• IT
Choose your location?
  • Global Global
  • Australian flag Australia
  • Canadian flag Canada (FR)
  • French flag France
  • German flag Germany
  • Irish flag Ireland
  • Italian flag Italy
  • Polish flag Poland
  • Qatar flag Qatar
  • Spanish flag Spain
  • UAE flag UAE
  • UK flag UK

What's changing next? Regulatory developments and legal change

20 August 2026

The latest article, as part of our Legal Operations regulatory insights, explores key regulatory developments. The regulatory landscape across the UK and European Union continues to shift at pace. Here are five of the most consequential developments from July 2026 that your compliance and legal teams need on their radar right now. 

EU AI Act transparency requirements – enforcement began 2 August 2026

On 31 July 2026, the European Commission announced that from 2 August 2026, the European Commission's Artificial Intelligence Office and national authorities will begin enforcing key provisions of the EU AI Act, including new transparency requirements and obligations for providers of General-Purpose AI models. The measures require chatbots and other AI systems interacting with individuals to disclose that users are engaging with AI, while AI-generated or manipulated content — including deepfakes — must be clearly labelled and contain machine-readable identifiers. Enforcement will also cover documentation, copyright policy, and training-data transparency requirements for General-Purpose AI models.

This is not a future deadline — it has already arrived. The enforcement window is open. Any organisation developing, deploying, or placing AI systems in the EU that has not yet assessed compliance with the applicable transparency and governance requirements is already operating at regulatory risk. The speed at which the Artificial Intelligence Office has moved from rulemaking to active enforcement is a signal of how seriously the EU intends to treat this framework.

Digital omnibus regulation on AI – now in force

On 24 July 2026, the European Union Official Journal published Regulation (EU) 2026/1744 (the Digital Omnibus on Artificial Intelligence), amending the EU AI Act and related regulations to simplify implementation of harmonised AI rules while maintaining protections for health, safety, and fundamental rights. The Regulation reduces compliance burdens, particularly for small and medium-sized enterprises and small mid-cap companies, simplifies conformity assessments and registration requirements, expands access to regulatory sandboxes and real-world testing, and clarifies governance responsibilities. It also revises certain high-risk AI classifications, strengthens the powers of the European Artificial Intelligence Office, and introduces new prohibitions on AI systems used to generate or manipulate non-consensual intimate material. The Regulation entered into force on 27 July 2026.

For businesses that had been waiting for the AI regulatory picture to settle before making compliance investments, the publication of this Regulation marks that moment. The framework is now in force. Organisations across all sectors using AI need to understand whether their systems fall within revised high-risk classifications and what the new governance and conformity assessment requirements mean for their technology procurement, deployment, and internal oversight arrangements.

Buy now pay later – now a regulated activity in the UK

On 14 July 2026, the UK Official Gazette published a Statutory Instrument which entered into force on 15 July 2026, bringing specified Deferred Payment Credit arrangements — commonly known as Buy Now, Pay Later (BNPL) — within the scope of regulated consumer credit activities under the Financial Services and Markets Act 2000. In parallel, the Financial Conduct Authority (FCA) began regulating eligible deferred payment credit products, requiring firms entering into newly regulated agreements to be authorised by, or hold temporary permission from, the FCA and comply with applicable consumer credit requirements. Consumers are also now able to refer eligible complaints regarding regulated BNPL agreements to the Financial Ombudsman Service.

BNPL has moved from an unregulated space to a fully regulated consumer credit activity in a single step. For BNPL providers, retailers offering deferred payment at the point of sale, and any firm in the distribution chain, the compliance obligations are now live. Firms that do not hold the necessary authorisation or temporary permission and are continuing to offer these products are operating unlawfully.

UK environmental penalties rise significantly – from 1 September 2026

On 14 July 2026, the UK Official Gazette published a Statutory Instrument amending the Environmental Offences (Fixed Penalties) (England) Regulations 2017 and the Environmental Protection Act 1990, coming into force on 1 September 2026. The Regulations increase the maximum fixed penalty that principal litter authorities may impose for littering offences from £500 to £750, while raising the maximum fixed penalty for waste deposit — fly-tipping — offences from £1,000 to £5,000. The amendments are intended to strengthen enforcement powers and enhance deterrence against environmental offences.

The fivefold increase in the maximum penalty for fly-tipping offences is particularly significant for businesses in logistics, construction, and waste management. The 1 September 2026 commencement date means the window to ensure that waste disposal practices — including those of contractors and supply chain partners — are fully compliant is short. Businesses that outsource waste handling without adequate contractual controls and oversight now face materially higher financial exposure.

EU revised sustainability reporting standards — adopted, applicable from 2027

On 3 July 2026, the European Commission adopted revised European Sustainability Reporting Standards to simplify reporting under the Corporate Sustainability Reporting Directive framework. The revised standards reduce mandatory datapoints by more than 60% and total datapoints by more than 70%, introduce reporting flexibilities, simplify materiality assessments, and distinguish mandatory and voluntary disclosures. The revised ESRS will apply from financial years beginning on or after 1 January 2027, with optional early application for the 2026 financial year.

While the headline message — a 60% reduction in mandatory datapoints — sounds like relief, the reality is more nuanced. The revised standards reset the compliance baseline and require organisations to rebuild their reporting frameworks, governance structures, and data collection processes against the new specifications. Businesses that have invested significantly in aligning to the prior standards need to reassess what changes are required and whether early adoption for 2026 is advantageous.

This content has been prepared based on regulatory and legislative updates identified across UK and EU jurisdictions as of 2 August 2026. It is intended for awareness purposes and does not constitute legal advice.

Further Reading