UK published SI2026/425, putting the ICO Code of Practice on AI and automated decision-making on a statutory footing and clarifying how UK GDPR and Data Protection Act 2018 duties apply to AI-driven systems using personal data.

The FCA also set out how Buy Now Pay Later products structured as Deferred Payment Credit will enter the UK regulatory perimeter. Firms planning to offer new deferred payment credit agreements from regulation day, 15 July 2026, can notify the FCA to enter the Temporary Permissions Regime from 15 May 2026, with notifications due between 15 May and 1 July 2026 and a £280 application fee.

Other changes include the National Insurance Contributions (Employer Pensions Contributions) Act 2026, which applies Class 1 NICs to salary sacrifice pension contributions above £2,000 annually from the 2029-30 tax year. The UK deposit return scheme will use a flat 20 pence deposit for in-scope drinks containers, while AMLA opened consultations on EU anti-money laundering guidelines and technical standards covering risk assessments, governance, controls and information sharing.