The Trading Bulletin | June 2025

Data protection updates

M&S Data Breach

The Easter Sunday cyberattack on Marks & Spencer serves as a reminder that cyberattacks can hit even the best-prepared organisations. Discover how to better safeguard your organisation in our linked article.

Protect your organisation – five lessons from recent cyberattacks

ICO cracks down on unsolicited marketing calls

The ICO has fined a refund recovery service, AFK, £90,000 for not obtaining proper consent for unsolicited marketing calls, urging organisations to review their marketing practices.

More info here

New ICO guidance on anonymisation

Retailers using anonymisation techniques should check out the new guidance provided by ICO to enhance data privacy.

About this guidance | ICO

Cyber Security and Resilience Bill

The government has shared a policy statement on anticipated measures in the Cyber Security and Resilience Bill to address the growing sophistication of cyber threats.

Read the full statement

Health & safety/compliance updates

Modern Slavery guidance updated

Retailers are encouraged to revise their modern slavery statements in line with updated guidance on transparency in supply chains.

Guidance link

Martyn’s Law receives Royal Assent

The Terrorism (Protection of Premises) Act 2025 has now received Royal Assent, with important implications for operational preparations.

More here

Failure to prevent fraud offence imminent

Retailers must update fraud risk assessments ahead of the new failure to prevent fraud offence launching on 1 September 2025.

Read more

New sanctions regulations

Retailers need to review their sanctions screening procedures to manage risks, especially due to recent new sanctions against Russia.

Marketing updates

DMCC updates

The UK government’s crackdown on hidden pricing and fake reviews is now in action, with the CMA empowered to enforce new rules.

Crackdown article

Government update on less healthy food restrictions

Upcoming restrictions on less healthy food advertising won’t apply to pure brand adverts, taking effect from 5 January 2026.

Update here

Further details

Location, location, location – ASA’s misleading impressions initiative

The ASA has issued rulings targeting businesses failing to disclose their operational addresses, part of a broader initiative on misleading advertisements.

Find out more in our complete review: Marketing Matters

VAT in prices – to include or not to include?

The ASA clarifies rules surrounding VAT inclusivity in price advertisements amid ongoing complaints.

  • Ads seen by both consumers and businesses must display VAT-inclusive pricing.
  • VAT-exclusive prices must be clearly indicated.
  • VAT-exclusive quotes need accompanying information about rates.

Financial services updates

Regulation of ‘buy-now pay-later’ lending

Draft legislation is on the table to regulate unregulated ‘buy-now, pay-later’ lending, impacting how retailers can offer these options.

More details on implications for retailers can be found here.

FCA launches 5-year strategy

The FCA’s new growth strategy outlines the focal points for upcoming regulatory changes that aim to support both growth and consumer welfare.

For more details, check out our article here.

New areas for action and proposals for reviewing FCA rules

Feedback on simplifying FCA rules post-Consumer Duty is being gathered, with reform plans set for release in September 2025.

Details on these proposals can be found here.

Motor finance case heard in the Supreme Court

The Supreme Court’s upcoming judgment on commission payment disclosures in motor finance cases could reshape the industry significantly.

For earlier case details, read our article here.

Why should I read this?

This month’s Trading Bulletin is packed with essential updates on data protection, compliance, marketing, and finance. Stay ahead of the game and be prepared for imminent regulatory changes that could impact your operations. We’ve distilled the crucial bits so you don’t have to wade through the details. Dive in!