Website legal requirements in the United Kingdom

Following changes to PECR under the Data (Use and Access) Act 2025, websites can use cookies and similar technologies without consent solely for statistical purposes or to adapt a site's appearance to user preferences. Users must get clear information and an easy way to object. Plan the information and objection option alongside your site's cookie controls.

UK businesses selling online or at a distance must tell customers they can cancel their order up to 14 days after it is delivered, without needing to give a reason. Include this information in your shop's customer-facing text.

The Digital Markets, Competition and Consumers Act 2024 prohibits submitting or commissioning fake consumer reviews and drip pricing, which means adding mandatory charges after showing a headline price. Its consumer provisions apply to commercial practices from 6 April 2025. Account for these rules when planning reviews and checkout.

Equality and Human Rights Commission guidance on the Equality Act 2010 says organisations providing services through a website must make reasonable adjustments to make sure the website is accessible to disabled people. Consider those adjustments when planning and building your pages and forms.

The UK government has published e-invoicing requirements that will have effect from April 2029 for VAT-registered businesses and public bodies, with Peppol as the core interoperability framework. Account for these requirements when planning invoicing for your shop.

The UK's Faster Payment System supports real-time payments and is available day and night, 365 days a year. You can consider this when planning payment methods for an online shop.

The Welsh Language (Wales) Measure 2011 declares that Welsh has official status in Wales. If you plan Welsh content, consider where it will appear in your site's pages and forms.

Nominet UK manages .uk registrations, including domains directly under .uk and second-level domains such as .co.uk, which is intended for businesses. Consider the domain when planning your site's address.

A UK limited company must show its registered number, registered office address, place of registration and the fact that it is a limited company on its website. Plan where these details will appear.

The majority of the data protection and privacy provisions in Part 5 of the Data (Use and Access) Act 2025 came into force on 5 February 2026. Use this checklist when planning your site.

• Provide clear information and an easy way to object to eligible cookies used without consent.
• Tell online customers about their cancellation right.
• Avoid fake reviews and adding mandatory charges after showing a headline price.
• Plan reasonable accessibility adjustments for your website.
• Account for e-invoicing requirements when planning invoicing.
• Consider payment methods for your shop.
• Decide where any Welsh content will appear.
• Choose a domain for your site.
• Display the required details if your business is a UK limited company.