June 2025 Legal Briefing

This blog provides a brief overview of June’s Legal Updates, which are relevant to Quality, Environmental, Info Sec and Health & Safety to help your organisation stay aligned with the latest legal requirements.  

How to use this Update:

  • You should review these updates and decide whether they are applicable to your company.
  • Add all relevant items to your legal resister and document your compliance.
  • Ensure all policy and procedures align with the new governance and compliance requirements.
  • Provide information and training to all relevant to ensure you remain compliant
  • Please note ISO 14001, ISO 45001, ISO 27001 and other standards require you to conduct a compliance evaluation.

Need assistance with these updates? We are here to help: Contact us

Employment

11th June

UK

The Institute for Apprenticeships and Technical Education (Transfer of Functions etc) Act 2025 (Consequential Amendments) Regulations 2025

This legislation will make consequential amendments to the Education (Student Support) Regulations 2011/1986, the Trade Union (Facility Time Publication Requirements) Regulations 2017/328, the Apprenticeships (Miscellaneous Provisions) Regulations 2017/1310, and the Trade Union (Deduction of Union Subscriptions from Wages in the Public Sector) Regulations 2024/143.

Link to legislation

https://www.legislation.gov.uk/uksi/2025/660/contents/made

Environment

19th June

Wales

The Environmental Protection (Single-use Plastic Products) (Wet Wipes) (Wales) Regulations 2025

Regulation 2 adds “wet wipes” to the list of prohibited single-use plastic products in column 1 of the table at paragraph 1 of the Schedule to the Act. This amendment makes a wet wipe that meets the definition of a single-use plastic product a prohibited single-use plastic product for the purposes of the Act.

Link to legislation

https://www.legislation.gov.uk/wsi/2025/716/contents/made

Environment

19th June

Northern Ireland

The Environmental Protection (Disposal of Polychlorinated Biphenyls and other Dangerous Substances) (Amendment) Regulations (Northern Ireland) 2025

Regulation 3(2) amends regulation 4 of the 2000 Regulations so that the references to PCBs in that regulation are to “volumes of fluid containing PCBs” and not to the “volume of PCBs”.

Link to legislation

https://www.legislation.gov.uk/nisr/2025/111/contents/made

Information Security

20th June

UK

The EU Cyber Resilience Act (CRA)

The EU Cyber Resilience Act mandates that manufacturers of digital products, including software, must provide free security updates for at least five years, or for the product’s expected lifetime if it’s shorter. This applies to products sold within the EU. This means developers are obligated to address and fix vulnerabilities during this period and make those security updates available to users at no cost. 

Link to legislation

https://eur-lex.europa.eu/eli/reg/2024/2847

Information Security

20th June

UK

Data (Use and Access) Act 2025

An Act to make provision about access to customer data and business data; to make provision about services consisting of the use of information to ascertain and verify facts about individuals; to make provision about the recording and sharing, and keeping of registers, of information relating to apparatus in streets; to make provision about the keeping and maintenance of registers of births and deaths; to make provision for the regulation of the processing of information relating to identified or identifiable living individuals; to make provision about privacy and electronic communications; to establish the Information Commission; to make provision about information standards for health and social care; to make provision about the grant of smart meter communication licences; to make provision about the disclosure of information to improve public service delivery; to make provision about the retention of information by providers of internet services in connection with investigations into child deaths; to make provision about providing information for purposes related to the carrying out of independent research into online safety matters; to make provision about the retention of biometric data; to make provision about services for the provision of electronic signatures, electronic seals and other trust services; to make provision about works protected by copyright and the development of artificial intelligence systems; to make provision about the creation of purported intimate images; and for connected purposes.

Link to legislation

https://www.legislation.gov.uk/ukpga/2025/18/contents/enacted

Finance

25th June

UK

The Customs (Miscellaneous Amendments) Regulations 2025

This instrument makes various changes to the customs rules that apply when goods are imported or exported. It changes how these goods can be declared to HMRC for customs purposes in certain circumstances. This includes simplifications and other changes that will apply where certain goods are declared for export, or where imported goods are declared for a temporary admission procedure (under which goods can be imported for a temporary period and benefit from import duty relief) or a transit procedure (under which goods can be moved across borders with customs duty becoming chargeable only when the goods reach their final country of destination).

Link to legislation

https://www.legislation.gov.uk/uksi/2025/745/contents/made

Finance

25th June

UK

The International Tax Compliance (Amendment) Regulations 2025

This instrument amends the International Tax Compliance Regulations 2015 (S.I. 2015/878) (“principal Regulations”), which came into force on 15 April 2015. The principal Regulations require financial institutions in the United Kingdom (UK) to report information on certain non-resident account holders to HMRC for exchange under international arrangements. This instrument updates the rules to improve their effectiveness and take account of international developments.

Link to legislation

https://www.legislation.gov.uk/uksi/2025/740/contents/made

Environment

25th June

Scotland

The Environmental Regulation (Enforcement Measures) (Scotland) Amendment Order 2025

This Order amends the Environmental Regulation (Enforcement Measures) (Scotland) Order 2015 (“the 2015 Order”) so as to specify offences under the Producer Responsibility Obligations (Packaging and Packaging Waste) Regulations 2024 as relevant offences under the 2015 Order and to enable the Scottish Environment Protection Agency to impose civil enforcement measures on persons in relation to those offences.

Link to legislation

https://www.legislation.gov.uk/ssi/2025/199/contents/made

Business

26th June

UK

The Enterprise Act 2002 (Amendment of Section 58 Considerations) Order 2025

The Enterprise Act 2002 (Definition of Newspaper) Order 2025 (“the Definition of Newspaper Order”) and the Enterprise Act (Amendment of Section 58 Considerations) Order 2025 (“the Section 58 Considerations Order”) introduce changes to Part 3 of the Enterprise Act 2002 (“the Act”) in relation to mergers involving newspapers and broadcasters. The changes affect the scope of the standard public interest and special public interest media merger regimes in Chapters 2 and 3 of Part 3 of the Act and the Foreign State Influence (FSI) regime in Chapter 3A of Part 3 of the Act.

Link to legislation

https://www.legislation.gov.uk/uksi/2025/737/contents/made

Information Security

27th June

UK

The Online Safety Act 2023 (Fees Notification) Regulations 2025

Providers of regulated services, unless they are exempted by Ofcom under section 83(6) of the Online Safety Act 20231 (‘the Act’), have a statutory duty to notify Ofcom in particular circumstances set out in the Act. The Online Safety Act 2023 (Fees Notifications) Regulations 2025 (the ‘legislation’) have been drafted by Ofcom and describe the evidence, documents or other information that such providers must supply to Ofcom for the purposes of section 83(1) of the Act and describe the way in which it should be supplied to Ofcom.

Link to legislation

https://www.legislation.gov.uk/uksi/2025/747/contents/made


ISO 14001, ISO 45001, ISO 27001 and other standards require you to conduct a compliance evaluation. If you haven’t done this, we can help.

Assent Risk Management has made over 250 UK Legal Register entries available to search on Resilify.io’s Legal Register Database.


Need Support?

If you have questions or need guidance to navigate these updates, our team is here to help.

Jessica Inglis
Jessica Inglis
Articles: 52